Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/34352e36382e33312e302f32342d3234203d3e20323732383036.roa
File:                     34352e36382e33312e302f32342d3234203d3e20323732383036.roa (raw, json)
Hash identifier:          2sn8ef9gFivivwU6xJNnDSsVezRJXTQmlXu/8i3mzkY=
Subject key identifier:   61:08:26:25:F0:41:3E:6F:C3:63:D2:D3:0E:9D:5E:3B:5B:40:81:2B
Certificate issuer:       /CN=626DF4797B0744D66925A916672340501DC8D2CB
Certificate serial:       57B60C05BA92FA71FDB71F27428E3274372A0AAC
Authority key identifier: 62:6D:F4:79:7B:07:44:D6:69:25:A9:16:67:23:40:50:1D:C8:D2:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626DF4797B0744D66925A916672340501DC8D2CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/34352e36382e33312e302f32342d3234203d3e20323732383036.roa
Signing time:             Tue 04 Feb 2025 18:32:54 +0000
ROA not before:           Tue 04 Feb 2025 18:27:54 +0000
ROA not after:            Tue 03 Feb 2026 18:32:54 +0000
asID:                     272806
IP address blocks:        45.68.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/626DF4797B0744D66925A916672340501DC8D2CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/626DF4797B0744D66925A916672340501DC8D2CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626DF4797B0744D66925A916672340501DC8D2CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b6:0c:05:ba:92:fa:71:fd:b7:1f:27:42:8e:32:74:37:2a:0a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=626DF4797B0744D66925A916672340501DC8D2CB
        Validity
            Not Before: Feb  4 18:27:54 2025 GMT
            Not After : Feb  3 18:32:54 2026 GMT
        Subject: CN=61082625F0413E6FC363D2D30E9D5E3B5B40812B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5b:63:fc:a9:10:40:46:59:11:c6:20:b7:ce:
                    7f:ca:aa:85:e5:9a:c2:8f:76:53:fa:a6:f9:75:9e:
                    22:a8:02:24:72:8b:47:a1:bb:20:e8:b2:9c:c2:42:
                    c4:5a:77:1d:03:6a:00:9c:96:a8:af:10:ba:fd:57:
                    89:bb:6b:49:1f:cf:21:04:47:c3:b0:46:87:48:32:
                    b6:51:62:98:01:89:d8:f7:53:16:8e:bd:39:58:6d:
                    36:9b:2c:54:d6:86:14:f9:23:94:9e:73:42:0f:0f:
                    67:0d:dd:6b:10:1b:4b:4c:37:c2:99:c8:e1:c0:41:
                    3c:74:41:c7:bb:57:5a:a4:19:82:e0:49:28:6a:95:
                    22:b5:ef:a8:8f:d7:57:ee:1b:13:fe:5e:4e:aa:43:
                    5a:c0:8d:5f:67:1c:12:a2:cd:ea:c7:1f:57:65:6b:
                    58:3a:9c:39:d1:a3:ca:41:0b:89:b6:c9:62:d1:02:
                    a2:e6:26:f3:e8:e3:b1:a8:80:4c:76:13:d1:71:9b:
                    c5:1c:49:c3:e9:dc:49:a4:c2:99:84:34:5d:f3:62:
                    74:16:46:80:75:d1:b1:94:8c:2a:ce:46:de:bd:b9:
                    53:58:97:49:b2:06:33:29:80:fd:af:66:94:ab:58:
                    d3:85:71:be:d7:18:0b:e3:f6:a7:81:f0:ee:25:82:
                    98:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:08:26:25:F0:41:3E:6F:C3:63:D2:D3:0E:9D:5E:3B:5B:40:81:2B
            X509v3 Authority Key Identifier:
                keyid:62:6D:F4:79:7B:07:44:D6:69:25:A9:16:67:23:40:50:1D:C8:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/626DF4797B0744D66925A916672340501DC8D2CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626DF4797B0744D66925A916672340501DC8D2CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/34352e36382e33312e302f32342d3234203d3e20323732383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:b8:bb:28:2a:94:09:d8:e9:df:f9:37:80:e5:cd:32:6d:70:
         86:d0:3e:84:e7:f6:1c:52:b9:40:35:3a:6d:6f:49:b7:b5:0c:
         ce:8b:4d:19:15:91:46:2d:0e:1a:e0:d4:fb:df:e8:29:39:b6:
         5e:a5:8f:2d:7f:15:67:51:08:37:47:1d:42:c0:bd:42:54:4e:
         29:30:3a:63:05:08:0a:2b:18:f7:d3:d6:62:ae:71:be:fb:9f:
         27:ca:f0:7d:b1:1c:27:ae:60:a3:70:3d:3b:34:ac:15:33:a8:
         b9:e5:d2:35:a7:7e:a8:86:54:18:7f:86:34:2b:67:49:d5:e1:
         b1:eb:92:db:5d:4a:e0:ac:7c:7c:10:f4:b4:09:a9:ff:28:d3:
         82:55:f7:2d:95:97:9c:ba:87:47:97:2d:95:f3:a2:7e:4b:d7:
         0a:8e:1d:29:12:9d:6a:86:47:ee:da:17:23:86:2e:2c:c4:d5:
         21:8b:95:ec:a5:8c:0a:be:59:9f:8d:b2:79:84:06:3b:8b:fe:
         cc:6e:ad:67:51:1c:6e:93:61:97:0c:f0:34:e5:85:c7:cf:ac:
         00:40:ba:96:11:d0:dc:b0:9e:fd:b1:f2:a9:f9:47:a2:6f:c7:
         04:95:b3:ea:bb:f8:11:ac:93:09:5f:b9:66:a7:cf:7f:dc:1d:
         ff:93:52:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:15:52 2025 by rpki-client