Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/34352e36382e33392e302f32342d3234203d3e203634313436.roa
File:                     34352e36382e33392e302f32342d3234203d3e203634313436.roa (raw, json)
Hash identifier:          qJvlDJOmpQH+zHvvurH8HMjMP+VXyM0vjEX32Y4w2FI=
Subject key identifier:   28:19:68:BB:F2:BB:75:04:AE:4E:98:F9:A0:45:C2:2C:88:AA:66:91
Certificate issuer:       /CN=626DF4797B0744D66925A916672340501DC8D2CB
Certificate serial:       118E2F0BB200FC6A774C02593D9C04C0B3EAC5B4
Authority key identifier: 62:6D:F4:79:7B:07:44:D6:69:25:A9:16:67:23:40:50:1D:C8:D2:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626DF4797B0744D66925A916672340501DC8D2CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/34352e36382e33392e302f32342d3234203d3e203634313436.roa
Signing time:             Tue 22 Jul 2025 19:30:01 +0000
ROA not before:           Tue 22 Jul 2025 19:25:01 +0000
ROA not after:            Tue 21 Jul 2026 19:30:01 +0000
asID:                     64146
IP address blocks:        45.68.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/626DF4797B0744D66925A916672340501DC8D2CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/626DF4797B0744D66925A916672340501DC8D2CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626DF4797B0744D66925A916672340501DC8D2CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:8e:2f:0b:b2:00:fc:6a:77:4c:02:59:3d:9c:04:c0:b3:ea:c5:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=626DF4797B0744D66925A916672340501DC8D2CB
        Validity
            Not Before: Jul 22 19:25:01 2025 GMT
            Not After : Jul 21 19:30:01 2026 GMT
        Subject: CN=281968BBF2BB7504AE4E98F9A045C22C88AA6691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8d:91:af:38:8b:d1:36:53:f6:2c:5d:39:e7:
                    25:58:3f:7a:cc:07:70:eb:ee:cf:da:7c:cb:8c:4d:
                    ee:6b:03:98:e6:dc:ce:11:2f:00:c5:7c:cf:8d:98:
                    36:a6:46:2e:d9:39:a5:ba:c5:2c:e2:d0:f5:a9:dc:
                    eb:15:82:db:8f:62:0b:3e:a9:71:59:ec:98:d5:56:
                    1c:91:84:14:9c:31:32:45:04:30:72:a7:c4:2c:34:
                    69:8b:06:12:0a:7f:1e:7f:f0:42:df:ba:f4:af:02:
                    ff:7f:33:01:f4:b1:53:04:eb:3d:be:98:b6:1d:db:
                    fb:10:8c:31:5f:74:00:0d:b7:b0:c9:63:04:1d:3e:
                    4b:c6:35:54:ac:b7:79:e4:7d:55:bb:71:5d:cb:b3:
                    d8:66:62:37:ea:2f:c2:78:8c:28:65:02:ff:c8:c4:
                    42:71:02:91:08:e0:ec:1a:b5:7d:0c:81:c6:5d:0f:
                    c1:40:5b:92:df:d4:72:39:db:d9:d8:0f:8b:5e:ac:
                    fa:f7:42:10:09:09:3e:25:ed:03:80:2a:dd:9f:98:
                    d4:e1:0d:21:31:12:6e:9a:1e:ea:ce:be:92:95:05:
                    e9:67:f7:2b:ce:5b:cd:dc:72:15:01:f6:bc:00:f9:
                    e4:a4:07:f4:a2:4f:8b:26:eb:9f:67:67:73:ad:dc:
                    f1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:19:68:BB:F2:BB:75:04:AE:4E:98:F9:A0:45:C2:2C:88:AA:66:91
            X509v3 Authority Key Identifier:
                keyid:62:6D:F4:79:7B:07:44:D6:69:25:A9:16:67:23:40:50:1D:C8:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/626DF4797B0744D66925A916672340501DC8D2CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626DF4797B0744D66925A916672340501DC8D2CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/34352e36382e33392e302f32342d3234203d3e203634313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:b2:99:9d:e1:f7:50:4a:17:41:6c:5c:a1:f7:87:77:d3:d4:
         1b:b8:a7:b6:54:2c:32:ef:6d:fd:09:dc:3e:dd:36:4c:a2:fe:
         53:57:82:58:c5:b9:8e:01:a1:59:54:d3:61:c0:bb:10:1a:de:
         55:c6:3b:7a:6f:91:97:e4:5f:a7:af:08:8e:76:6a:49:a5:1c:
         4c:8f:c6:e0:19:22:8a:7c:35:55:b3:e3:da:4d:06:4e:aa:60:
         0b:06:49:d7:52:0f:47:69:6b:2e:e2:1f:ed:89:0b:02:53:a8:
         f3:95:b7:23:c7:81:94:9f:d7:a3:06:d7:03:84:d4:fe:1d:bf:
         9d:64:7e:78:16:da:dd:85:d0:a3:01:8f:9b:33:ce:2d:5e:8e:
         2f:16:44:90:8b:89:23:4f:68:f1:cd:68:c9:ff:81:a8:cb:00:
         7f:b0:2f:22:21:6b:23:2c:8e:96:1b:9b:44:ea:05:0c:4c:81:
         1a:27:38:67:94:ca:b9:56:97:9f:8f:28:5a:35:48:3d:b6:cb:
         55:94:47:6f:b2:56:86:84:54:d9:18:99:5b:5f:c1:55:76:32:
         24:1e:53:4f:08:83:51:1f:3c:7e:d8:f8:07:be:88:8e:c7:6c:
         59:01:75:35:d5:2d:57:1d:0a:58:3e:46:4f:06:8d:8b:28:dc:
         60:56:77:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:56:10 2025 by rpki-client