Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/34352e36382e36362e302f32342d3234203d3e2030.roa
File:                     34352e36382e36362e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          KF+YHkK33CsBabMsfg3gakzd+cqTjlUe+9ufA0T60Ns=
Subject key identifier:   84:57:58:D7:6D:1F:AD:67:1C:3A:52:D7:37:0D:F3:AC:99:DD:1B:36
Certificate issuer:       /CN=42088D6FEC3FD14B71DEDB78860C90D825571466
Certificate serial:       5642716039034EBA7E17DF50E7B6DB70409EB180
Authority key identifier: 42:08:8D:6F:EC:3F:D1:4B:71:DE:DB:78:86:0C:90:D8:25:57:14:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/34352e36382e36362e302f32342d3234203d3e2030.roa
Signing time:             Mon 07 Sep 2026 22:34:14 +0000
ROA not before:           Mon 07 Sep 2026 22:29:14 +0000
ROA not after:            Mon 06 Sep 2027 22:34:14 +0000
asID:                     0
IP address blocks:        45.68.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 01:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:42:71:60:39:03:4e:ba:7e:17:df:50:e7:b6:db:70:40:9e:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42088D6FEC3FD14B71DEDB78860C90D825571466
        Validity
            Not Before: Sep  7 22:29:14 2026 GMT
            Not After : Sep  6 22:34:14 2027 GMT
        Subject: CN=845758D76D1FAD671C3A52D7370DF3AC99DD1B36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dd:4b:a5:9f:ee:e5:6f:e4:3e:34:ea:9a:eb:
                    98:87:23:b2:64:31:c0:bf:3a:25:56:41:ab:27:85:
                    7b:1b:c3:03:4f:93:3f:7a:18:47:f9:54:17:e2:b9:
                    80:2d:e1:bb:9c:6e:cb:7f:a1:d1:ff:35:ce:00:fb:
                    df:da:f6:71:bd:2a:e3:09:2b:3f:1d:7e:ad:5f:17:
                    b7:92:c2:df:ab:95:43:22:87:a1:13:f1:57:d4:06:
                    be:62:cc:3f:db:ac:34:51:f8:71:38:8b:11:a4:9b:
                    dd:1a:92:8b:db:f1:1c:1b:7f:fc:83:6d:ac:f8:6e:
                    68:63:db:cb:7d:b4:a3:07:8a:a9:58:7d:10:94:d5:
                    3e:fe:72:b8:07:b3:45:6e:63:4d:95:a0:1a:7e:1b:
                    b4:68:fd:4e:9f:01:1f:f0:6c:ad:65:8d:ef:c3:59:
                    6f:0d:24:c9:64:1a:8b:5f:37:b0:c1:ef:9f:2a:e0:
                    fb:55:64:53:05:80:20:e5:0e:39:bd:08:d1:13:91:
                    c5:62:4e:f3:28:6c:49:94:54:91:d1:44:3e:0c:43:
                    de:33:3f:10:ef:04:73:f5:02:23:c6:68:07:7e:19:
                    5d:43:e8:1f:4d:e7:bb:dd:0c:d1:d9:84:0f:a4:d5:
                    ba:21:70:2b:f9:62:2d:ad:73:37:8e:5b:75:e8:aa:
                    9b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:57:58:D7:6D:1F:AD:67:1C:3A:52:D7:37:0D:F3:AC:99:DD:1B:36
            X509v3 Authority Key Identifier:
                keyid:42:08:8D:6F:EC:3F:D1:4B:71:DE:DB:78:86:0C:90:D8:25:57:14:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/34352e36382e36362e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:a2:2a:ec:cb:00:5f:58:fd:43:f8:31:7c:9e:f2:38:4c:7b:
         38:03:e5:18:83:4f:c1:dc:e5:05:12:e8:eb:7e:33:b8:26:94:
         96:78:32:30:ba:29:cf:bf:b3:b3:ae:0d:64:94:e3:2e:96:ef:
         02:cc:ee:09:46:d8:ae:60:09:98:cf:98:84:b2:b8:88:b4:d2:
         6e:02:fe:12:cb:d3:f9:84:59:f5:59:db:67:8d:65:ff:d5:de:
         7e:4d:bc:98:d5:c3:6e:75:7f:7a:0a:88:65:29:13:53:c7:27:
         78:fd:19:bf:4e:67:02:d7:8a:cd:fa:74:77:12:6f:21:2a:74:
         dc:1e:a1:99:80:ce:02:57:f8:08:02:d2:05:ae:70:70:3b:fe:
         8e:55:b8:71:5b:c7:72:88:af:62:d6:cd:6b:5b:68:a7:7c:bb:
         bf:8d:f1:0c:36:87:c0:c7:e6:e7:5d:aa:dc:ec:b8:fd:b5:01:
         6c:3e:32:90:ec:ec:cb:c8:11:81:1c:93:14:b4:29:a5:22:9c:
         1e:ae:6b:0b:83:02:d6:a5:d4:05:3b:08:79:fe:eb:2c:2c:fa:
         ab:3e:3b:43:df:7a:41:75:37:f5:70:c1:3d:ce:9b:c3:8b:d6:
         d2:04:1c:0e:56:d2:6b:d0:90:c9:37:4d:76:3e:d0:cc:f9:fa:
         ec:ad:6e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:50:09 2026 by rpki-client