Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/34352e36382e36302e302f32332d3233203d3e203634313638.roa
File:                     34352e36382e36302e302f32332d3233203d3e203634313638.roa (raw, json)
Hash identifier:          Kwk2FWVQWcwueEWC5Fjd0ISrjJQ2TUJsC4HOQzsqSpc=
Subject key identifier:   FD:C8:E9:7F:76:7D:79:0A:04:CA:00:3F:2D:26:F2:B7:28:6E:1F:B6
Certificate issuer:       /CN=06C08D44AF888E8F97E6E20DF100F0BE283ADADD
Certificate serial:       3425942C184A6BDB4835B964B71612BB33F3C34B
Authority key identifier: 06:C0:8D:44:AF:88:8E:8F:97:E6:E2:0D:F1:00:F0:BE:28:3A:DA:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/34352e36382e36302e302f32332d3233203d3e203634313638.roa
Signing time:             Mon 17 Mar 2025 12:55:00 +0000
ROA not before:           Mon 17 Mar 2025 12:50:00 +0000
ROA not after:            Mon 16 Mar 2026 12:55:00 +0000
asID:                     64168
IP address blocks:        45.68.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:25:94:2c:18:4a:6b:db:48:35:b9:64:b7:16:12:bb:33:f3:c3:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06C08D44AF888E8F97E6E20DF100F0BE283ADADD
        Validity
            Not Before: Mar 17 12:50:00 2025 GMT
            Not After : Mar 16 12:55:00 2026 GMT
        Subject: CN=FDC8E97F767D790A04CA003F2D26F2B7286E1FB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:82:dd:42:f9:34:4a:02:37:4f:00:ff:b1:ac:
                    01:e1:a6:45:e2:6e:12:af:2f:59:9a:02:f9:4a:e5:
                    04:7c:03:a0:0d:91:4a:e8:b7:e6:0d:87:5f:78:4b:
                    db:a7:be:ac:53:2c:c6:02:69:00:fe:11:19:11:27:
                    a3:01:e5:77:96:35:e1:eb:ba:41:f2:18:21:cc:63:
                    d6:97:76:30:f1:2d:2c:f1:be:3f:64:0c:98:39:04:
                    a4:5b:f9:fe:bf:dc:3f:ed:8b:1f:da:09:c1:6a:9e:
                    2d:29:8a:11:37:37:24:b8:2b:bf:e6:a0:9b:ed:8c:
                    bd:fd:74:af:8b:b0:36:12:f6:fc:78:f3:a8:10:6b:
                    b8:78:5c:66:6d:fb:81:c0:64:9a:fa:29:2c:49:f3:
                    f3:26:18:c5:18:d5:f5:b2:5a:49:00:a7:29:c3:6e:
                    bd:d6:fd:66:89:e8:38:cd:d7:14:45:3b:21:6b:d2:
                    a9:35:77:b3:9d:9f:16:45:c0:0f:87:e2:c6:6c:77:
                    7d:fb:75:36:c1:68:74:b0:95:01:d3:ea:b2:b2:76:
                    0c:b2:3e:28:97:e1:57:ac:ea:31:3e:d2:ee:47:0a:
                    07:78:38:4b:ff:d2:bd:78:8e:f5:04:06:06:8c:3d:
                    78:fb:74:48:66:e8:e9:b8:37:51:a8:5b:7e:ba:86:
                    88:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C8:E9:7F:76:7D:79:0A:04:CA:00:3F:2D:26:F2:B7:28:6E:1F:B6
            X509v3 Authority Key Identifier:
                keyid:06:C0:8D:44:AF:88:8E:8F:97:E6:E2:0D:F1:00:F0:BE:28:3A:DA:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/34352e36382e36302e302f32332d3233203d3e203634313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:7c:57:79:7d:22:3b:b1:9d:c0:8c:e0:2f:01:1c:2e:fc:b2:
         1e:ea:fc:09:94:19:7f:00:84:75:25:7a:77:fb:5f:16:04:52:
         1b:dd:4e:8e:9a:ae:c1:1e:6a:81:bc:88:6b:52:c4:a5:e1:ef:
         ea:ee:88:8a:29:03:22:95:23:14:f5:36:ca:5a:32:bb:3c:ae:
         ec:8b:bc:92:aa:ff:91:8d:c8:53:e5:d4:f3:12:29:3a:0b:8c:
         0a:24:e2:66:4d:ed:a0:51:e9:0a:a3:73:dc:28:fa:45:b7:5b:
         f6:cf:85:95:1c:19:f9:52:c9:7d:61:5e:f9:9d:a3:c9:21:e3:
         f6:3c:58:1e:cf:c4:7b:0e:03:47:0a:8b:46:e7:5f:40:af:df:
         01:b9:64:3b:95:1b:05:60:d4:e4:da:9e:eb:75:8d:76:70:5d:
         d0:ef:72:f0:3c:49:9c:ef:d5:f9:98:89:79:f7:46:bd:26:91:
         29:14:ab:1a:33:b3:bf:bd:a6:8c:9e:4e:45:d0:e7:81:8b:ee:
         13:a3:6c:28:73:06:aa:c9:93:63:b8:d1:6c:79:7f:1e:8f:7a:
         f9:e0:47:c8:81:8b:5b:40:1d:2c:64:bd:5a:e5:c3:1e:c3:ec:
         70:99:63:27:52:bb:74:7e:66:99:69:de:fc:db:6f:de:d7:79:
         fd:b6:a1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:47 2025 by rpki-client