Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/34352e36382e39342e302f32332d3233203d3e20323734303832.roa
File:                     34352e36382e39342e302f32332d3233203d3e20323734303832.roa (raw, json)
Hash identifier:          jj0hq5gksnD0UyygmMb4BsJiFa4UaZhEazJhW46t81w=
Subject key identifier:   C7:1E:DB:1D:FE:11:04:62:37:4B:D8:09:9D:CB:D0:CD:75:93:D1:5C
Certificate issuer:       /CN=E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0
Certificate serial:       65BA3829A3E8E4BE16230709E243477E1957F31F
Authority key identifier: E9:83:23:C8:F0:C8:DC:F5:1B:94:82:D5:6B:4B:DF:B8:B7:70:FE:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/34352e36382e39342e302f32332d3233203d3e20323734303832.roa
Signing time:             Tue 19 May 2026 11:43:05 +0000
ROA not before:           Tue 19 May 2026 11:38:05 +0000
ROA not after:            Tue 18 May 2027 11:43:05 +0000
asID:                     274082
IP address blocks:        45.68.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ba:38:29:a3:e8:e4:be:16:23:07:09:e2:43:47:7e:19:57:f3:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0
        Validity
            Not Before: May 19 11:38:05 2026 GMT
            Not After : May 18 11:43:05 2027 GMT
        Subject: CN=C71EDB1DFE110462374BD8099DCBD0CD7593D15C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:be:54:ad:ac:f4:d3:97:ff:32:3e:99:f5:53:
                    45:00:b4:75:52:69:d2:84:09:80:00:ac:87:47:47:
                    95:da:e5:cc:a1:0d:a7:b8:2e:8b:cc:25:8f:b7:33:
                    51:b0:20:1f:ad:9c:9d:d3:67:ca:82:b1:49:7c:91:
                    58:87:5c:d0:38:3b:9f:bb:88:e6:27:37:79:26:8f:
                    f6:3e:b0:06:ed:17:0e:49:b8:47:55:87:78:2f:f7:
                    db:88:4c:76:45:36:df:8a:80:2a:34:27:ed:b2:49:
                    a2:25:c3:07:2c:d1:4b:72:9c:83:bc:ef:7e:fc:34:
                    1a:6f:ae:1b:02:47:9d:6c:75:76:01:d2:5c:21:3a:
                    c7:06:94:a5:b4:13:5d:c1:8b:a8:58:16:71:05:d7:
                    26:01:a7:bd:fc:33:b7:56:95:6a:4d:41:5c:0f:f9:
                    41:1c:9c:0e:41:66:d1:67:bd:23:e3:67:5d:9a:ef:
                    65:cb:9c:87:b2:0b:f2:4d:38:c2:4c:49:71:b5:6a:
                    e6:63:fd:c5:b1:71:8e:4f:5e:e7:f2:58:e2:ef:c7:
                    5f:dd:f0:be:d0:16:4e:3a:dd:e4:03:1a:9e:4a:37:
                    03:b3:08:77:98:87:fd:7f:db:7f:82:80:69:5f:37:
                    14:d5:45:83:45:ae:1e:54:4f:00:69:8c:7b:cf:a4:
                    51:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:1E:DB:1D:FE:11:04:62:37:4B:D8:09:9D:CB:D0:CD:75:93:D1:5C
            X509v3 Authority Key Identifier:
                keyid:E9:83:23:C8:F0:C8:DC:F5:1B:94:82:D5:6B:4B:DF:B8:B7:70:FE:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/34352e36382e39342e302f32332d3233203d3e20323734303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:aa:fe:f9:4a:e6:06:95:4d:9e:15:f4:b7:b3:c8:c2:8f:87:
         4e:05:a9:45:92:68:c8:70:bb:25:3e:e7:8b:a4:b3:47:a4:e7:
         7c:b6:50:c1:7f:c4:49:ce:0e:bc:c5:aa:ab:0c:ae:66:f6:fb:
         21:dc:14:26:90:fd:64:8e:ff:48:0d:5f:13:90:bf:85:49:f2:
         42:e2:75:0c:15:c5:2b:49:fe:ed:4e:a3:14:48:77:05:2a:3a:
         a7:d4:56:b3:92:62:41:62:57:11:99:dd:4b:c9:25:a8:28:ab:
         68:fb:7d:c3:6d:3f:b7:39:c6:e9:9b:84:e9:66:7d:46:49:6e:
         e2:05:f9:9c:72:8b:b2:c8:3b:2b:c4:40:22:f9:d0:ff:18:ad:
         94:3e:84:08:de:29:5d:1f:06:bb:84:35:cb:af:f8:df:f8:f7:
         96:ea:e3:80:52:b9:7c:a9:74:e8:44:aa:0f:9c:43:c4:a9:45:
         02:07:1a:d1:a7:2a:ce:84:5b:b3:75:d6:6f:0a:be:aa:b5:31:
         06:66:0c:bb:f6:1c:60:03:24:7b:e8:32:a8:d7:6c:94:03:8f:
         0e:8c:11:58:ca:91:7f:63:fa:b5:b7:9f:98:c1:50:9e:d8:dc:
         25:db:14:11:e2:8d:99:a9:d2:3f:20:1c:df:9f:94:e5:1a:3c:
         e8:d0:e7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:37:29 2026 by rpki-client