Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DD38D0649978ADD881266F6A1512EB73C94D5BE83588AA19A1C6C694B8BA1602/0/34352e36382e3132312e302f32342d3234203d3e203634313436.roa
File:                     34352e36382e3132312e302f32342d3234203d3e203634313436.roa (raw, json)
Hash identifier:          vfooyDiCGi9z2jPmvRMmL/pfXByKoHhYEEp2xW78K4I=
Subject key identifier:   46:93:92:A1:C4:6C:02:C5:F9:19:7D:87:FD:68:74:51:7A:0B:76:DA
Certificate issuer:       /CN=1595F73DFB87BA563655DE9D91711998FE094901
Certificate serial:       67C97F69461579881E2E379C8920F93E5A2FC8BB
Authority key identifier: 15:95:F7:3D:FB:87:BA:56:36:55:DE:9D:91:71:19:98:FE:09:49:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1595F73DFB87BA563655DE9D91711998FE094901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD38D0649978ADD881266F6A1512EB73C94D5BE83588AA19A1C6C694B8BA1602/0/34352e36382e3132312e302f32342d3234203d3e203634313436.roa
Signing time:             Fri 31 Jul 2026 16:45:00 +0000
ROA not before:           Fri 31 Jul 2026 16:40:00 +0000
ROA not after:            Fri 30 Jul 2027 16:45:00 +0000
asID:                     64146
IP address blocks:        45.68.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD38D0649978ADD881266F6A1512EB73C94D5BE83588AA19A1C6C694B8BA1602/0/1595F73DFB87BA563655DE9D91711998FE094901.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD38D0649978ADD881266F6A1512EB73C94D5BE83588AA19A1C6C694B8BA1602/0/1595F73DFB87BA563655DE9D91711998FE094901.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1595F73DFB87BA563655DE9D91711998FE094901.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Sep 2026 18:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:c9:7f:69:46:15:79:88:1e:2e:37:9c:89:20:f9:3e:5a:2f:c8:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1595F73DFB87BA563655DE9D91711998FE094901
        Validity
            Not Before: Jul 31 16:40:00 2026 GMT
            Not After : Jul 30 16:45:00 2027 GMT
        Subject: CN=469392A1C46C02C5F9197D87FD6874517A0B76DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9a:90:0d:9b:15:b5:d1:68:38:8d:57:b9:d7:
                    17:c0:34:98:2a:f0:42:e1:6e:9a:10:f8:7c:57:89:
                    70:81:59:e4:e6:3a:6f:75:50:ec:64:b6:89:bd:79:
                    51:07:6b:d4:9a:8e:4e:98:eb:d2:3c:1a:02:72:7d:
                    e6:0e:ac:33:bd:4d:af:3c:a4:8c:14:ad:23:0f:66:
                    3a:50:41:17:ab:75:24:19:c7:64:8c:59:b7:41:a1:
                    d8:25:40:e1:c6:59:04:1e:9e:eb:af:58:f2:4d:d1:
                    07:f4:97:4a:32:33:81:96:30:93:a7:c9:bf:8d:c8:
                    24:df:e1:ad:0d:3b:90:ef:ac:3f:b3:bb:5a:85:0d:
                    6c:1c:7a:e5:c5:69:03:22:b3:a0:a3:d9:15:10:80:
                    fe:f1:a2:83:c2:76:8f:1f:ea:41:70:05:a3:30:25:
                    0a:bf:70:59:7f:93:38:5c:68:7e:c7:04:da:1c:64:
                    7b:e9:2d:78:60:e0:e5:49:91:2f:42:94:bd:9b:5e:
                    b9:ee:d5:de:e5:3a:a7:70:59:7a:49:c0:42:be:9f:
                    60:dd:4d:37:dc:bb:36:bc:ad:ab:43:bb:1f:05:19:
                    d8:23:ee:f9:ab:76:4d:fd:8f:b7:df:4d:1e:95:5c:
                    0d:b7:0a:e5:de:05:ad:ed:6d:37:d8:14:96:a6:b2:
                    79:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:93:92:A1:C4:6C:02:C5:F9:19:7D:87:FD:68:74:51:7A:0B:76:DA
            X509v3 Authority Key Identifier:
                keyid:15:95:F7:3D:FB:87:BA:56:36:55:DE:9D:91:71:19:98:FE:09:49:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD38D0649978ADD881266F6A1512EB73C94D5BE83588AA19A1C6C694B8BA1602/0/1595F73DFB87BA563655DE9D91711998FE094901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1595F73DFB87BA563655DE9D91711998FE094901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD38D0649978ADD881266F6A1512EB73C94D5BE83588AA19A1C6C694B8BA1602/0/34352e36382e3132312e302f32342d3234203d3e203634313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:39:58:96:43:e3:9a:bd:10:53:4d:ca:a2:c1:58:db:21:14:
         ce:93:d0:bf:08:50:a5:21:c3:68:7b:d2:4d:ab:57:15:da:4f:
         5d:ec:79:d6:67:ea:84:ae:95:e5:9b:be:4a:36:40:87:f4:e3:
         67:80:02:3e:97:97:a6:03:66:ea:3b:e4:92:95:a7:73:98:25:
         5d:50:ce:4e:a7:bb:6e:c1:00:4b:53:38:1f:c9:cc:82:29:c9:
         f9:9b:2b:27:74:00:7e:8e:47:10:f3:e7:84:8a:b6:ba:54:2e:
         a5:d7:3b:a0:4c:6e:b2:9a:84:ca:92:5d:22:65:1f:49:d6:73:
         a7:c7:4e:60:95:17:de:dc:c4:c5:b4:94:e1:06:70:b7:89:a6:
         10:67:8f:5a:15:43:94:03:ed:95:6e:72:28:09:f6:3b:a9:31:
         0f:bf:ee:61:59:e9:38:1e:f4:0b:29:39:1c:cd:20:20:f4:11:
         b1:73:f9:1f:c1:5e:51:08:d1:fa:33:2c:50:93:1a:83:90:0e:
         34:6c:7e:63:3f:e4:59:a8:34:5a:89:32:cd:be:ca:97:04:0b:
         1c:30:ae:1d:cd:66:e8:fa:cd:96:b9:51:f7:a0:a9:1c:69:4b:
         32:5f:8d:19:a1:85:ad:52:48:30:e6:eb:4d:e8:0b:9a:6c:30:
         e4:19:d9:86
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUZ8l/aUYVeYgeLjeciSD5PlovyLswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU5NUY3M0RGQjg3QkE1NjM2NTVERTlEOTE3MTE5OThG
RTA5NDkwMTAeFw0yNjA3MzExNjQwMDBaFw0yNzA3MzAxNjQ1MDBaMDMxMTAvBgNV
BAMTKDQ2OTM5MkExQzQ2QzAyQzVGOTE5N0Q4N0ZENjg3NDUxN0EwQjc2REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGmpANmxW10Wg4jVe51xfANJgq
8ELhbpoQ+HxXiXCBWeTmOm91UOxktom9eVEHa9Sajk6Y69I8GgJyfeYOrDO9Ta88
pIwUrSMPZjpQQRerdSQZx2SMWbdBodglQOHGWQQenuuvWPJN0Qf0l0oyM4GWMJOn
yb+NyCTf4a0NO5DvrD+zu1qFDWwceuXFaQMis6Cj2RUQgP7xooPCdo8f6kFwBaMw
JQq/cFl/kzhcaH7HBNocZHvpLXhg4OVJkS9ClL2bXrnu1d7lOqdwWXpJwEK+n2Dd
TTfcuza8ratDux8FGdgj7vmrdk39j7ffTR6VXA23CuXeBa3tbTfYFJamsnmNAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQURpOSocRsAsX5GX2H/Wh0UXoLdtowHwYDVR0j
BBgwFoAUFZX3PfuHulY2Vd6dkXEZmP4JSQEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERDM4RDA2NDk5NzhBREQ4ODEyNjZGNkExNTEyRUI3M0M5
NEQ1QkU4MzU4OEFBMTlBMUM2QzY5NEI4QkExNjAyLzAvMTU5NUY3M0RGQjg3QkE1
NjM2NTVERTlEOTE3MTE5OThGRTA5NDkwMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNTk1RjczREZCODdCQTU2MzY1
NURFOUQ5MTcxMTk5OEZFMDk0OTAxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREQzOEQwNjQ5OTc4QUREODgxMjY2RjZBMTUxMkVCNzNDOTRENUJFODM1
ODhBQTE5QTFDNkM2OTRCOEJBMTYwMi8wLzM0MzUyZTM2MzgyZTMxMzIzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzQzMTM0MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtRHkwDQYJ
KoZIhvcNAQELBQADggEBABw5WJZD45q9EFNNyqLBWNshFM6T0L8IUKUhw2h70k2r
VxXaT13sedZn6oSuleWbvko2QIf042eAAj6Xl6YDZuo75JKVp3OYJV1Qzk6nu27B
AEtTOB/JzIIpyfmbKyd0AH6ORxDz54SKtrpULqXXO6BMbrKahMqSXSJlH0nWc6fH
TmCVF97cxMW0lOEGcLeJphBnj1oVQ5QD7ZVucigJ9jupMQ+/7mFZ6Tge9AspORzN
ICD0EbFz+R/BXlEI0fozLFCTGoOQDjRsfmM/5FmoNFqJMs2+ypcECxwwrh3NZuj6
zZa5UfegqRxpSzJfjRmhha1SSDDm603oC5psMOQZ2YY=
-----END CERTIFICATE-----
Generated at Fri Sep 11 05:23:05 2026 by rpki-client