Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34312e302f32342d3234203d3e20323733383637.roa
File:                     34352e36382e34312e302f32342d3234203d3e20323733383637.roa (raw, json)
Hash identifier:          Oyi2IxsSJ9fLJOOANkufQMgrxdOSeF66pKr1m2+gqw4=
Subject key identifier:   AD:1E:4F:F0:ED:7B:B7:48:36:F1:83:DB:7A:2B:CF:06:00:E9:E2:04
Certificate issuer:       /CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
Certificate serial:       25ED426B32E71992C4A3E6AA453E287379BB8D17
Authority key identifier: CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34312e302f32342d3234203d3e20323733383637.roa
Signing time:             Sat 16 May 2026 06:42:48 +0000
ROA not before:           Sat 16 May 2026 06:37:48 +0000
ROA not after:            Sat 15 May 2027 06:42:48 +0000
asID:                     273867
IP address blocks:        45.68.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ed:42:6b:32:e7:19:92:c4:a3:e6:aa:45:3e:28:73:79:bb:8d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
        Validity
            Not Before: May 16 06:37:48 2026 GMT
            Not After : May 15 06:42:48 2027 GMT
        Subject: CN=AD1E4FF0ED7BB74836F183DB7A2BCF0600E9E204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:91:f2:54:b2:ba:b7:8c:57:4a:e5:bf:02:4a:
                    a4:f7:a6:23:bd:5e:6d:2c:be:56:20:9f:0d:6b:ae:
                    34:4a:1f:27:1a:a5:15:90:d1:31:f1:02:83:92:47:
                    92:fc:c1:03:ec:b7:a5:82:37:5d:97:45:8d:6d:e7:
                    69:c4:1a:1a:d0:4c:bf:8e:ff:c7:11:12:13:fc:fe:
                    19:65:1b:fe:a2:d0:ba:8a:35:cb:af:14:45:b8:65:
                    16:c5:e3:5d:7a:ea:3d:0d:f9:ab:7e:6b:fa:25:69:
                    c6:b4:d9:27:e6:b5:3c:7c:b4:f2:5f:4d:a1:16:e7:
                    4a:86:db:9a:da:fe:b6:ba:a7:3e:8a:30:ce:b5:05:
                    46:f1:4c:5e:a6:f6:5a:9b:bd:13:16:88:27:e2:15:
                    39:1c:b7:15:90:9b:95:87:ae:6b:de:76:56:3d:fe:
                    39:c1:5e:ab:e0:a0:78:e4:d5:d9:24:cd:bc:70:b0:
                    4a:c2:91:99:70:ba:2b:bf:38:7b:c2:de:aa:31:cc:
                    19:b6:93:62:f4:0c:18:1a:fd:a2:77:4b:72:8d:6c:
                    92:e2:f9:88:e9:dc:3b:31:9b:e5:e9:4f:aa:44:2c:
                    7f:62:80:2d:30:70:11:9a:96:fd:a8:08:4e:77:e6:
                    e0:1b:61:aa:08:27:67:57:ec:57:c1:e1:e7:eb:3c:
                    9b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1E:4F:F0:ED:7B:B7:48:36:F1:83:DB:7A:2B:CF:06:00:E9:E2:04
            X509v3 Authority Key Identifier:
                keyid:CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34312e302f32342d3234203d3e20323733383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:4a:2c:ee:05:8a:37:c3:a5:b0:e3:18:4e:7f:54:f5:e7:9b:
         34:82:19:d2:e9:a3:96:c8:67:3b:e8:77:0f:4a:bf:c3:2b:64:
         3c:7c:49:c8:8e:83:d6:ee:b3:23:68:0b:f3:8c:92:a3:19:a8:
         3c:3f:fe:e6:46:ca:8a:2f:fc:62:80:28:ab:23:f8:dc:d2:58:
         f7:3b:3a:1f:42:78:80:ab:a1:bf:27:f7:b4:ca:ea:d9:09:db:
         03:b6:0c:34:a2:0d:48:bc:3f:21:58:74:62:86:ff:de:8d:cc:
         67:18:e3:74:1e:5a:bc:88:18:1f:28:99:6e:91:7c:03:98:38:
         e7:57:39:25:38:41:16:11:e6:94:6f:73:8a:49:9d:fd:b6:8c:
         42:bc:3f:ca:c5:e6:8c:33:7f:78:78:64:fb:5a:46:6e:0d:cb:
         b8:bb:bb:21:86:61:a4:b8:d9:83:2e:8e:ce:74:2f:9c:0e:6f:
         82:5d:c8:d9:ff:66:d3:4b:bb:be:fb:bc:70:d1:9e:24:79:63:
         e3:04:81:6f:b6:95:de:0d:25:55:7b:83:48:4f:27:2d:63:45:
         ae:1c:33:16:11:3f:9a:ad:e1:5d:da:1a:50:ba:5f:d9:37:bb:
         ff:a3:d1:09:51:35:cf:63:96:b2:67:33:6f:c2:a8:1c:12:5c:
         8d:da:35:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:37:34 2026 by rpki-client