Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34322e302f32342d3234203d3e20323733383637.roa
File:                     34352e36382e34322e302f32342d3234203d3e20323733383637.roa (raw, json)
Hash identifier:          BOyQS0Z2z5ffpruYC7TRdUljVh5RX0+/nC8zZEy/MrA=
Subject key identifier:   09:E2:69:E4:C1:EC:23:C4:D0:85:28:15:3B:5B:50:07:F9:FB:82:41
Certificate issuer:       /CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
Certificate serial:       710EC252BCC1272328C1D9CFD6AF467D22E5D9FD
Authority key identifier: CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34322e302f32342d3234203d3e20323733383637.roa
Signing time:             Sat 16 May 2026 06:42:48 +0000
ROA not before:           Sat 16 May 2026 06:37:48 +0000
ROA not after:            Sat 15 May 2027 06:42:48 +0000
asID:                     273867
IP address blocks:        45.68.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0e:c2:52:bc:c1:27:23:28:c1:d9:cf:d6:af:46:7d:22:e5:d9:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
        Validity
            Not Before: May 16 06:37:48 2026 GMT
            Not After : May 15 06:42:48 2027 GMT
        Subject: CN=09E269E4C1EC23C4D08528153B5B5007F9FB8241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3b:6f:66:35:c7:ca:89:a5:f5:41:43:20:56:
                    12:eb:e8:3a:f3:c2:8d:25:59:4b:de:da:0c:de:61:
                    0a:03:eb:61:0e:8e:47:b5:52:06:f0:76:35:cc:70:
                    d0:f2:08:7d:98:b3:50:04:d9:37:d4:70:74:b1:ed:
                    ab:87:53:17:f3:8e:d0:30:df:a6:7c:9b:8b:82:19:
                    8d:a9:59:5e:45:fa:fc:ed:0d:0b:ab:80:72:dd:45:
                    a6:d8:d3:74:07:bd:2e:c9:1a:a4:a1:8d:35:fd:22:
                    7d:b2:41:8d:63:9d:e0:45:de:d6:03:65:d4:fc:d1:
                    d7:ce:2a:c6:08:e7:5c:85:40:20:d2:48:e9:3b:eb:
                    22:50:82:07:cb:6a:c8:08:41:07:d3:18:ff:12:45:
                    35:3a:ac:ef:52:be:b8:f9:5f:6c:6c:b6:a6:45:18:
                    22:a9:13:33:63:81:b6:83:eb:73:c5:95:8e:03:79:
                    23:03:2a:de:c1:ac:2f:75:08:43:8a:b0:9c:f4:18:
                    41:3c:f2:31:79:cf:30:8a:16:63:0f:81:ed:e0:22:
                    d9:19:c7:44:64:4a:93:c8:8e:ad:10:6a:7e:bd:64:
                    06:db:6b:65:7c:f9:7c:58:6d:f5:7a:49:b4:64:68:
                    25:24:d9:74:8d:56:c4:76:fc:00:76:87:80:71:1c:
                    28:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E2:69:E4:C1:EC:23:C4:D0:85:28:15:3B:5B:50:07:F9:FB:82:41
            X509v3 Authority Key Identifier:
                keyid:CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34322e302f32342d3234203d3e20323733383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:45:ae:dc:5e:bc:a6:cf:2a:0b:0c:e5:d7:37:6b:d1:2f:9b:
         77:66:4b:61:5c:2b:91:1b:1e:be:18:25:b1:f5:21:f6:11:4b:
         cb:7a:8b:64:81:d3:47:a3:a8:3a:6c:38:aa:12:e6:2d:de:6b:
         68:25:f4:14:32:01:28:2f:26:cf:53:ec:f5:48:af:f8:12:e1:
         5d:cb:f6:82:9b:62:8c:8c:1c:26:ac:72:3d:26:a2:a5:2c:12:
         04:09:89:16:e1:c3:9b:e0:ad:ed:49:1e:6b:ac:e6:54:fd:af:
         3e:0a:a7:3c:61:f8:1e:85:76:cb:a2:8a:df:23:ee:76:2f:9f:
         b5:77:82:51:7d:59:d5:e9:25:ea:a7:64:05:3b:d3:4e:40:e8:
         84:10:e6:bb:c7:e5:e1:1d:e5:e9:ea:e5:f5:8b:2f:2e:4d:bd:
         dd:03:a2:2d:84:72:df:de:9e:c8:d4:cc:f5:09:27:b0:54:81:
         a5:d6:b2:56:1f:cf:68:d8:c2:ac:f5:02:f3:c0:98:c9:77:05:
         db:87:60:2a:f6:ca:18:5f:42:fc:44:05:0b:ae:fa:a6:61:6a:
         d6:de:26:61:92:91:96:40:bf:b1:46:26:cb:a5:50:55:ad:e8:
         7a:d1:29:f2:3f:5d:3f:0c:80:31:55:28:44:95:f2:41:db:91:
         03:04:3d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:37:28 2026 by rpki-client