Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/34352e36382e36362e302f32342d3234203d3e2030.roa
File:                     34352e36382e36362e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          JGyFZ4BFGttL53UZz0PgEcnVxp1/VLsh3fd6AanA0ko=
Subject key identifier:   EC:91:2C:B7:63:3B:9D:4C:BA:35:34:61:A8:6E:9C:AB:DA:4A:D9:17
Certificate issuer:       /CN=42088D6FEC3FD14B71DEDB78860C90D825571466
Certificate serial:       68B44638601D9FFA63B0B9FD2E97D69569A37F6F
Authority key identifier: 42:08:8D:6F:EC:3F:D1:4B:71:DE:DB:78:86:0C:90:D8:25:57:14:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/34352e36382e36362e302f32342d3234203d3e2030.roa
Signing time:             Mon 06 Oct 2025 21:49:43 +0000
ROA not before:           Mon 06 Oct 2025 21:44:43 +0000
ROA not after:            Mon 05 Oct 2026 21:49:43 +0000
asID:                     0
IP address blocks:        45.68.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b4:46:38:60:1d:9f:fa:63:b0:b9:fd:2e:97:d6:95:69:a3:7f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42088D6FEC3FD14B71DEDB78860C90D825571466
        Validity
            Not Before: Oct  6 21:44:43 2025 GMT
            Not After : Oct  5 21:49:43 2026 GMT
        Subject: CN=EC912CB7633B9D4CBA353461A86E9CABDA4AD917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ce:d1:ac:70:db:de:40:fb:14:a7:f0:32:45:
                    89:0a:63:11:db:a5:f7:c1:23:5d:94:cb:dc:35:47:
                    2c:79:95:5e:dc:f7:a1:64:ca:3d:fc:3d:66:8e:2d:
                    87:2b:3a:5e:8f:30:47:ca:fc:0f:67:28:53:81:a5:
                    90:f5:2e:49:66:95:d5:3a:cc:2c:9b:0a:0b:7d:cb:
                    49:f6:78:df:df:6e:5e:a6:d6:ab:99:89:33:ce:f9:
                    2a:1a:d6:ee:0f:7f:a4:28:8c:76:4a:63:db:75:3b:
                    a5:d7:24:eb:cd:ab:3d:be:a3:7e:a6:6e:22:c6:94:
                    29:4d:99:c3:8e:65:ed:8c:36:f1:39:6a:cc:2e:27:
                    4b:8c:a5:9a:04:8e:0f:31:54:80:c4:08:02:c0:83:
                    e2:78:5c:97:7c:08:f9:90:a9:be:be:6d:fb:b9:f9:
                    c3:14:7b:c3:af:54:b4:24:41:36:59:2a:b1:79:72:
                    47:e9:4e:b0:2c:72:12:48:df:52:2e:3f:4d:4b:4f:
                    27:ae:4b:cd:8f:ac:6b:72:14:fb:71:96:e6:6c:ba:
                    9e:dc:ea:77:59:5b:89:cd:b5:76:c4:5c:48:4b:13:
                    7b:f2:e7:86:47:9c:05:9f:20:64:1b:21:f0:3d:8a:
                    28:ff:61:33:5d:0c:07:37:fa:32:10:90:60:70:50:
                    0d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:91:2C:B7:63:3B:9D:4C:BA:35:34:61:A8:6E:9C:AB:DA:4A:D9:17
            X509v3 Authority Key Identifier:
                keyid:42:08:8D:6F:EC:3F:D1:4B:71:DE:DB:78:86:0C:90:D8:25:57:14:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/34352e36382e36362e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:ea:1f:df:12:2c:58:40:38:7e:80:ae:5d:92:e5:6c:fe:72:
         df:62:f9:21:d0:5c:0d:50:e8:de:47:8a:7f:a5:7e:3e:aa:4a:
         b1:58:37:cf:dc:36:ae:c1:e6:4e:0b:81:3b:60:56:94:12:dc:
         0f:79:c2:16:c3:9d:c8:9e:dc:d8:4d:7f:dc:4a:a2:34:92:f5:
         7d:c6:eb:56:12:f9:cd:76:f4:2c:ac:a5:e1:01:2d:5d:dc:cd:
         80:6a:ac:e6:ec:ea:e2:15:88:50:80:e8:32:02:9e:56:41:b6:
         07:5c:92:1a:93:2c:96:1e:a7:3f:5d:bf:ba:2a:73:81:b7:d0:
         f4:e4:13:fc:78:fc:e8:db:c0:f0:a7:8b:04:37:04:6f:89:40:
         c4:02:d6:3e:00:1e:de:0c:8d:34:c1:f3:6a:38:8d:57:7d:38:
         29:df:c1:eb:57:0f:93:8a:85:49:bc:58:c7:fa:bd:33:b1:a3:
         f5:c5:16:ac:9c:4d:15:30:18:84:cf:3d:09:dc:89:92:d6:78:
         08:19:63:ac:ea:19:ca:24:c8:1c:cf:6e:8d:6f:e8:78:25:21:
         1d:f9:e4:25:89:17:74:ab:ad:ce:9f:dd:a4:07:e8:2a:3e:da:
         ea:f5:9e:35:77:a8:12:e2:d5:d3:f0:c7:22:a7:16:23:32:9b:
         19:e6:fb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:26:21 2025 by rpki-client