Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/34352e36382e36302e302f32332d3234203d3e20323733323432.roa
File:                     34352e36382e36302e302f32332d3234203d3e20323733323432.roa (raw, json)
Hash identifier:          cPUcYLfASxaaXsq6MlqNhI4+emM38dZTWX/aAjD/G9A=
Subject key identifier:   D3:71:AF:F7:10:60:C3:A8:D9:E7:E9:A9:EE:5A:F6:8A:66:90:98:E1
Certificate issuer:       /CN=06C08D44AF888E8F97E6E20DF100F0BE283ADADD
Certificate serial:       43F808D734271931E150AFBB7DF8F0AABB5AC9CC
Authority key identifier: 06:C0:8D:44:AF:88:8E:8F:97:E6:E2:0D:F1:00:F0:BE:28:3A:DA:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/34352e36382e36302e302f32332d3234203d3e20323733323432.roa
Signing time:             Fri 13 Mar 2026 18:33:51 +0000
ROA not before:           Fri 13 Mar 2026 18:28:51 +0000
ROA not after:            Fri 12 Mar 2027 18:33:51 +0000
asID:                     273242
IP address blocks:        45.68.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f8:08:d7:34:27:19:31:e1:50:af:bb:7d:f8:f0:aa:bb:5a:c9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06C08D44AF888E8F97E6E20DF100F0BE283ADADD
        Validity
            Not Before: Mar 13 18:28:51 2026 GMT
            Not After : Mar 12 18:33:51 2027 GMT
        Subject: CN=D371AFF71060C3A8D9E7E9A9EE5AF68A669098E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:04:bd:b1:1b:d6:c1:19:d0:d4:14:c1:fe:a8:
                    4a:63:ca:0c:28:03:ee:39:ec:23:66:0f:24:be:d2:
                    c9:37:3a:a8:2e:17:e4:e2:b8:2c:39:41:ed:e9:25:
                    36:80:98:cf:77:ee:a8:74:a6:af:fb:d2:96:9e:17:
                    8f:20:5e:5e:6b:7a:82:68:60:b4:97:f3:4d:51:9a:
                    c7:b9:ca:c7:0c:d6:7c:f0:6c:7f:4e:26:d0:f8:7b:
                    ed:4f:cd:a7:5f:7d:d8:20:7b:e5:53:5b:d4:bd:6e:
                    41:1e:7d:99:5e:1b:a1:a1:b5:5b:cc:2f:0a:a9:83:
                    ad:8f:54:c7:82:46:1d:b2:99:d4:e5:29:99:79:18:
                    4c:35:fe:4d:2a:da:b9:5f:41:b0:35:3d:b2:d3:6d:
                    ae:9f:84:8e:9e:7e:b9:c4:bc:40:23:0a:45:73:63:
                    69:87:33:1c:79:74:5a:74:73:44:db:a5:2b:b4:a9:
                    e4:11:cd:0d:bf:65:95:c8:65:e3:58:a9:31:a6:15:
                    d0:7c:ea:9c:77:56:bb:6a:c7:2f:97:d2:49:dc:70:
                    df:46:6c:20:06:7d:e0:f8:a6:25:69:2d:2b:1b:8a:
                    a2:d4:b0:27:9b:a4:64:41:ee:e0:b8:2c:e2:5c:33:
                    d8:9e:f5:6a:c8:91:f9:49:ee:dd:6e:3e:8a:4f:e4:
                    da:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:71:AF:F7:10:60:C3:A8:D9:E7:E9:A9:EE:5A:F6:8A:66:90:98:E1
            X509v3 Authority Key Identifier:
                keyid:06:C0:8D:44:AF:88:8E:8F:97:E6:E2:0D:F1:00:F0:BE:28:3A:DA:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/34352e36382e36302e302f32332d3234203d3e20323733323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:67:cd:e9:97:bf:99:78:8e:d1:98:7e:bf:f1:ad:2b:a5:47:
         c1:c2:da:15:19:56:6c:c2:b2:7b:9d:c4:66:7b:62:89:2d:13:
         a8:ff:7f:9c:84:93:fc:fd:f2:95:c7:0c:ad:30:4d:a0:74:34:
         f1:4f:7a:f8:a3:98:7f:e3:76:5f:2d:8b:3b:28:7e:fd:07:37:
         78:18:e0:89:e6:a2:ca:bb:e8:9e:0d:3e:1e:92:cd:22:4a:64:
         03:de:92:58:1b:0e:3c:5d:2c:4f:20:1c:49:2a:02:7e:9e:f3:
         a5:26:e9:b7:ba:a0:73:36:5c:d8:8a:e9:86:00:27:26:62:0d:
         dc:f8:03:b7:33:8c:27:d7:a0:8b:b0:0a:78:20:78:ae:96:e1:
         41:45:14:d5:be:4f:ac:06:9c:66:fb:33:ce:d6:62:13:c2:52:
         3f:08:55:b6:74:fd:83:c7:ca:9d:a8:93:32:2d:45:37:41:bc:
         d9:99:39:83:8d:b9:14:6c:11:34:0f:56:17:44:45:0a:38:07:
         e4:40:fe:14:ef:7c:0f:3e:a0:f7:f6:d9:dc:af:16:cd:91:e5:
         7c:f3:90:6f:d0:66:08:fb:fa:9d:da:ef:99:1d:87:d1:79:1d:
         d4:1c:40:6c:12:6f:d3:18:64:d6:a3:8c:9f:cf:98:aa:c2:f6:
         44:0a:a0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:27:48 2026 by rpki-client