Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/34352e36382e36302e302f32332d3234203d3e203634313638.roa
File:                     34352e36382e36302e302f32332d3234203d3e203634313638.roa (raw, json)
Hash identifier:          uPpx8qexoPxRkLWn6jr0K3/SbqSkBxQ5Z2pZ1triIyU=
Subject key identifier:   FD:39:66:E3:2D:3F:DF:62:EC:FF:85:ED:33:C5:4E:18:8A:60:6F:A4
Certificate issuer:       /CN=06C08D44AF888E8F97E6E20DF100F0BE283ADADD
Certificate serial:       4D0DE3D8A3684B634C3820B9CBAFFABCF7EC8FA5
Authority key identifier: 06:C0:8D:44:AF:88:8E:8F:97:E6:E2:0D:F1:00:F0:BE:28:3A:DA:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/34352e36382e36302e302f32332d3234203d3e203634313638.roa
Signing time:             Wed 15 Jul 2026 22:58:00 +0000
ROA not before:           Wed 15 Jul 2026 22:53:00 +0000
ROA not after:            Wed 14 Jul 2027 22:58:00 +0000
asID:                     64168
IP address blocks:        45.68.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0d:e3:d8:a3:68:4b:63:4c:38:20:b9:cb:af:fa:bc:f7:ec:8f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06C08D44AF888E8F97E6E20DF100F0BE283ADADD
        Validity
            Not Before: Jul 15 22:53:00 2026 GMT
            Not After : Jul 14 22:58:00 2027 GMT
        Subject: CN=FD3966E32D3FDF62ECFF85ED33C54E188A606FA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7f:85:0d:98:42:b0:5e:da:a5:d2:51:87:69:
                    06:83:48:e4:92:f7:54:c5:8f:85:39:06:a7:47:a2:
                    89:7e:fb:e3:a0:5c:93:72:69:bf:1d:33:63:47:8e:
                    4c:50:e3:c6:71:d6:78:79:88:80:b2:6f:fa:6f:2e:
                    c2:b6:dc:b5:83:03:94:b1:7c:43:a1:c8:0d:ce:73:
                    37:d0:19:1e:4d:33:1d:06:5d:ad:fc:9a:6d:bd:6f:
                    ae:82:d6:3e:39:6d:5d:43:a3:97:f5:e1:a4:87:1d:
                    06:bf:dd:26:05:9a:b4:62:85:35:c0:80:d7:52:97:
                    91:66:e3:27:a5:a3:26:db:b1:2b:fb:75:1a:9f:97:
                    8c:4e:ab:40:d2:2a:32:a1:6a:c3:1c:39:66:0a:fe:
                    0e:86:38:51:ad:82:ab:a6:46:5b:0c:2b:ef:34:6e:
                    8b:d7:37:d6:fb:92:3b:69:00:22:3e:c0:08:7b:59:
                    3f:a6:e1:9b:69:b8:84:b5:91:ea:be:9f:d7:60:a5:
                    96:16:f7:31:35:bf:d9:df:12:01:b5:e4:3e:77:15:
                    2b:a7:e9:83:e8:fe:57:3f:f8:b1:97:bd:ba:2f:1f:
                    f0:18:e2:01:39:0f:36:8c:27:44:95:8c:ed:c9:4f:
                    13:3d:3a:21:be:f4:5b:3b:ce:71:a2:34:b6:ef:d7:
                    7c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:39:66:E3:2D:3F:DF:62:EC:FF:85:ED:33:C5:4E:18:8A:60:6F:A4
            X509v3 Authority Key Identifier:
                keyid:06:C0:8D:44:AF:88:8E:8F:97:E6:E2:0D:F1:00:F0:BE:28:3A:DA:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06C08D44AF888E8F97E6E20DF100F0BE283ADADD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90C7B82D751C0121B1DF483FCE52F8072A0A500CA2F228B4FDE35D8E842C5C6D/0/34352e36382e36302e302f32332d3234203d3e203634313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:44:d7:25:97:4a:fa:dd:23:89:93:df:60:4c:08:9f:99:1b:
         d1:b3:14:59:bb:75:79:0e:d7:6d:6b:85:1c:b7:30:6c:8e:d0:
         4f:54:38:52:b7:10:38:19:16:d4:55:e6:d7:2d:a6:b0:fc:ec:
         58:bf:14:12:9d:78:df:f5:68:13:e9:c0:21:b3:71:67:2b:b9:
         13:7b:a9:43:68:fb:e4:89:e1:55:f6:5e:18:8d:de:d1:9a:72:
         0a:dc:d4:6a:df:6f:30:ef:76:0d:0d:23:0e:05:06:2d:00:8b:
         ea:92:97:e9:66:90:c7:eb:9d:60:17:91:f7:42:f8:0c:45:5d:
         b6:e6:60:22:e7:71:0c:6b:91:9e:ac:93:40:c7:3f:34:ba:91:
         2c:ba:aa:23:d2:8e:46:8a:af:cf:1e:ae:83:b7:8c:0a:80:d2:
         b5:03:3b:d5:01:a7:c0:94:ef:cd:10:6a:3e:ff:ec:aa:7a:8a:
         1f:8a:67:a0:2d:fa:61:2b:df:cf:9d:ae:d3:86:73:42:d9:d5:
         35:f0:97:3c:f6:3c:b5:ea:30:27:cc:6a:ea:42:dc:ae:87:15:
         1f:af:8a:5e:69:15:10:0f:f6:96:04:e9:f6:38:4a:dc:7b:86:
         d6:15:76:f3:74:4e:a2:43:24:46:7c:3c:f2:80:53:63:55:5f:
         3e:c6:45:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:30:31 2026 by rpki-client