Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/34352e3233322e302e302f32332d3233203d3e20323636373534.roa
File:                     34352e3233322e302e302f32332d3233203d3e20323636373534.roa (raw, json)
Hash identifier:          2tD+3hkg+DTQJUagtyA4qFBiMKay/TPMqQX+GQrnevM=
Subject key identifier:   76:60:FA:82:03:E7:A0:32:91:BC:6D:F2:C4:69:DD:04:67:B9:08:6E
Certificate issuer:       /CN=64E2A9B1818F618CC381651138A0484A9CB1B197
Certificate serial:       06033EBE3BA192C8A24A3EDEE82FC455B382EA1E
Authority key identifier: 64:E2:A9:B1:81:8F:61:8C:C3:81:65:11:38:A0:48:4A:9C:B1:B1:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64E2A9B1818F618CC381651138A0484A9CB1B197.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/34352e3233322e302e302f32332d3233203d3e20323636373534.roa
Signing time:             Wed 17 Jun 2026 21:48:24 +0000
ROA not before:           Wed 17 Jun 2026 21:43:24 +0000
ROA not after:            Wed 16 Jun 2027 21:48:24 +0000
asID:                     266754
IP address blocks:        45.232.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/64E2A9B1818F618CC381651138A0484A9CB1B197.crl
                          rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/64E2A9B1818F618CC381651138A0484A9CB1B197.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64E2A9B1818F618CC381651138A0484A9CB1B197.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:03:3e:be:3b:a1:92:c8:a2:4a:3e:de:e8:2f:c4:55:b3:82:ea:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64E2A9B1818F618CC381651138A0484A9CB1B197
        Validity
            Not Before: Jun 17 21:43:24 2026 GMT
            Not After : Jun 16 21:48:24 2027 GMT
        Subject: CN=7660FA8203E7A03291BC6DF2C469DD0467B9086E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:16:76:ef:62:31:78:5e:01:01:72:e4:98:c9:
                    91:76:00:f6:90:c2:92:19:0b:a3:47:79:8f:09:39:
                    6e:38:1c:19:d3:5c:d7:54:80:be:ce:be:15:4e:8b:
                    84:da:06:44:7e:8c:51:52:a8:75:10:f6:10:ed:dd:
                    6c:85:33:c6:1d:36:00:e3:5e:f5:54:ba:18:53:4f:
                    9d:93:3f:5c:5d:0b:6e:50:90:c4:20:2d:35:2e:dc:
                    ac:a6:91:47:83:a9:30:81:4e:db:ab:56:fc:41:83:
                    61:0f:9f:c7:59:e3:d3:a6:79:6c:cc:72:34:28:ba:
                    ce:55:3b:40:5c:00:e7:f4:07:4b:77:6a:8f:62:2a:
                    ee:fa:e6:2b:51:5b:55:22:ae:14:3c:4a:62:29:e7:
                    99:5b:ac:b3:c5:22:e3:b8:12:7a:9d:2c:f9:e2:f5:
                    f2:36:1a:34:97:22:3f:31:ae:2f:55:11:29:f5:67:
                    24:f4:09:12:d3:37:fa:9c:97:7d:90:64:c6:a1:34:
                    18:77:b4:c2:42:2b:be:f6:7b:89:4a:b3:4e:86:9b:
                    d4:40:3f:fc:1c:72:b2:3f:f5:26:d9:c1:c4:1c:76:
                    34:1d:64:41:4f:a4:ef:e2:f9:6d:c3:58:94:74:c9:
                    c7:cb:d8:f0:03:50:fb:17:32:eb:db:c6:94:77:fb:
                    3c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:60:FA:82:03:E7:A0:32:91:BC:6D:F2:C4:69:DD:04:67:B9:08:6E
            X509v3 Authority Key Identifier:
                keyid:64:E2:A9:B1:81:8F:61:8C:C3:81:65:11:38:A0:48:4A:9C:B1:B1:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/64E2A9B1818F618CC381651138A0484A9CB1B197.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64E2A9B1818F618CC381651138A0484A9CB1B197.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/34352e3233322e302e302f32332d3233203d3e20323636373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:32:38:7e:1c:3d:18:7d:3b:c9:89:f6:06:32:7d:36:ca:92:
         27:dd:48:5f:e7:0c:7c:fc:df:b9:fe:f2:3e:d3:32:0f:9c:e5:
         73:a5:4f:f2:61:c6:66:2d:ef:ed:83:d4:a3:ec:68:05:d6:ed:
         2a:45:d9:ac:6f:a3:32:d2:4a:eb:bf:b8:12:c8:21:08:8e:07:
         49:ff:4c:b6:b2:15:10:67:d6:9e:95:30:c8:e5:c7:03:8e:31:
         f6:76:c8:12:7a:fc:72:f6:bf:e1:ed:44:6d:d1:1b:3d:61:08:
         94:ea:76:8c:ca:71:05:90:81:57:29:b5:79:75:9c:30:9c:4d:
         7f:3c:48:44:54:0b:ca:b7:84:77:10:bc:24:09:59:b2:af:1b:
         e8:a9:f5:da:b8:df:4a:23:ee:18:48:84:7b:c0:6b:ee:f9:5f:
         e8:05:01:ad:74:91:d0:26:5b:49:f4:7a:ee:7f:c3:3c:a2:93:
         43:a7:10:4a:b2:d9:e3:58:86:49:b2:dc:5f:9c:81:d1:5c:25:
         d6:4a:e3:37:f3:da:d0:16:a4:d0:f6:8c:29:01:32:78:46:60:
         12:48:3f:a3:07:e8:fd:d0:ea:f2:12:92:b1:e5:9e:48:d8:04:
         d0:4c:8c:a5:4a:69:36:b3:98:3d:45:d5:2d:ea:64:b2:01:84:
         b3:5e:a4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:11:35 2026 by rpki-client