Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/34352e3233322e302e302f32342d3234203d3e20323636373534.roa
File:                     34352e3233322e302e302f32342d3234203d3e20323636373534.roa (raw, json)
Hash identifier:          veD74t2K1QAreCe+AAbIuYYWabO5/75ETvManizpi7A=
Subject key identifier:   FE:81:AA:4C:83:7C:1A:C9:CD:CE:32:91:B4:E7:20:46:7F:1E:97:F9
Certificate issuer:       /CN=64E2A9B1818F618CC381651138A0484A9CB1B197
Certificate serial:       2B6D1597D29640637C6A2F4622BADA53281C8155
Authority key identifier: 64:E2:A9:B1:81:8F:61:8C:C3:81:65:11:38:A0:48:4A:9C:B1:B1:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64E2A9B1818F618CC381651138A0484A9CB1B197.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/34352e3233322e302e302f32342d3234203d3e20323636373534.roa
Signing time:             Wed 17 Jun 2026 21:48:23 +0000
ROA not before:           Wed 17 Jun 2026 21:43:23 +0000
ROA not after:            Wed 16 Jun 2027 21:48:23 +0000
asID:                     266754
IP address blocks:        45.232.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/64E2A9B1818F618CC381651138A0484A9CB1B197.crl
                          rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/64E2A9B1818F618CC381651138A0484A9CB1B197.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64E2A9B1818F618CC381651138A0484A9CB1B197.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:6d:15:97:d2:96:40:63:7c:6a:2f:46:22:ba:da:53:28:1c:81:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64E2A9B1818F618CC381651138A0484A9CB1B197
        Validity
            Not Before: Jun 17 21:43:23 2026 GMT
            Not After : Jun 16 21:48:23 2027 GMT
        Subject: CN=FE81AA4C837C1AC9CDCE3291B4E720467F1E97F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:ee:dc:9f:50:4d:e4:41:d8:a7:da:dd:1a:
                    a5:d7:74:b2:76:54:ab:17:3b:a4:1e:a4:9d:9d:2d:
                    91:b3:ba:bb:3d:ed:05:76:d2:43:04:a6:01:b5:22:
                    80:6c:02:5b:be:a7:8e:2d:c6:0c:0c:26:e8:e6:a3:
                    46:2c:c9:0a:8d:84:06:65:43:60:dc:a5:1f:bd:ee:
                    df:3f:96:4f:32:c4:bb:46:b5:b3:3f:cf:14:55:33:
                    75:89:3b:eb:ee:3e:7a:20:e9:6d:dd:b8:21:8d:d0:
                    56:f0:07:28:94:a4:59:fb:10:d1:44:63:3f:c2:8f:
                    e8:f0:8c:b3:0e:7b:69:b3:7d:b5:9f:5d:05:03:0d:
                    5b:75:ac:ec:05:c6:fc:c9:92:b9:38:52:8e:40:02:
                    f5:f4:73:7a:06:d0:7f:0d:20:a2:40:05:e2:16:31:
                    ba:f1:58:6f:76:db:7b:01:d4:35:5d:9c:65:a0:a2:
                    5c:8b:70:05:d6:a8:63:8f:53:e0:1c:b2:64:d3:d5:
                    6b:0d:9e:ce:d6:74:1d:d1:32:93:52:fe:2b:b3:01:
                    63:59:e7:f4:95:c9:68:80:b6:f3:25:ef:d1:d1:1f:
                    e6:98:de:16:79:74:b7:e3:f0:c2:39:fd:05:50:1b:
                    18:66:20:a5:e8:60:4c:7b:94:3b:83:33:e2:6b:91:
                    5e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:81:AA:4C:83:7C:1A:C9:CD:CE:32:91:B4:E7:20:46:7F:1E:97:F9
            X509v3 Authority Key Identifier:
                keyid:64:E2:A9:B1:81:8F:61:8C:C3:81:65:11:38:A0:48:4A:9C:B1:B1:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/64E2A9B1818F618CC381651138A0484A9CB1B197.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64E2A9B1818F618CC381651138A0484A9CB1B197.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/34352e3233322e302e302f32342d3234203d3e20323636373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:5a:f5:dc:a4:de:79:b7:1d:8f:6a:39:ce:47:b2:2d:94:4b:
         8f:24:f1:f1:52:6f:98:6c:93:19:a7:15:aa:86:8b:e0:f0:e8:
         b4:cf:82:47:29:fe:26:c8:d1:d5:10:0e:6b:12:e4:23:dc:93:
         35:92:9b:e4:aa:42:37:ab:9d:02:b7:32:a8:e8:e4:dd:65:24:
         17:8e:59:48:d6:88:75:1d:ab:de:bb:fc:99:1a:65:db:00:96:
         9a:0e:f1:b8:0b:20:bb:33:50:82:2b:b9:f8:02:27:63:f7:7f:
         9f:12:bd:cc:cf:5c:5f:c7:da:f8:df:34:a5:fb:66:6c:cb:45:
         f9:6c:19:25:f7:a7:05:0f:59:2b:8c:43:09:73:08:3a:50:8a:
         a6:87:3a:dc:3f:74:d2:eb:8c:81:48:3a:ec:ac:1a:e4:81:fd:
         d5:4e:11:f4:31:b4:b7:2a:95:d6:e2:a7:25:1d:ad:8c:fe:60:
         e0:42:c3:ab:47:55:3c:c9:75:1f:8e:8f:d0:28:a0:3b:7e:72:
         ca:ef:81:a2:61:67:f5:7e:1b:f1:76:d6:67:fd:ac:50:15:89:
         e8:aa:ae:a9:7b:8b:c4:3e:10:d1:de:6d:53:c2:3a:c6:4e:68:
         3d:6a:94:03:ac:9a:36:9b:60:67:73:1a:43:4f:aa:45:d4:23:
         09:e4:9a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:03:07 2026 by rpki-client