Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/34352e3233322e332e302f32342d3234203d3e20323636373534.roa
File:                     34352e3233322e332e302f32342d3234203d3e20323636373534.roa (raw, json)
Hash identifier:          dnCX6VzIpyooJas4ZVobe7bh51X8HDIp98CjWkA/MX8=
Subject key identifier:   DD:8F:51:E3:45:75:F2:DA:5F:A7:19:1D:4C:D3:C7:96:97:50:69:01
Certificate issuer:       /CN=64E2A9B1818F618CC381651138A0484A9CB1B197
Certificate serial:       1D9979E4752066AC859ECC0895608E6E8DFC6AAA
Authority key identifier: 64:E2:A9:B1:81:8F:61:8C:C3:81:65:11:38:A0:48:4A:9C:B1:B1:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64E2A9B1818F618CC381651138A0484A9CB1B197.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/34352e3233322e332e302f32342d3234203d3e20323636373534.roa
Signing time:             Wed 17 Jun 2026 21:48:22 +0000
ROA not before:           Wed 17 Jun 2026 21:43:22 +0000
ROA not after:            Wed 16 Jun 2027 21:48:22 +0000
asID:                     266754
IP address blocks:        45.232.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/64E2A9B1818F618CC381651138A0484A9CB1B197.crl
                          rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/64E2A9B1818F618CC381651138A0484A9CB1B197.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64E2A9B1818F618CC381651138A0484A9CB1B197.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:99:79:e4:75:20:66:ac:85:9e:cc:08:95:60:8e:6e:8d:fc:6a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64E2A9B1818F618CC381651138A0484A9CB1B197
        Validity
            Not Before: Jun 17 21:43:22 2026 GMT
            Not After : Jun 16 21:48:22 2027 GMT
        Subject: CN=DD8F51E34575F2DA5FA7191D4CD3C79697506901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:55:81:4c:a6:b9:23:4f:60:78:56:8e:0e:4e:
                    7d:3f:dd:56:f0:38:c3:41:7d:ab:b9:3f:ba:a7:e1:
                    4f:eb:13:08:84:39:f1:02:11:63:d0:df:ce:d0:7a:
                    e2:d9:1a:a9:3c:e4:a2:67:82:48:a2:30:a2:0d:43:
                    cb:7b:79:b1:c9:34:c8:33:e4:7b:6b:14:bf:8b:89:
                    63:d2:bf:8a:64:6c:cc:1e:06:ff:d7:2f:6f:a1:59:
                    eb:8b:c5:53:e7:ae:b1:c5:fb:3b:a5:a5:f5:dd:3f:
                    ad:a0:42:d9:1a:b0:ed:74:87:d3:e1:48:b4:65:f9:
                    a2:48:7b:11:eb:9c:43:8e:cd:96:b3:ed:80:2d:96:
                    45:e5:65:02:d3:d7:8f:cb:f1:69:e5:79:67:2e:4f:
                    98:23:39:d7:a9:70:a3:e5:cf:72:9c:16:e4:2a:cd:
                    17:5b:a8:70:d2:94:aa:d1:9e:1c:3f:4e:3b:d9:ec:
                    f6:4f:02:0c:44:a3:80:af:ea:68:e4:40:18:d3:7b:
                    ba:a5:eb:4d:c8:37:a1:e9:a3:da:c4:dc:9e:21:5f:
                    fb:1f:21:ce:50:31:05:e5:a4:c8:56:8b:55:b2:bc:
                    ac:2c:6b:fc:7b:d0:ef:5e:d4:98:f6:43:70:1a:02:
                    32:60:37:0d:9b:ae:de:ef:88:89:be:a6:35:95:cd:
                    ae:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8F:51:E3:45:75:F2:DA:5F:A7:19:1D:4C:D3:C7:96:97:50:69:01
            X509v3 Authority Key Identifier:
                keyid:64:E2:A9:B1:81:8F:61:8C:C3:81:65:11:38:A0:48:4A:9C:B1:B1:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/64E2A9B1818F618CC381651138A0484A9CB1B197.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64E2A9B1818F618CC381651138A0484A9CB1B197.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/34352e3233322e332e302f32342d3234203d3e20323636373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:c8:47:af:39:5a:65:e9:2a:8e:d2:54:6c:69:cc:6e:d5:d3:
         e7:ae:6a:3b:20:c8:49:ff:d1:9a:8d:25:65:28:e5:fa:85:8c:
         cb:34:96:e9:66:80:f7:3a:f0:66:68:a1:b1:35:3d:27:71:37:
         20:fc:9a:09:8f:ba:35:b0:da:43:b3:27:f5:da:30:6e:e8:d5:
         17:c9:83:05:bf:ec:b3:0a:5a:bf:23:59:e8:d6:a3:0c:3b:09:
         c7:ea:fd:c2:c2:b4:ed:f0:eb:5c:8a:06:a6:2f:46:26:c9:03:
         18:57:f4:5d:33:34:a8:3d:fa:f9:9e:b5:80:e4:cb:62:8a:c1:
         13:df:62:44:ab:e6:62:34:58:76:83:ca:58:9f:a1:62:77:8b:
         8f:86:18:8b:79:ec:4a:69:64:f9:89:f7:99:52:e5:a6:7e:e9:
         38:4a:d6:1a:ea:b3:f3:d2:fd:73:96:7c:66:38:e5:7e:f2:c3:
         dd:ef:00:16:1d:99:27:f2:9a:14:86:2a:66:09:f3:36:2e:94:
         3f:b6:ae:f7:e1:8b:19:92:10:32:e9:5c:26:4b:25:0c:ae:bb:
         8f:12:5f:1d:71:ef:9e:0e:07:8c:10:35:4b:ae:7b:56:e2:a6:
         ef:67:1c:67:8f:6c:ec:e5:c1:ae:3a:6e:b3:09:23:16:35:e4:
         bd:e5:b8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:44:23 2026 by rpki-client