Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34302e302f32322d3234203d3e20323733383637.roa
File:                     34352e36382e34302e302f32322d3234203d3e20323733383637.roa (raw, json)
Hash identifier:          e1NtVQBjIDJEWdn1nZKADYJyryiXszPluLuLIr2hK24=
Subject key identifier:   DC:67:E4:1B:4C:84:17:80:2A:90:B2:30:BB:3D:57:62:41:09:82:60
Certificate issuer:       /CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
Certificate serial:       2F0D6C64BE79E04B737426FAED4FC715A3BD06B5
Authority key identifier: CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34302e302f32322d3234203d3e20323733383637.roa
Signing time:             Mon 02 Jun 2025 21:20:51 +0000
ROA not before:           Mon 02 Jun 2025 21:15:51 +0000
ROA not after:            Mon 01 Jun 2026 21:20:51 +0000
asID:                     273867
IP address blocks:        45.68.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0d:6c:64:be:79:e0:4b:73:74:26:fa:ed:4f:c7:15:a3:bd:06:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
        Validity
            Not Before: Jun  2 21:15:51 2025 GMT
            Not After : Jun  1 21:20:51 2026 GMT
        Subject: CN=DC67E41B4C8417802A90B230BB3D576241098260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e2:52:fb:95:82:88:31:20:72:cd:c2:77:b9:
                    4a:09:46:3e:29:ee:4c:97:c9:8a:71:36:52:a2:68:
                    a0:f2:f4:06:38:80:df:87:d5:fe:9a:fc:d9:5f:6a:
                    9a:f1:9a:64:b6:ca:7a:4a:97:05:ae:97:8a:67:f6:
                    5c:6c:79:ca:1b:01:e8:96:89:ad:52:40:f9:cf:a8:
                    35:0a:35:87:ec:34:03:5a:90:ce:66:e2:4b:21:b4:
                    c6:77:91:46:4d:7b:a8:33:89:2f:e6:f8:58:7c:80:
                    bf:96:d6:74:94:6d:dc:53:91:03:8e:7a:2d:b9:a5:
                    e3:91:f8:bb:f5:25:01:9a:af:7f:ab:72:9b:5e:5b:
                    19:49:44:4e:c2:77:30:71:60:11:cf:f3:50:a2:b3:
                    3f:4c:44:12:a8:df:03:2a:ae:2c:16:31:c2:6a:9f:
                    13:2d:1e:7e:4d:69:33:bb:e9:88:2f:8f:64:b9:18:
                    ba:eb:22:c7:05:79:9a:b5:c9:dc:d6:ab:25:c9:38:
                    36:0e:cf:bb:a3:6d:d2:ae:83:c7:76:39:d4:6f:b2:
                    55:60:51:73:cf:23:a1:d8:7a:c9:08:73:08:06:13:
                    c7:b2:6a:1a:05:b9:d5:4e:f9:0d:3a:a2:f5:ba:0c:
                    f4:69:0d:90:15:14:16:b9:33:53:f2:a9:dc:1b:6a:
                    ff:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:67:E4:1B:4C:84:17:80:2A:90:B2:30:BB:3D:57:62:41:09:82:60
            X509v3 Authority Key Identifier:
                keyid:CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34302e302f32322d3234203d3e20323733383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:35:2c:d5:85:fa:ec:9d:0b:07:1c:89:a6:56:4d:87:09:21:
         b3:5f:9c:4a:13:45:54:52:99:71:87:d5:b3:d0:12:50:92:0e:
         44:30:fc:70:78:12:ef:27:da:58:6d:f4:bd:9b:79:c7:28:7e:
         35:0a:8f:a4:5d:67:f8:35:2c:08:98:92:d7:7b:bf:f7:07:aa:
         5c:04:8b:f8:e1:b2:3d:0d:51:ba:30:06:50:38:45:50:cb:d5:
         6c:4f:49:d2:87:b0:0f:b1:d3:ba:b4:7e:dd:07:96:1a:d9:1d:
         6c:47:06:b1:a1:37:ed:84:be:69:a5:4e:e7:cd:ab:a4:4c:9a:
         e7:e4:a6:5c:f5:04:b9:7d:23:36:27:e2:dd:4e:3d:d8:57:15:
         cc:07:c8:ac:f2:13:98:73:e3:80:c6:20:89:4e:43:86:89:4d:
         38:c7:7c:50:4f:c5:67:57:79:e4:2d:ad:93:fe:c4:b9:1c:29:
         93:f7:e5:13:11:ee:72:26:56:60:59:3e:d2:cc:41:ff:1e:ff:
         14:19:9b:f2:99:e7:32:c9:0e:0e:e3:2a:e5:77:e9:1a:ec:f4:
         2d:8a:f3:d8:1f:5a:d0:04:d2:ef:11:9c:d2:48:7d:b2:10:3e:
         ea:17:0f:28:1f:86:71:69:d4:ad:d6:82:9e:76:b4:c4:36:4f:
         16:1a:54:50
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIULw1sZL554EtzdCb67U/HFaO9BrUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RDNzdBNDI3NjM0NDFDNDE0Mjg3OTdFRTVCNzY0RkJD
RDdBRjU3RTAeFw0yNTA2MDIyMTE1NTFaFw0yNjA2MDEyMTIwNTFaMDMxMTAvBgNV
BAMTKERDNjdFNDFCNEM4NDE3ODAyQTkwQjIzMEJCM0Q1NzYyNDEwOTgyNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb4lL7lYKIMSByzcJ3uUoJRj4p
7kyXyYpxNlKiaKDy9AY4gN+H1f6a/NlfaprxmmS2ynpKlwWul4pn9lxsecobAeiW
ia1SQPnPqDUKNYfsNANakM5m4kshtMZ3kUZNe6gziS/m+Fh8gL+W1nSUbdxTkQOO
ei25peOR+Lv1JQGar3+rcpteWxlJRE7CdzBxYBHP81Cisz9MRBKo3wMqriwWMcJq
nxMtHn5NaTO76Ygvj2S5GLrrIscFeZq1ydzWqyXJODYOz7ujbdKug8d2OdRvslVg
UXPPI6HYeskIcwgGE8eyahoFudVO+Q06ovW6DPRpDZAVFBa5M1Pyqdwbav8NAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU3GfkG0yEF4AqkLIwuz1XYkEJgmAwHwYDVR0j
BBgwFoAUzcd6QnY0QcQUKHl+5bdk+8169X4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FODM2ODIzRDY2OTNCREI0MzU3ODM2RkZCMDZBQUFGODI3
RkE3QTRBNUFBQ0E4QjVGMUZGNTZDOTY0NUY2RDcyLzAvQ0RDNzdBNDI3NjM0NDFD
NDE0Mjg3OTdFRTVCNzY0RkJDRDdBRjU3RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DREM3N0E0Mjc2MzQ0MUM0MTQy
ODc5N0VFNUI3NjRGQkNEN0FGNTdFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTgzNjgyM0Q2NjkzQkRCNDM1NzgzNkZGQjA2QUFBRjgyN0ZBN0E0QTVB
QUNBOEI1RjFGRjU2Qzk2NDVGNkQ3Mi8wLzM0MzUyZTM2MzgyZTM0MzAyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMjM3MzMzODM2Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItRCgwDQYJ
KoZIhvcNAQELBQADggEBAB81LNWF+uydCwcciaZWTYcJIbNfnEoTRVRSmXGH1bPQ
ElCSDkQw/HB4Eu8n2lht9L2beccofjUKj6RdZ/g1LAiYktd7v/cHqlwEi/jhsj0N
UbowBlA4RVDL1WxPSdKHsA+x07q0ft0HlhrZHWxHBrGhN+2EvmmlTufNq6RMmufk
plz1BLl9IzYn4t1OPdhXFcwHyKzyE5hz44DGIIlOQ4aJTTjHfFBPxWdXeeQtrZP+
xLkcKZP35RMR7nImVmBZPtLMQf8e/xQZm/KZ5zLJDg7jKuV36Rrs9C2K89gfWtAE
0u8RnNJIfbIQPuoXDygfhnFp1K3Wgp52tMQ2TxYaVFA=
-----END CERTIFICATE-----
Generated at Fri Jul 4 16:32:24 2025 by rpki-client