Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34312e302f32342d3234203d3e20323733383637.roa
File:                     34352e36382e34312e302f32342d3234203d3e20323733383637.roa (raw, json)
Hash identifier:          OFKL/OA5giIzAAXwXzp9qKlMGJQKeXCO7NiH6stH0jI=
Subject key identifier:   1C:4E:92:29:E5:EF:01:A4:67:75:40:45:DC:67:14:33:12:F2:74:0A
Certificate issuer:       /CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
Certificate serial:       5BF045559E3AEFACD842FD88B72643E90A2FE91E
Authority key identifier: CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34312e302f32342d3234203d3e20323733383637.roa
Signing time:             Sat 14 Jun 2025 06:22:15 +0000
ROA not before:           Sat 14 Jun 2025 06:17:15 +0000
ROA not after:            Sat 13 Jun 2026 06:22:15 +0000
asID:                     273867
IP address blocks:        45.68.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f0:45:55:9e:3a:ef:ac:d8:42:fd:88:b7:26:43:e9:0a:2f:e9:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
        Validity
            Not Before: Jun 14 06:17:15 2025 GMT
            Not After : Jun 13 06:22:15 2026 GMT
        Subject: CN=1C4E9229E5EF01A467754045DC67143312F2740A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:53:4a:e5:23:aa:74:78:e4:00:68:53:e0:a5:
                    ef:66:f4:cd:61:21:09:1d:59:1a:e0:11:44:49:4b:
                    39:46:09:85:9e:15:ef:c4:cc:43:07:45:e9:bd:fb:
                    ea:2a:cc:7e:da:fe:a9:0c:b3:dd:18:9a:dc:04:6f:
                    66:f7:63:66:fb:60:71:ae:c0:ed:8a:33:ac:0c:4d:
                    97:52:0f:ce:06:1f:5d:b1:21:31:1a:db:73:8f:e6:
                    1b:cd:45:22:3c:7e:ae:48:7c:e9:c4:b6:4a:12:61:
                    55:eb:6a:49:85:c4:e2:be:b3:9b:13:7c:56:2f:61:
                    2f:55:db:e7:e9:53:33:b8:dd:90:cf:d7:c8:68:e4:
                    6d:83:ed:b2:67:00:f7:f6:84:51:b3:5d:d9:2a:46:
                    03:a0:b8:f2:e8:47:8f:dd:ce:23:52:cb:39:7a:2b:
                    53:5a:94:53:28:76:f2:44:87:c0:d7:ea:1b:8f:4e:
                    c2:aa:04:d3:4a:da:1b:6a:18:50:4f:54:e2:aa:85:
                    46:96:3a:02:47:47:12:df:ba:f4:5c:5e:bd:d8:ac:
                    08:00:0f:57:49:cd:61:c0:4a:fc:db:b1:1c:d5:3c:
                    d0:7d:d4:7d:3d:0b:0a:66:bd:be:f2:f3:8a:73:d7:
                    16:9d:cf:7f:23:85:51:59:6e:f6:11:cc:c0:6a:14:
                    fc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4E:92:29:E5:EF:01:A4:67:75:40:45:DC:67:14:33:12:F2:74:0A
            X509v3 Authority Key Identifier:
                keyid:CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34312e302f32342d3234203d3e20323733383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:a9:e3:ba:93:a1:c0:e5:ba:3c:6a:ef:19:e6:0b:4a:b4:3d:
         7c:99:8a:08:bb:43:27:91:8d:7c:4e:b6:0a:7f:46:39:01:e1:
         74:01:c3:2c:47:61:c0:58:5d:13:fd:c4:76:3a:3b:94:76:82:
         2f:c4:44:c2:cd:6e:2e:2a:16:37:db:02:4e:65:bc:45:e0:35:
         9b:d5:d9:96:51:b4:47:cb:91:ce:f5:90:8f:14:a1:0a:c7:9d:
         9b:9b:7b:96:cb:0c:72:77:7f:31:68:8c:22:3b:70:0b:64:e3:
         b0:13:5b:93:64:e9:0c:11:ff:b8:62:c7:b2:1c:a8:f3:66:e7:
         bc:9d:64:f9:4c:05:a4:5f:b8:7c:0e:ff:e9:14:71:4f:bd:3a:
         c5:3b:03:40:b4:26:70:76:16:ed:9c:11:a4:7d:3e:a1:3c:3d:
         39:d7:5f:4c:cc:96:5f:1b:4c:84:58:42:04:7c:a0:51:5e:87:
         16:ce:27:fb:6f:8b:ec:1c:f9:1a:a5:0d:62:39:7b:81:66:57:
         73:41:55:c7:70:25:c0:bb:bb:c2:93:fa:de:14:d4:14:c4:e9:
         2d:04:6d:8d:47:ea:7f:70:52:57:e2:15:61:8a:79:10:45:71:
         14:f8:77:f3:c5:05:1d:fa:ec:7c:f8:07:66:ae:79:71:16:36:
         21:3f:f0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 16:35:15 2025 by rpki-client