Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/34352e36382e36322e302f32332d3234203d3e203634313530.roa
File:                     34352e36382e36322e302f32332d3234203d3e203634313530.roa (raw, json)
Hash identifier:          U6YmfieC6CpdwhcmIvF5bGqmBbdg+zwTaQpZCTEmPPU=
Subject key identifier:   03:DE:1D:02:E0:D2:A8:4F:C5:C8:EF:71:11:10:26:B4:6D:8B:1C:FA
Certificate issuer:       /CN=77B81134906868C6E3E9D1FFFFFA566816CB9125
Certificate serial:       0ECF3C1DDA5677FD3ABA29262646E39E4E1DD4E8
Authority key identifier: 77:B8:11:34:90:68:68:C6:E3:E9:D1:FF:FF:FA:56:68:16:CB:91:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/34352e36382e36322e302f32332d3234203d3e203634313530.roa
Signing time:             Tue 26 May 2026 20:44:18 +0000
ROA not before:           Tue 26 May 2026 20:39:18 +0000
ROA not after:            Tue 25 May 2027 20:44:18 +0000
asID:                     64150
IP address blocks:        45.68.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:3c:1d:da:56:77:fd:3a:ba:29:26:26:46:e3:9e:4e:1d:d4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77B81134906868C6E3E9D1FFFFFA566816CB9125
        Validity
            Not Before: May 26 20:39:18 2026 GMT
            Not After : May 25 20:44:18 2027 GMT
        Subject: CN=03DE1D02E0D2A84FC5C8EF71111026B46D8B1CFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2e:b2:d5:10:92:fe:b2:df:ed:a8:ed:15:9e:
                    23:f8:60:37:5b:14:ef:c1:27:76:d9:24:af:f0:4c:
                    49:1f:4e:27:45:5a:88:23:d6:01:37:f7:14:7e:09:
                    07:52:f0:1c:17:30:91:f7:e6:19:d0:be:3a:e3:6d:
                    1b:41:d1:d8:e0:dd:3a:45:42:ea:22:06:96:89:d1:
                    70:fb:60:bc:5f:4e:99:d7:5b:4a:56:cc:fa:20:2b:
                    19:5c:df:6e:9d:bb:ec:13:d7:b5:03:11:ff:13:8f:
                    d3:00:19:f1:8a:81:01:e7:87:f0:1d:f2:1e:e7:9f:
                    ca:c2:ee:92:9a:c0:e5:77:fb:e1:f7:19:cd:d3:e9:
                    12:94:ae:94:41:22:f7:5f:8a:28:33:36:50:31:1a:
                    06:8c:76:54:24:91:85:63:71:82:f6:d7:74:ae:ed:
                    8a:a1:65:6f:94:fa:27:39:c3:fc:06:a7:00:34:06:
                    b1:df:9b:72:95:7c:20:b4:c4:23:3d:fc:94:1a:5a:
                    16:29:2e:7f:eb:e8:ee:a6:0c:55:72:f8:6b:55:6b:
                    bc:7b:45:33:32:cb:a0:fc:ca:94:d9:d8:6b:85:95:
                    f7:bc:44:8b:f9:39:28:98:86:f3:c3:16:7a:fd:a3:
                    58:18:f1:f9:ff:e3:40:ee:f2:1b:17:1f:be:e4:12:
                    22:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DE:1D:02:E0:D2:A8:4F:C5:C8:EF:71:11:10:26:B4:6D:8B:1C:FA
            X509v3 Authority Key Identifier:
                keyid:77:B8:11:34:90:68:68:C6:E3:E9:D1:FF:FF:FA:56:68:16:CB:91:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/34352e36382e36322e302f32332d3234203d3e203634313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:e2:d3:47:d3:da:6b:ed:07:db:c3:23:67:75:64:93:4d:ff:
         86:4d:7f:67:ba:12:c1:5a:64:e4:86:d9:ba:26:0e:a2:2d:b5:
         68:3d:34:5c:36:4b:4a:a5:69:03:67:7e:93:08:13:7e:5a:ad:
         91:47:fd:20:ca:73:d4:84:a2:55:41:14:85:c6:fd:4d:ae:b5:
         f1:9e:e4:08:80:0d:20:78:1d:1a:10:6f:5d:18:f3:e0:d4:ff:
         db:8a:93:5e:ee:5f:59:ee:ba:a6:72:31:ea:bf:71:8b:b5:d1:
         23:17:81:13:e4:e0:46:2a:22:95:b5:ee:8a:58:db:91:0d:c7:
         c7:ad:0f:b6:e8:e8:e6:20:51:d5:50:a5:70:e5:63:64:c6:56:
         7a:34:53:0a:6a:cc:e1:c4:50:b6:43:06:09:8e:46:6b:c1:08:
         e3:c7:03:dd:ed:8d:42:b1:db:00:de:7b:2f:db:3c:72:e1:34:
         02:8a:37:68:87:dd:be:ea:40:a5:6b:1e:b5:4d:07:65:73:34:
         30:11:24:84:98:cf:0a:54:e4:af:6d:cc:79:e8:e2:9c:eb:20:
         ee:ec:66:d7:e0:74:4f:93:ae:26:12:0b:78:bc:21:db:02:39:
         cd:8d:9a:f8:6f:3a:f8:e1:06:24:5f:d8:c7:52:7e:11:55:b7:
         65:41:17:65
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUDs88HdpWd/06uikmJkbjnk4d1OgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdCODExMzQ5MDY4NjhDNkUzRTlEMUZGRkZGQTU2Njgx
NkNCOTEyNTAeFw0yNjA1MjYyMDM5MThaFw0yNzA1MjUyMDQ0MThaMDMxMTAvBgNV
BAMTKDAzREUxRDAyRTBEMkE4NEZDNUM4RUY3MTExMTAyNkI0NkQ4QjFDRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrLrLVEJL+st/tqO0VniP4YDdb
FO/BJ3bZJK/wTEkfTidFWogj1gE39xR+CQdS8BwXMJH35hnQvjrjbRtB0djg3TpF
QuoiBpaJ0XD7YLxfTpnXW0pWzPogKxlc326du+wT17UDEf8Tj9MAGfGKgQHnh/Ad
8h7nn8rC7pKawOV3++H3Gc3T6RKUrpRBIvdfiigzNlAxGgaMdlQkkYVjcYL213Su
7YqhZW+U+ic5w/wGpwA0BrHfm3KVfCC0xCM9/JQaWhYpLn/r6O6mDFVy+GtVa7x7
RTMyy6D8ypTZ2GuFlfe8RIv5OSiYhvPDFnr9o1gY8fn/40Du8hsXH77kEiLzAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUA94dAuDSqE/FyO9xERAmtG2LHPowHwYDVR0j
BBgwFoAUd7gRNJBoaMbj6dH///pWaBbLkSUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNUQ3RDM3REYzOThBQ0ZBNzE0REI5ODAwOEE4MEVDNjNB
QzY1QzZBNDNENjEzMEUwRkQ5ODBGRTNGMzEzRjlCLzAvNzdCODExMzQ5MDY4NjhD
NkUzRTlEMUZGRkZGQTU2NjgxNkNCOTEyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83N0I4MTEzNDkwNjg2OEM2RTNF
OUQxRkZGRkZBNTY2ODE2Q0I5MTI1LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzVEN0QzN0RGMzk4QUNGQTcxNERCOTgwMDhBODBFQzYzQUM2NUM2QTQz
RDYxMzBFMEZEOTgwRkUzRjMxM0Y5Qi8wLzM0MzUyZTM2MzgyZTM2MzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzNjM0MzEzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLUQ+MA0GCSqG
SIb3DQEBCwUAA4IBAQAc4tNH09pr7QfbwyNndWSTTf+GTX9nuhLBWmTkhtm6Jg6i
LbVoPTRcNktKpWkDZ36TCBN+Wq2RR/0gynPUhKJVQRSFxv1NrrXxnuQIgA0geB0a
EG9dGPPg1P/bipNe7l9Z7rqmcjHqv3GLtdEjF4ET5OBGKiKVte6KWNuRDcfHrQ+2
6OjmIFHVUKVw5WNkxlZ6NFMKaszhxFC2QwYJjkZrwQjjxwPd7Y1CsdsA3nsv2zxy
4TQCijdoh92+6kClax61TQdlczQwESSEmM8KVOSvbcx56OKc6yDu7GbX4HRPk64m
Egt4vCHbAjnNjZr4bzr44QYkX9jHUn4RVbdlQRdl
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:11:20 2026 by rpki-client