Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/34352e36382e3130302e302f32322d3234203d3e203634313634.roa
File:                     34352e36382e3130302e302f32322d3234203d3e203634313634.roa (raw, json)
Hash identifier:          ABHreodwD1CNtPN7jYGNCSFZ2Sv+G+qZ7p8ayrdOLDE=
Subject key identifier:   BD:40:20:F0:79:6A:36:9D:92:6B:60:4C:A7:C6:29:55:C1:59:90:40
Certificate issuer:       /CN=73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30
Certificate serial:       5A87E8CA1860D0147270C425CDCDB7FA743332D3
Authority key identifier: 73:D7:EB:8D:CC:9C:93:37:55:64:7B:F8:E5:EE:D5:AA:EE:26:EA:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/34352e36382e3130302e302f32322d3234203d3e203634313634.roa
Signing time:             Fri 27 Feb 2026 20:10:00 +0000
ROA not before:           Fri 27 Feb 2026 20:05:00 +0000
ROA not after:            Fri 26 Feb 2027 20:10:00 +0000
asID:                     64164
IP address blocks:        45.68.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.crl
                          rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:87:e8:ca:18:60:d0:14:72:70:c4:25:cd:cd:b7:fa:74:33:32:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30
        Validity
            Not Before: Feb 27 20:05:00 2026 GMT
            Not After : Feb 26 20:10:00 2027 GMT
        Subject: CN=BD4020F0796A369D926B604CA7C62955C1599040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cf:ad:34:87:e7:a7:58:3e:14:c4:ef:6a:0c:
                    96:7c:f7:dd:d8:ee:0d:cb:c0:0e:a5:2d:4e:0d:91:
                    01:6e:f2:a2:74:18:02:50:1a:a8:d4:43:e0:39:db:
                    b1:9d:ee:a5:85:09:28:33:a0:a5:03:dc:4d:68:28:
                    e1:b9:23:41:3a:35:86:e1:aa:21:7b:5b:24:6a:15:
                    a4:40:8b:0f:cc:cd:f9:72:34:2c:ad:38:70:a4:e4:
                    fc:f9:37:44:86:1b:a4:98:57:ee:af:ad:9c:3e:92:
                    87:b4:6e:45:3b:d2:eb:c9:8a:35:1b:7c:24:ac:db:
                    10:05:d9:da:78:f3:34:15:17:75:58:7c:db:e8:8f:
                    c7:f4:d4:9e:ff:f4:97:57:90:d1:58:e1:32:4a:19:
                    3a:b4:82:2f:03:fe:98:bf:e2:5a:9f:f6:55:4b:75:
                    89:67:ff:e5:45:ab:af:e2:6d:e2:02:c2:f8:08:aa:
                    8d:df:31:53:88:29:a9:98:be:ac:22:35:d8:c5:d5:
                    c6:d5:4c:dc:22:cf:3d:e8:36:0a:70:4b:5c:55:af:
                    2a:89:1c:ce:b5:9e:33:ce:42:12:a8:4f:70:33:c6:
                    1c:a8:2b:d0:00:11:15:4d:06:7b:85:7e:ef:c0:d7:
                    20:f3:db:00:8e:f2:c4:24:aa:ca:72:ca:88:75:4a:
                    14:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:40:20:F0:79:6A:36:9D:92:6B:60:4C:A7:C6:29:55:C1:59:90:40
            X509v3 Authority Key Identifier:
                keyid:73:D7:EB:8D:CC:9C:93:37:55:64:7B:F8:E5:EE:D5:AA:EE:26:EA:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/34352e36382e3130302e302f32322d3234203d3e203634313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:95:8a:90:33:85:a9:e7:bc:05:f2:14:9c:56:9e:42:60:b3:
         3e:8d:03:8f:dd:4b:7e:93:5f:ce:46:fa:14:98:09:1f:b8:39:
         82:e4:cd:5c:0c:c8:a8:2e:2c:9b:9d:dc:0c:63:0c:c8:fb:03:
         ab:75:51:b7:db:49:e0:d4:6c:51:e0:fb:be:23:cf:50:9b:97:
         d1:7e:02:05:56:0b:82:67:bf:5b:ec:a5:8d:bd:9b:f4:c0:14:
         8b:dd:d1:85:de:ed:fe:12:3a:4d:c0:9c:38:a3:b4:0c:58:a1:
         ea:e9:cb:5e:ff:bc:2e:75:b6:34:84:37:bb:8d:fb:c3:dd:79:
         11:d2:71:53:b6:f1:50:4c:47:30:e2:ce:81:5e:04:d6:1f:ed:
         a9:d2:ed:0e:65:07:fe:a9:4f:da:5c:09:7f:05:1f:b7:fa:bd:
         07:6d:fb:fa:6a:aa:33:90:1d:59:6e:fa:76:7b:c0:cf:86:af:
         7a:51:6e:99:35:e4:aa:d7:8d:7e:3b:8c:3f:ed:82:57:9a:a5:
         01:a2:f7:17:03:9b:39:54:a1:be:c7:f5:6c:a9:81:04:1c:6f:
         30:48:ec:95:92:83:33:75:3e:96:e5:6c:2f:b8:57:0e:c7:15:
         53:ce:4c:23:9e:f0:11:87:2f:b4:1b:a2:4c:91:e6:65:72:b9:
         ef:4d:de:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:46:30 2026 by rpki-client