Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/34352e36382e38382e302f32322d3234203d3e203634313634.roa
File:                     34352e36382e38382e302f32322d3234203d3e203634313634.roa (raw, json)
Hash identifier:          BxNbrTarxVnkU74BWZorT3nWwPKV+KfWAOgw8QkorZY=
Subject key identifier:   DD:00:EE:70:26:09:0A:13:78:11:3A:F4:24:3E:58:32:B5:78:A9:01
Certificate issuer:       /CN=73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30
Certificate serial:       4029DEDAEE2EB32EF8743731F1FAC41DED198875
Authority key identifier: 73:D7:EB:8D:CC:9C:93:37:55:64:7B:F8:E5:EE:D5:AA:EE:26:EA:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/34352e36382e38382e302f32322d3234203d3e203634313634.roa
Signing time:             Fri 27 Feb 2026 20:10:00 +0000
ROA not before:           Fri 27 Feb 2026 20:05:00 +0000
ROA not after:            Fri 26 Feb 2027 20:10:00 +0000
asID:                     64164
IP address blocks:        45.68.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.crl
                          rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:29:de:da:ee:2e:b3:2e:f8:74:37:31:f1:fa:c4:1d:ed:19:88:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30
        Validity
            Not Before: Feb 27 20:05:00 2026 GMT
            Not After : Feb 26 20:10:00 2027 GMT
        Subject: CN=DD00EE7026090A1378113AF4243E5832B578A901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e5:f4:6c:b0:b4:5f:ae:d5:a2:5e:e6:2d:23:
                    38:ec:51:68:87:27:13:51:6a:d5:2a:61:25:bf:5c:
                    b9:1a:83:f6:b5:55:bf:eb:91:77:22:e3:10:cd:23:
                    9e:a6:81:bd:d7:e0:fb:e2:be:fe:06:03:c0:24:32:
                    4e:7a:dd:e9:a4:a8:4d:5c:6b:60:1a:4f:ba:2e:6e:
                    4e:72:06:b1:c2:fb:ad:f8:12:0c:f6:d5:78:4e:fc:
                    13:d2:93:ab:15:36:90:a9:40:0a:c0:09:90:42:64:
                    aa:74:45:98:b3:33:57:04:c6:80:69:0d:02:54:3b:
                    9b:26:18:7a:21:31:6a:2e:cd:49:a6:e5:65:d4:bc:
                    05:ff:7d:be:93:b3:c0:b6:61:6f:28:4a:3a:a1:db:
                    c5:94:aa:84:c4:34:43:81:a8:3a:b1:1b:63:d4:78:
                    02:91:24:cd:bd:d6:d1:2e:6c:e4:c3:95:01:a9:62:
                    a7:6c:46:da:cd:91:f1:b8:8a:13:3c:d8:3c:6f:ca:
                    e0:ef:91:02:97:b9:02:26:e9:c8:5f:7e:b6:6c:cf:
                    e8:c8:cf:ae:ca:25:71:0b:b6:06:51:62:84:3e:71:
                    10:5f:d9:f3:f9:c3:3c:cf:6b:8c:49:f8:ff:52:0f:
                    9d:2c:3f:d4:d9:83:2b:8d:aa:1b:bb:cb:9b:2f:11:
                    cd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:00:EE:70:26:09:0A:13:78:11:3A:F4:24:3E:58:32:B5:78:A9:01
            X509v3 Authority Key Identifier:
                keyid:73:D7:EB:8D:CC:9C:93:37:55:64:7B:F8:E5:EE:D5:AA:EE:26:EA:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/34352e36382e38382e302f32322d3234203d3e203634313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:74:ee:c4:11:03:33:e1:5e:29:87:40:a9:e8:c5:69:e7:8c:
         26:13:ea:99:85:75:62:9e:d7:22:27:6a:80:8c:ca:95:cb:75:
         ff:b2:39:da:49:f3:b8:64:10:93:ec:47:2c:0f:07:69:49:17:
         5f:ef:df:74:68:bd:6e:5c:15:41:99:db:e7:91:30:94:98:98:
         e0:75:8a:42:0e:84:04:3f:3c:60:00:6f:bd:8d:76:2f:a0:24:
         28:25:a9:9d:8a:f2:9a:d5:65:ec:1f:52:bd:51:5a:f4:2a:9c:
         11:21:24:38:4a:eb:25:b9:b5:d6:35:4e:39:98:27:4a:7d:2d:
         4f:70:e1:75:4a:d4:aa:58:c7:33:20:f1:a3:49:83:9d:09:d6:
         1a:06:f3:96:2c:99:d0:cf:da:97:4f:89:03:c4:c4:6a:5c:9a:
         70:da:14:cd:7d:e0:fd:0d:71:6d:23:20:e0:c4:56:a2:5a:73:
         c9:90:fb:aa:83:4e:5e:81:ae:19:7a:09:c7:25:8d:53:6d:95:
         59:14:34:02:66:c9:5c:07:a2:5e:c6:5e:ce:f1:61:12:c8:3e:
         94:40:27:bb:e4:2b:5c:f6:47:62:3d:cb:35:27:cf:5c:12:7f:
         74:4b:1b:65:e4:8c:39:99:88:b0:70:2d:32:59:96:f4:92:c1:
         4e:8f:eb:0b
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUQCne2u4usy74dDcx8frEHe0ZiHUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNEN0VCOERDQzlDOTMzNzU1NjQ3QkY4RTVFRUQ1QUFF
RTI2RUEzMDAeFw0yNjAyMjcyMDA1MDBaFw0yNzAyMjYyMDEwMDBaMDMxMTAvBgNV
BAMTKEREMDBFRTcwMjYwOTBBMTM3ODExM0FGNDI0M0U1ODMyQjU3OEE5MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL5fRssLRfrtWiXuYtIzjsUWiH
JxNRatUqYSW/XLkag/a1Vb/rkXci4xDNI56mgb3X4Pvivv4GA8AkMk563emkqE1c
a2AaT7oubk5yBrHC+634Egz21XhO/BPSk6sVNpCpQArACZBCZKp0RZizM1cExoBp
DQJUO5smGHohMWouzUmm5WXUvAX/fb6Ts8C2YW8oSjqh28WUqoTENEOBqDqxG2PU
eAKRJM291tEubOTDlQGpYqdsRtrNkfG4ihM82DxvyuDvkQKXuQIm6chffrZsz+jI
z67KJXELtgZRYoQ+cRBf2fP5wzzPa4xJ+P9SD50sP9TZgyuNqhu7y5svEc27AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU3QDucCYJChN4ETr0JD5YMrV4qQEwHwYDVR0j
BBgwFoAUc9frjcyckzdVZHv45e7Vqu4m6jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NkQzNTk5NDlENDRBQjVCREJCRjkwMjIwN0QwRjExOEM1
M0FENkIxQTA2MzMyOEZCNzE0RkMzODQ5QjBCM0U4LzAvNzNEN0VCOERDQzlDOTMz
NzU1NjQ3QkY4RTVFRUQ1QUFFRTI2RUEzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83M0Q3RUI4RENDOUM5MzM3NTU2
NDdCRjhFNUVFRDVBQUVFMjZFQTMwLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjZEMzU5OTQ5RDQ0QUI1QkRCQkY5MDIyMDdEMEYxMThDNTNBRDZCMUEw
NjMzMjhGQjcxNEZDMzg0OUIwQjNFOC8wLzM0MzUyZTM2MzgyZTM4MzgyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzNjM0MzEzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLURYMA0GCSqG
SIb3DQEBCwUAA4IBAQAKdO7EEQMz4V4ph0Cp6MVp54wmE+qZhXVintciJ2qAjMqV
y3X/sjnaSfO4ZBCT7EcsDwdpSRdf7990aL1uXBVBmdvnkTCUmJjgdYpCDoQEPzxg
AG+9jXYvoCQoJamdivKa1WXsH1K9UVr0KpwRISQ4SuslubXWNU45mCdKfS1PcOF1
StSqWMczIPGjSYOdCdYaBvOWLJnQz9qXT4kDxMRqXJpw2hTNfeD9DXFtIyDgxFai
WnPJkPuqg05ega4ZegnHJY1TbZVZFDQCZslcB6Jexl7O8WESyD6UQCe75Ctc9kdi
Pcs1J89cEn90Sxtl5Iw5mYiwcC0yWZb0ksFOj+sL
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:46:20 2026 by rpki-client