Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/34352e36382e39342e302f32342d3234203d3e20323734303832.roa
File:                     34352e36382e39342e302f32342d3234203d3e20323734303832.roa (raw, json)
Hash identifier:          lhc62mxO4E11a1nS2+eTLpSkRQvO8IrRtl4nl2jl+rE=
Subject key identifier:   DD:48:FA:88:98:74:8D:86:1B:9C:F3:E3:23:02:41:69:C4:46:04:00
Certificate issuer:       /CN=E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0
Certificate serial:       2FABEC4808580C196444F7BF40B9DC20ED5BB7BB
Authority key identifier: E9:83:23:C8:F0:C8:DC:F5:1B:94:82:D5:6B:4B:DF:B8:B7:70:FE:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/34352e36382e39342e302f32342d3234203d3e20323734303832.roa
Signing time:             Tue 17 Jun 2025 11:05:00 +0000
ROA not before:           Tue 17 Jun 2025 11:00:00 +0000
ROA not after:            Tue 16 Jun 2026 11:05:00 +0000
asID:                     274082
IP address blocks:        45.68.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Jun 2025 00:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ab:ec:48:08:58:0c:19:64:44:f7:bf:40:b9:dc:20:ed:5b:b7:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0
        Validity
            Not Before: Jun 17 11:00:00 2025 GMT
            Not After : Jun 16 11:05:00 2026 GMT
        Subject: CN=DD48FA8898748D861B9CF3E323024169C4460400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:45:dd:2c:38:d9:1c:3a:23:ef:8b:a1:2c:aa:
                    f4:2b:03:c6:75:48:4f:c0:7e:ad:26:c5:6d:27:cd:
                    bd:94:1d:9c:01:f0:b2:ff:0a:c6:c6:30:67:f7:07:
                    6f:1f:99:da:7a:73:c5:4a:95:82:fc:3f:0d:45:b1:
                    a9:5b:dd:d5:84:4f:1a:23:55:38:55:fd:6f:b6:5c:
                    9a:7f:35:96:c6:02:5a:bd:c8:e9:df:12:a4:11:20:
                    87:57:bc:66:ec:13:5b:31:5b:3b:4f:ca:af:2c:38:
                    30:dd:38:d5:a7:24:fa:ce:89:e7:63:a8:00:43:5a:
                    f9:aa:14:6b:d1:5b:70:5e:c7:28:1d:14:10:17:a9:
                    34:f1:19:70:66:3c:53:e2:5c:f8:71:4e:78:0f:c8:
                    9e:5b:af:59:bc:05:1d:d4:fd:3d:a1:52:28:a4:82:
                    24:ae:c7:64:47:a9:d1:08:b7:af:4e:a0:f2:0f:41:
                    ae:8c:71:8a:ab:ec:04:94:be:ab:f3:04:d3:ab:97:
                    cb:a1:35:37:e6:eb:1c:c6:16:05:0a:5b:54:2c:ba:
                    5c:e4:63:94:c4:5d:af:af:7f:5a:58:66:d6:f7:24:
                    f5:e7:e8:69:1a:f1:0e:62:32:8a:32:9b:2d:b9:d9:
                    0e:b8:81:e5:03:ed:bc:15:a9:aa:0d:af:6f:af:77:
                    98:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:48:FA:88:98:74:8D:86:1B:9C:F3:E3:23:02:41:69:C4:46:04:00
            X509v3 Authority Key Identifier:
                keyid:E9:83:23:C8:F0:C8:DC:F5:1B:94:82:D5:6B:4B:DF:B8:B7:70:FE:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/34352e36382e39342e302f32342d3234203d3e20323734303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:ea:a0:91:fd:a9:5e:ce:b3:4d:25:ad:39:bc:31:90:ae:0b:
         6f:d3:dd:d8:42:b6:cb:38:67:48:3b:e7:17:12:4a:64:95:fd:
         0a:a1:67:7a:ff:d1:77:04:69:f1:67:d2:25:e4:9b:9f:41:ed:
         06:f3:ab:7d:f3:eb:89:61:a6:cc:9d:47:c2:04:05:63:c7:fa:
         be:99:c6:82:4f:f6:be:56:ac:ba:11:a6:8b:ce:17:3d:88:56:
         01:39:e0:b5:d8:bf:e3:30:85:ae:12:ed:03:4c:04:b5:02:91:
         97:04:d2:61:02:7a:6e:30:98:57:f0:a2:04:68:2b:66:e8:46:
         7f:9c:30:3b:7e:1b:9f:6f:06:07:c5:0a:d6:ab:0f:0f:09:07:
         66:3b:4e:20:3d:4a:81:bd:4f:75:13:6d:6a:63:59:01:48:51:
         8c:fe:ad:d1:58:98:85:27:7f:ac:6d:bb:a1:87:30:32:02:bd:
         23:cb:da:17:7d:29:43:97:a1:db:3a:df:96:c5:1e:6d:8a:e0:
         a9:97:d3:f3:46:81:59:5a:86:14:be:94:7b:7b:46:c6:c7:73:
         ea:b7:58:eb:49:3d:1f:b6:66:ca:32:1c:a5:65:19:9a:2f:a0:
         50:7c:f4:54:06:94:08:50:bf:2d:20:99:8f:9a:00:86:85:e0:
         18:57:a6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 07:49:39 2025 by rpki-client