Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/34352e36382e39352e302f32342d3234203d3e20323734303832.roa
File:                     34352e36382e39352e302f32342d3234203d3e20323734303832.roa (raw, json)
Hash identifier:          Ptmcbh4UnPwoTmgtgc4nOaqbYtiZZ0qesRkHGMvBf50=
Subject key identifier:   0C:E4:D8:7F:FF:50:30:57:3D:22:67:99:02:6E:07:9C:C1:ED:BA:BE
Certificate issuer:       /CN=E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0
Certificate serial:       738F6BAE191850D2B1A1AAB02022D7777E841B20
Authority key identifier: E9:83:23:C8:F0:C8:DC:F5:1B:94:82:D5:6B:4B:DF:B8:B7:70:FE:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/34352e36382e39352e302f32342d3234203d3e20323734303832.roa
Signing time:             Tue 17 Jun 2025 11:05:00 +0000
ROA not before:           Tue 17 Jun 2025 11:00:00 +0000
ROA not after:            Tue 16 Jun 2026 11:05:00 +0000
asID:                     274082
IP address blocks:        45.68.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 23:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8f:6b:ae:19:18:50:d2:b1:a1:aa:b0:20:22:d7:77:7e:84:1b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0
        Validity
            Not Before: Jun 17 11:00:00 2025 GMT
            Not After : Jun 16 11:05:00 2026 GMT
        Subject: CN=0CE4D87FFF5030573D226799026E079CC1EDBABE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cf:03:d1:e6:57:c5:d4:41:fc:a4:a3:e9:2e:
                    77:40:74:20:8f:50:c8:b9:15:ba:80:d2:cb:10:af:
                    7c:4e:bd:e7:96:da:60:f0:3d:97:02:f6:c2:c7:20:
                    2b:28:3e:74:7d:d8:d7:8a:73:ef:53:72:17:2e:2f:
                    79:ec:29:5f:58:be:13:36:77:f4:22:d3:81:d7:c5:
                    10:2d:aa:b3:3a:6b:39:01:41:b9:4f:49:7f:1e:2f:
                    df:fa:28:e4:8d:4d:c7:50:86:8c:bd:ed:a0:48:11:
                    0f:79:9a:70:3c:f5:dd:87:35:e4:81:1c:06:0c:08:
                    0a:93:ed:1c:26:ed:b4:83:87:01:fc:fe:f6:12:4d:
                    fa:07:b1:50:95:bf:ad:13:26:4c:48:75:8c:f0:6e:
                    3c:b8:b3:b0:42:52:32:71:d3:0b:70:41:3a:4d:dc:
                    e5:69:3c:89:8e:f3:1f:df:19:d2:29:46:6a:2d:68:
                    c5:ac:1a:b9:1a:d1:82:dc:b2:bc:73:d4:d9:50:90:
                    48:34:9a:d1:af:4c:48:b2:d7:ee:ef:97:fb:c7:b5:
                    1f:42:b1:8b:67:02:6a:99:f1:92:24:fc:bc:f8:bf:
                    9a:61:2c:67:5c:e9:24:8b:64:9a:e9:c4:93:46:2c:
                    c9:20:08:f5:ef:98:14:df:48:e0:af:58:1f:f8:47:
                    86:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E4:D8:7F:FF:50:30:57:3D:22:67:99:02:6E:07:9C:C1:ED:BA:BE
            X509v3 Authority Key Identifier:
                keyid:E9:83:23:C8:F0:C8:DC:F5:1B:94:82:D5:6B:4B:DF:B8:B7:70:FE:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/34352e36382e39352e302f32342d3234203d3e20323734303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:82:c4:da:5a:94:e5:7a:91:cf:68:d7:ae:f7:8a:30:88:cc:
         64:06:17:ab:ec:d0:18:cc:7b:84:f5:76:d6:cc:5c:2f:d4:b8:
         8b:18:3f:06:b8:6e:aa:55:5a:0c:0c:62:ee:0e:dd:ee:cb:5f:
         8d:cd:f1:a8:c7:cd:e7:b2:8e:ad:fd:a8:7f:35:20:31:64:62:
         73:07:16:1f:05:0b:2a:0a:b6:df:85:de:da:e8:a6:f7:17:ab:
         17:bc:77:36:4b:08:f5:6c:d6:3a:66:3e:f3:0a:5f:ec:10:77:
         e6:e1:6c:16:80:2c:c2:d9:4d:f3:5c:f2:fe:a5:58:24:b7:23:
         90:f7:44:c8:4a:14:21:24:ee:fb:f0:0b:b0:82:3e:71:9c:e4:
         8a:b1:40:d5:f4:c7:00:36:40:33:a7:46:f6:60:6a:88:47:54:
         d4:fc:27:0f:22:97:7b:10:e4:0c:0c:18:7c:e1:b3:a0:32:af:
         b3:a8:aa:5a:67:7a:e0:39:d7:ee:52:42:c8:92:ea:9a:5f:dc:
         d4:03:55:7e:7e:04:be:a7:56:8c:09:b0:28:a3:77:e7:e6:4e:
         bc:7a:d7:d5:bc:4a:12:45:3a:e4:35:64:e3:c4:93:ff:2a:85:
         cd:d1:0a:16:16:90:cf:68:ca:fb:64:4f:7a:e8:7b:a0:ec:26:
         cc:f2:aa:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 23:46:02 2025 by rpki-client