Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F70F01BA0E68A3508932A0015F236DCFAB3B2E5054F5FD0EF7F271069CFC7C4/0/34352e3233392e3136302e302f32322d3234203d3e20323636383536.roa
File:                     34352e3233392e3136302e302f32322d3234203d3e20323636383536.roa (raw, json)
Hash identifier:          dol9BVmI1IFq0TK/ss73euzGpEKgcNFNoWhXHdcI76I=
Subject key identifier:   70:0E:1E:B0:E0:0E:BD:BC:2D:D3:1A:24:08:8D:DA:15:2C:50:D6:FA
Certificate issuer:       /CN=76799C3E256CD774538C329B5B66813C321D7693
Certificate serial:       4BDC04E1CF1CB1A4E8F7FF84030770C7D99C6C8D
Authority key identifier: 76:79:9C:3E:25:6C:D7:74:53:8C:32:9B:5B:66:81:3C:32:1D:76:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76799C3E256CD774538C329B5B66813C321D7693.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F70F01BA0E68A3508932A0015F236DCFAB3B2E5054F5FD0EF7F271069CFC7C4/0/34352e3233392e3136302e302f32322d3234203d3e20323636383536.roa
Signing time:             Tue 05 Mar 2024 18:12:47 +0000
ROA not before:           Tue 05 Mar 2024 18:07:47 +0000
ROA not after:            Tue 04 Mar 2025 18:12:47 +0000
asID:                     266856
IP address blocks:        45.239.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F70F01BA0E68A3508932A0015F236DCFAB3B2E5054F5FD0EF7F271069CFC7C4/0/76799C3E256CD774538C329B5B66813C321D7693.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F70F01BA0E68A3508932A0015F236DCFAB3B2E5054F5FD0EF7F271069CFC7C4/0/76799C3E256CD774538C329B5B66813C321D7693.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76799C3E256CD774538C329B5B66813C321D7693.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:dc:04:e1:cf:1c:b1:a4:e8:f7:ff:84:03:07:70:c7:d9:9c:6c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76799C3E256CD774538C329B5B66813C321D7693
        Validity
            Not Before: Mar  5 18:07:47 2024 GMT
            Not After : Mar  4 18:12:47 2025 GMT
        Subject: CN=700E1EB0E00EBDBC2DD31A24088DDA152C50D6FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:00:9b:d3:51:45:f9:c9:d1:49:db:72:75:24:
                    83:f5:04:cf:0b:81:2f:ab:39:6e:52:a2:e8:ad:41:
                    5a:8e:36:e3:5d:d8:8a:b5:15:c0:d2:94:88:15:a5:
                    13:21:f1:33:57:18:5f:c9:1d:8b:36:51:95:0b:a2:
                    be:dc:15:76:28:ba:32:68:c8:68:84:fe:df:76:77:
                    a1:bb:0b:e4:29:35:d3:22:23:eb:22:43:68:ca:ca:
                    94:08:74:6d:2c:12:ec:53:63:5d:10:79:a2:97:9c:
                    c5:dd:25:07:7b:f0:bc:79:60:2b:9c:8e:ac:62:5d:
                    ad:85:09:1a:ae:bc:0d:bb:19:cd:15:2a:bc:a2:c6:
                    14:63:99:61:58:12:35:6d:3c:dc:9b:58:15:fa:09:
                    fc:c3:5c:62:91:3e:87:bb:96:d1:0f:12:0d:00:e0:
                    25:25:c3:3d:9b:ae:c6:ea:71:78:86:fe:8e:84:3e:
                    db:81:dd:e5:0b:78:58:32:a7:f0:e6:ec:52:9c:7c:
                    e9:81:67:a9:41:2c:76:3f:57:c8:f8:86:9f:bb:3b:
                    55:d0:fd:68:b5:dd:33:0b:1f:c3:be:6e:f6:12:67:
                    e7:0e:6f:04:11:b4:bf:7f:62:c8:9a:38:8a:43:ac:
                    69:e0:38:3c:22:ca:b1:dd:94:27:6c:51:60:d7:ec:
                    18:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0E:1E:B0:E0:0E:BD:BC:2D:D3:1A:24:08:8D:DA:15:2C:50:D6:FA
            X509v3 Authority Key Identifier:
                keyid:76:79:9C:3E:25:6C:D7:74:53:8C:32:9B:5B:66:81:3C:32:1D:76:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F70F01BA0E68A3508932A0015F236DCFAB3B2E5054F5FD0EF7F271069CFC7C4/0/76799C3E256CD774538C329B5B66813C321D7693.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76799C3E256CD774538C329B5B66813C321D7693.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F70F01BA0E68A3508932A0015F236DCFAB3B2E5054F5FD0EF7F271069CFC7C4/0/34352e3233392e3136302e302f32322d3234203d3e20323636383536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:a7:00:41:e8:60:3e:80:7b:1f:f7:bb:af:e9:c6:8f:09:79:
         bf:a6:0b:0e:d7:2e:4a:dc:6a:d1:48:f5:5d:74:96:91:77:b5:
         9e:56:40:02:09:ca:67:b1:03:fa:ba:53:d8:84:ae:49:d0:ca:
         e3:f9:8a:e3:e3:6e:27:45:61:5b:88:83:93:fa:44:f2:c4:36:
         1c:4f:74:ae:84:31:e5:45:45:67:dd:88:d6:84:af:76:e2:84:
         06:44:d9:e4:fd:3d:bc:8c:27:ef:52:44:47:de:87:34:8f:f3:
         c9:11:01:6d:20:b1:bb:08:56:bb:6b:82:56:19:d3:15:c7:d6:
         15:3f:2a:f9:8c:6c:b2:ac:24:ad:22:c3:87:f0:50:bb:d2:16:
         40:2d:b8:a6:93:46:e0:15:14:14:20:dd:0d:be:ed:1e:4c:66:
         70:d1:14:78:73:57:91:19:93:34:43:95:ee:5c:c4:c7:9f:3a:
         f0:75:32:e1:1b:aa:cc:e8:ce:5a:02:c8:c8:fd:f2:0b:3a:3c:
         6e:38:38:d7:5d:86:c2:c8:be:26:1a:0e:03:eb:02:92:67:1b:
         1a:e4:70:72:e1:d6:77:3e:bd:c9:68:53:66:03:bf:59:13:3b:
         58:d3:10:15:dc:bd:64:e7:7d:de:a5:92:55:72:ef:1f:f7:c7:
         21:87:47:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:28 2024 by rpki-client on console-fra.rpki-client.org