Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F70F01BA0E68A3508932A0015F236DCFAB3B2E5054F5FD0EF7F271069CFC7C4/0/34352e3233392e3136302e302f32322d3234203d3e20323636383536.roa
File:                     34352e3233392e3136302e302f32322d3234203d3e20323636383536.roa (raw, json)
Hash identifier:          HrLdPuNnV/XprEnYZgQ7cBeYv12M0dVYvbmAedxpQpQ=
Subject key identifier:   DF:E0:C5:E6:00:D0:BA:BF:A2:44:BE:B1:48:37:4B:66:70:51:F4:52
Certificate issuer:       /CN=76799C3E256CD774538C329B5B66813C321D7693
Certificate serial:       79B1376C4C35EDEBD91987906C330A44946871DC
Authority key identifier: 76:79:9C:3E:25:6C:D7:74:53:8C:32:9B:5B:66:81:3C:32:1D:76:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76799C3E256CD774538C329B5B66813C321D7693.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F70F01BA0E68A3508932A0015F236DCFAB3B2E5054F5FD0EF7F271069CFC7C4/0/34352e3233392e3136302e302f32322d3234203d3e20323636383536.roa
Signing time:             Tue 04 Feb 2025 18:49:57 +0000
ROA not before:           Tue 04 Feb 2025 18:44:57 +0000
ROA not after:            Tue 03 Feb 2026 18:49:57 +0000
asID:                     266856
IP address blocks:        45.239.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F70F01BA0E68A3508932A0015F236DCFAB3B2E5054F5FD0EF7F271069CFC7C4/0/76799C3E256CD774538C329B5B66813C321D7693.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F70F01BA0E68A3508932A0015F236DCFAB3B2E5054F5FD0EF7F271069CFC7C4/0/76799C3E256CD774538C329B5B66813C321D7693.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76799C3E256CD774538C329B5B66813C321D7693.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b1:37:6c:4c:35:ed:eb:d9:19:87:90:6c:33:0a:44:94:68:71:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76799C3E256CD774538C329B5B66813C321D7693
        Validity
            Not Before: Feb  4 18:44:57 2025 GMT
            Not After : Feb  3 18:49:57 2026 GMT
        Subject: CN=DFE0C5E600D0BABFA244BEB148374B667051F452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2b:ce:ff:bc:96:88:09:03:c7:a3:02:ac:d5:
                    cf:38:4c:6b:2a:1a:aa:f2:94:ee:7a:b5:bd:f9:ab:
                    32:90:6c:29:39:8f:06:76:e5:fe:da:bb:48:c7:ff:
                    a0:a3:bd:da:aa:1a:dd:f1:98:f9:2d:f2:8f:73:98:
                    19:f7:a4:63:0a:0e:93:0e:ec:38:13:7e:9b:33:14:
                    96:f4:4e:4c:bc:9e:06:dd:0d:82:8c:59:ec:f2:5d:
                    4a:3f:c8:1d:8c:7a:f5:b7:11:4d:ff:b5:e6:29:06:
                    d4:5c:0d:b8:c6:9a:fe:b5:b5:15:8c:22:a8:85:96:
                    05:c4:92:44:3e:ad:f4:85:ee:3a:7c:6e:0e:2a:a3:
                    b6:58:ff:9f:01:27:c1:3c:c5:a9:bd:10:c7:40:85:
                    f7:d3:ce:d6:cf:10:8e:c2:31:75:92:c3:21:7d:1e:
                    47:2a:d4:e6:6b:ca:ca:d4:f9:cd:1e:47:65:36:a6:
                    33:cf:b7:b7:43:ea:8b:20:85:80:c1:13:8f:d1:9b:
                    95:52:b6:00:5e:a7:bf:b2:f8:cd:a9:8f:21:e7:4f:
                    3a:03:94:47:af:ea:b1:2e:a3:a8:f9:41:c8:ca:90:
                    6e:0a:90:b3:4d:7b:0f:2a:67:79:6c:a4:10:68:57:
                    75:0a:23:65:4b:2a:e9:48:55:b4:3a:41:1a:9e:05:
                    bc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E0:C5:E6:00:D0:BA:BF:A2:44:BE:B1:48:37:4B:66:70:51:F4:52
            X509v3 Authority Key Identifier:
                keyid:76:79:9C:3E:25:6C:D7:74:53:8C:32:9B:5B:66:81:3C:32:1D:76:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F70F01BA0E68A3508932A0015F236DCFAB3B2E5054F5FD0EF7F271069CFC7C4/0/76799C3E256CD774538C329B5B66813C321D7693.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76799C3E256CD774538C329B5B66813C321D7693.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F70F01BA0E68A3508932A0015F236DCFAB3B2E5054F5FD0EF7F271069CFC7C4/0/34352e3233392e3136302e302f32322d3234203d3e20323636383536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:8f:f2:12:7a:ed:73:63:c4:0d:71:f9:71:e7:63:31:b0:e6:
         05:10:3f:ca:b5:e7:9d:f3:3d:7d:a6:90:23:72:6d:3d:41:5c:
         e1:0b:bb:47:40:91:ee:82:18:3f:7d:03:33:80:0c:ad:49:33:
         65:b8:aa:7a:06:83:60:6b:6a:bd:9d:58:f2:b4:26:80:97:a1:
         1f:ed:9e:8a:1c:44:64:00:20:0c:8a:fb:2e:c4:92:27:8a:24:
         40:73:20:65:7b:1b:24:49:33:45:5e:1c:e0:48:c7:77:06:a0:
         c8:a3:d1:0f:e9:c5:6c:47:f1:d8:19:40:11:ed:4a:93:ed:ba:
         de:08:ae:6c:df:c4:e3:51:4c:64:ea:59:c1:06:2c:ef:a2:1b:
         11:42:b4:f1:30:ee:ab:ff:b0:f9:99:38:40:a8:64:ec:5f:6f:
         68:92:40:3e:19:32:08:65:8a:27:0e:20:3c:84:ff:8b:b4:04:
         e0:9c:df:1b:8f:a9:b8:61:f1:fe:5c:e8:eb:88:e7:55:b1:c7:
         b7:7c:18:20:55:87:5e:33:57:01:e2:4f:18:6a:a3:54:e1:d3:
         1f:a1:07:ee:d3:d9:db:a1:1a:ce:f5:b0:00:d1:a7:b1:f0:0b:
         cf:c4:f1:2d:ca:f4:07:de:80:ad:3f:50:9d:2e:19:4f:d5:32:
         38:c3:6f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:06:41 2025 by rpki-client