Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4BECB9E2B3F5A22E924C370D2AD51C87A8EB028135C17D0BBB1C79BE10BCF52C/0/34352e37302e3230302e302f32332d3234203d3e20323634363638.roa
File:                     34352e37302e3230302e302f32332d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          0la1LkFlMAI8HcvYgXEfq09dvHEQ+QI9KpA1wuaifqk=
Subject key identifier:   39:B3:C5:30:17:C6:D0:E3:7C:44:7B:B9:53:53:C5:13:02:CF:AA:10
Certificate issuer:       /CN=E74DAABF7E260E0A0AAD795F69C95998705429E3
Certificate serial:       2A6E826EFCA1D1731AB9EE42C262A876E80C16EB
Authority key identifier: E7:4D:AA:BF:7E:26:0E:0A:0A:AD:79:5F:69:C9:59:98:70:54:29:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E74DAABF7E260E0A0AAD795F69C95998705429E3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4BECB9E2B3F5A22E924C370D2AD51C87A8EB028135C17D0BBB1C79BE10BCF52C/0/34352e37302e3230302e302f32332d3234203d3e20323634363638.roa
Signing time:             Tue 04 Feb 2025 18:32:11 +0000
ROA not before:           Tue 04 Feb 2025 18:27:11 +0000
ROA not after:            Tue 03 Feb 2026 18:32:11 +0000
asID:                     264668
IP address blocks:        45.70.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4BECB9E2B3F5A22E924C370D2AD51C87A8EB028135C17D0BBB1C79BE10BCF52C/0/E74DAABF7E260E0A0AAD795F69C95998705429E3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4BECB9E2B3F5A22E924C370D2AD51C87A8EB028135C17D0BBB1C79BE10BCF52C/0/E74DAABF7E260E0A0AAD795F69C95998705429E3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E74DAABF7E260E0A0AAD795F69C95998705429E3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:6e:82:6e:fc:a1:d1:73:1a:b9:ee:42:c2:62:a8:76:e8:0c:16:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E74DAABF7E260E0A0AAD795F69C95998705429E3
        Validity
            Not Before: Feb  4 18:27:11 2025 GMT
            Not After : Feb  3 18:32:11 2026 GMT
        Subject: CN=39B3C53017C6D0E37C447BB95353C51302CFAA10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:92:34:ec:74:4a:64:dd:f6:69:18:a7:2d:fa:
                    bb:a6:9d:5c:41:51:43:9c:94:de:eb:71:b9:86:69:
                    4a:f0:5d:9f:c2:bf:cc:bd:61:ce:58:9f:e5:f2:2e:
                    89:a8:00:40:2a:59:7e:54:f1:10:a2:fc:dc:b2:6a:
                    28:18:26:c4:ef:d6:f0:76:f6:97:94:12:d9:92:8d:
                    56:98:25:28:3d:26:25:f6:20:4f:56:28:81:ab:e7:
                    86:69:8d:3c:45:2d:64:d5:9e:1e:92:96:29:9f:d1:
                    19:41:e3:37:2d:50:00:5a:0b:5a:01:ad:84:61:b0:
                    df:84:69:cf:80:5f:2f:ee:86:77:89:9a:c1:f6:5b:
                    65:f0:79:a4:01:05:05:68:02:b3:e2:59:43:4d:ec:
                    5e:7a:20:fc:04:a6:82:90:bb:b0:d8:6d:99:9d:34:
                    d7:15:37:77:68:52:81:6e:34:f2:7a:14:81:a0:34:
                    83:4f:6c:e8:a5:6c:00:88:b7:d3:d5:c3:4d:07:c3:
                    d9:11:f4:36:a5:9f:60:f3:39:6e:c3:e2:22:19:35:
                    30:36:36:db:0d:b6:89:5f:4d:cf:55:45:85:88:e9:
                    5b:ae:e9:56:53:c0:0b:90:72:35:a6:91:46:4d:a1:
                    b5:93:01:6b:e5:91:39:b3:45:17:c2:d6:92:a2:dc:
                    9e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B3:C5:30:17:C6:D0:E3:7C:44:7B:B9:53:53:C5:13:02:CF:AA:10
            X509v3 Authority Key Identifier:
                keyid:E7:4D:AA:BF:7E:26:0E:0A:0A:AD:79:5F:69:C9:59:98:70:54:29:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4BECB9E2B3F5A22E924C370D2AD51C87A8EB028135C17D0BBB1C79BE10BCF52C/0/E74DAABF7E260E0A0AAD795F69C95998705429E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E74DAABF7E260E0A0AAD795F69C95998705429E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4BECB9E2B3F5A22E924C370D2AD51C87A8EB028135C17D0BBB1C79BE10BCF52C/0/34352e37302e3230302e302f32332d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:0e:50:f4:64:1d:80:ad:90:3b:61:46:46:24:c8:f1:be:80:
         84:61:24:be:4f:fe:5b:58:87:e5:a1:bd:cf:03:b8:29:4a:f2:
         db:4c:f0:1c:b3:4b:fc:d8:3f:a3:5c:7d:9c:11:5b:70:d1:eb:
         c0:f2:86:0a:35:26:d6:7d:ae:39:f1:97:13:50:55:68:3b:87:
         48:90:c0:22:eb:e0:7d:4b:a8:4a:a6:29:e4:c4:63:d3:c6:7a:
         2d:17:83:c7:7a:e7:89:07:fb:54:de:89:7b:30:b3:ca:77:2f:
         bf:52:cb:f7:4e:4a:aa:67:e7:46:c1:da:30:ff:3d:26:1f:21:
         41:a5:80:98:1c:67:2f:2a:d6:44:ec:01:11:d8:77:98:73:8a:
         52:c8:cf:44:8a:48:25:23:62:71:ef:0a:e2:12:9c:13:01:23:
         44:ea:6e:df:2e:e2:90:a9:85:c2:bd:56:17:67:af:9c:6a:3b:
         b4:a0:4b:32:fb:47:fa:0c:2a:66:10:60:d9:7b:36:ec:5a:85:
         40:75:d1:6c:78:44:d3:0e:df:79:64:cc:e2:79:26:62:3a:df:
         18:06:6a:86:b2:0e:c8:98:bd:2c:e9:f0:d9:d1:23:6f:c8:fc:
         65:d3:00:74:82:36:b2:fd:e9:c7:cd:c3:81:06:81:3e:4d:d9:
         a9:2d:b3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:22 2025 by rpki-client