Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/669A7B0C7642337A22C5249F06ED03D81B338729F5939E49FCF48105C884F76F/0/34352e352e3137322e302f32322d3233203d3e20323635363936.roa
File:                     34352e352e3137322e302f32322d3233203d3e20323635363936.roa (raw, json)
Hash identifier:          UQKBckq5R+Y1aGFvSUPGyVsxJHtt23SotldocDkXW4k=
Subject key identifier:   AF:D6:39:7E:B9:9D:84:86:0E:1D:05:3A:17:23:7B:34:99:FD:9C:F1
Certificate issuer:       /CN=70C34906AF4CAA100EA01DC66181AA79D78960B8
Certificate serial:       036C63BD5F135857757B0EB2B7568E2958849D6C
Authority key identifier: 70:C3:49:06:AF:4C:AA:10:0E:A0:1D:C6:61:81:AA:79:D7:89:60:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70C34906AF4CAA100EA01DC66181AA79D78960B8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/669A7B0C7642337A22C5249F06ED03D81B338729F5939E49FCF48105C884F76F/0/34352e352e3137322e302f32322d3233203d3e20323635363936.roa
Signing time:             Tue 04 Feb 2025 20:03:46 +0000
ROA not before:           Tue 04 Feb 2025 19:58:46 +0000
ROA not after:            Tue 03 Feb 2026 20:03:46 +0000
asID:                     265696
IP address blocks:        45.5.172.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/669A7B0C7642337A22C5249F06ED03D81B338729F5939E49FCF48105C884F76F/0/70C34906AF4CAA100EA01DC66181AA79D78960B8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/669A7B0C7642337A22C5249F06ED03D81B338729F5939E49FCF48105C884F76F/0/70C34906AF4CAA100EA01DC66181AA79D78960B8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70C34906AF4CAA100EA01DC66181AA79D78960B8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 14:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:6c:63:bd:5f:13:58:57:75:7b:0e:b2:b7:56:8e:29:58:84:9d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70C34906AF4CAA100EA01DC66181AA79D78960B8
        Validity
            Not Before: Feb  4 19:58:46 2025 GMT
            Not After : Feb  3 20:03:46 2026 GMT
        Subject: CN=AFD6397EB99D84860E1D053A17237B3499FD9CF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:e8:53:08:15:b9:ed:bc:f9:1f:27:fb:76:16:
                    38:46:8f:d5:1a:31:d5:c3:03:55:81:c9:cf:b0:18:
                    51:cd:39:89:3d:82:6b:70:ea:30:5a:5a:9e:04:d4:
                    b5:13:8c:d6:4f:6c:4c:ba:be:5c:f5:80:eb:10:21:
                    ed:2f:9c:93:f6:0b:d1:ac:c7:be:8e:68:9f:ad:05:
                    1c:c7:3e:af:51:fd:5b:8d:95:f7:79:46:ec:30:9a:
                    de:0a:4d:65:4f:8c:8c:99:28:87:63:03:50:0e:f7:
                    f2:d7:c7:c1:06:2e:88:5b:d8:44:d6:4a:7a:83:b3:
                    4e:e7:70:40:ee:e6:91:d9:71:c6:42:75:2e:83:9f:
                    6f:22:66:0c:a0:2b:a9:27:fc:61:64:5d:d2:e5:ca:
                    7f:c6:a6:6a:91:6a:8a:f3:09:1d:00:92:17:2b:9b:
                    9d:02:1b:f7:37:2e:e0:73:ac:04:43:d5:b3:08:cc:
                    eb:ba:79:22:c0:d7:a0:0b:f1:62:c2:3f:e2:23:a3:
                    ec:3e:ba:21:bd:f0:80:34:35:50:08:d5:5e:32:b4:
                    8d:79:a1:d9:12:2f:a9:29:f0:b5:26:a0:a1:d2:c0:
                    32:58:50:ac:e9:d2:8f:2c:36:22:49:57:64:fb:e6:
                    6e:c1:b6:b8:c4:35:17:4a:a8:fa:bf:68:1b:39:23:
                    96:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D6:39:7E:B9:9D:84:86:0E:1D:05:3A:17:23:7B:34:99:FD:9C:F1
            X509v3 Authority Key Identifier:
                keyid:70:C3:49:06:AF:4C:AA:10:0E:A0:1D:C6:61:81:AA:79:D7:89:60:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/669A7B0C7642337A22C5249F06ED03D81B338729F5939E49FCF48105C884F76F/0/70C34906AF4CAA100EA01DC66181AA79D78960B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70C34906AF4CAA100EA01DC66181AA79D78960B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/669A7B0C7642337A22C5249F06ED03D81B338729F5939E49FCF48105C884F76F/0/34352e352e3137322e302f32322d3233203d3e20323635363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:d8:2f:5a:6b:3b:23:8b:37:4b:23:88:61:47:af:54:83:e4:
         34:28:f8:b5:c6:a9:96:93:c5:d4:fb:fd:a5:16:c6:e0:42:57:
         d6:9a:05:8e:87:af:f5:70:e5:a0:cc:99:e1:e6:38:80:96:65:
         66:2e:51:56:cb:29:b7:ca:be:bc:c0:c9:d1:1c:2c:aa:78:75:
         3b:91:37:44:8e:1a:53:be:4c:0b:70:12:91:22:59:fd:4c:5c:
         db:47:fd:b1:9e:49:86:75:64:8b:bd:43:da:f3:08:0b:c0:f9:
         34:79:24:fc:96:3d:b9:4f:1d:d4:6d:1c:84:25:7f:d0:92:b9:
         df:5c:dc:76:41:c7:96:1c:01:5f:5c:a2:8b:27:3e:ca:07:7c:
         b5:0b:b7:26:f9:0e:ef:d9:28:3e:24:de:dc:59:d4:67:6f:fc:
         a3:7b:98:02:d7:a9:24:a3:db:66:e2:25:09:b5:5e:94:cc:ab:
         83:38:c4:a3:a2:c9:37:8a:ce:22:d2:41:ee:32:6b:10:51:3e:
         94:01:38:69:72:25:2f:ee:5f:f0:9f:97:a9:b7:5e:42:1a:4e:
         67:62:08:6b:e8:8f:0f:d6:0d:89:55:0c:aa:e3:f4:5b:39:bf:
         eb:0e:ce:c1:90:36:65:3f:3d:8c:e8:33:df:82:aa:65:76:72:
         65:b4:02:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:21:51 2025 by rpki-client