Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/34352e37302e35362e302f32322d3234203d3e20323634363638.roa
File:                     34352e37302e35362e302f32322d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          lWCx+klno6vtC5bs98KDMzR4ViRyPSgP1n3ymdsrMFI=
Subject key identifier:   CF:71:FB:A3:2E:EA:7F:BA:69:8B:30:BF:36:54:45:B1:C7:17:B1:B1
Certificate issuer:       /CN=81BC3D0F24DB890EA37C979CCC6BE88C7FED3340
Certificate serial:       0875D63101D2A9A12124ED424753490D9E6191F0
Authority key identifier: 81:BC:3D:0F:24:DB:89:0E:A3:7C:97:9C:CC:6B:E8:8C:7F:ED:33:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/34352e37302e35362e302f32322d3234203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 17:54:47 +0000
ROA not before:           Tue 05 Mar 2024 17:49:47 +0000
ROA not after:            Tue 04 Mar 2025 17:54:47 +0000
asID:                     264668
IP address blocks:        45.70.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.crl
                          rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:75:d6:31:01:d2:a9:a1:21:24:ed:42:47:53:49:0d:9e:61:91:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81BC3D0F24DB890EA37C979CCC6BE88C7FED3340
        Validity
            Not Before: Mar  5 17:49:47 2024 GMT
            Not After : Mar  4 17:54:47 2025 GMT
        Subject: CN=CF71FBA32EEA7FBA698B30BF365445B1C717B1B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f1:80:63:5a:a7:c3:99:83:62:29:73:11:45:
                    29:09:ce:42:0c:d3:bc:a3:d5:58:9c:80:01:75:6b:
                    2f:ac:d8:f9:fa:09:43:26:9f:e4:0e:97:ba:e0:ef:
                    70:ee:92:6d:2d:5f:07:aa:8a:ee:7a:1e:b0:25:25:
                    44:6e:fe:b9:ce:1e:c3:f4:2f:02:22:c5:a9:47:7c:
                    6d:e5:f8:e9:f1:6e:81:70:3a:17:f1:cb:6a:81:ef:
                    27:5c:30:e0:f0:0c:30:ae:28:fc:14:04:fd:6b:fd:
                    54:2c:98:a1:4b:19:ba:98:7c:e6:83:04:a3:7c:38:
                    28:e8:9b:05:1a:6f:39:44:05:98:45:f4:6b:13:5e:
                    71:86:2b:58:6f:17:21:a6:77:76:3d:1b:2b:16:f3:
                    7a:fa:71:18:02:ed:9d:5d:23:2f:17:7b:4c:7b:e0:
                    6b:29:e1:04:18:23:2b:54:db:af:1c:a9:77:af:48:
                    7d:30:25:b7:02:65:ce:a0:f0:bc:e3:76:2a:d1:9b:
                    85:b9:33:47:1a:ce:f8:65:1d:1d:12:3d:96:97:c3:
                    dc:aa:f7:8b:19:ef:f0:34:f4:22:e1:e4:fd:09:59:
                    e1:95:42:f4:75:fd:53:e0:07:59:98:1e:4c:cf:2b:
                    ca:6f:9b:bb:97:fa:05:13:95:0d:92:73:12:fc:5f:
                    47:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:71:FB:A3:2E:EA:7F:BA:69:8B:30:BF:36:54:45:B1:C7:17:B1:B1
            X509v3 Authority Key Identifier:
                keyid:81:BC:3D:0F:24:DB:89:0E:A3:7C:97:9C:CC:6B:E8:8C:7F:ED:33:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/34352e37302e35362e302f32322d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d7:53:17:17:34:b7:17:02:ba:bd:a1:77:50:11:8b:75:eb:84:
         22:19:aa:07:d9:3d:a6:13:73:f3:23:97:6e:dc:d1:92:ab:d1:
         61:39:24:c1:4c:0b:7c:8d:55:f7:c0:db:75:29:ef:6d:68:92:
         44:dd:b9:88:08:b0:e4:46:c0:ff:27:10:bd:52:1b:bf:05:6e:
         d8:16:c6:45:d3:19:e7:15:57:ee:47:e0:12:ac:f2:58:f5:30:
         fb:aa:d1:7a:69:25:9c:51:b8:a9:1e:cd:b6:08:5e:44:ca:09:
         5a:59:01:2f:f3:19:15:51:05:26:c5:f1:4d:b4:aa:2d:91:5d:
         f8:b6:4b:05:09:0c:ac:9b:cf:cc:36:67:b1:1f:05:79:b5:f3:
         a2:c6:6e:81:d9:75:82:8f:fb:84:2f:e3:95:da:9c:5f:0a:70:
         3c:84:e8:07:53:e8:db:86:71:8e:06:b1:32:85:3b:fc:3e:85:
         09:23:3f:fa:0b:e4:c9:e4:12:6c:ab:9c:ac:60:e7:7a:18:33:
         9b:1e:10:97:e2:c7:69:fd:9d:6a:e8:e0:18:55:29:e4:27:7b:
         7f:0b:90:91:4e:31:59:08:b8:a9:96:42:a4:16:5c:f5:c0:78:
         db:41:a8:ba:98:82:59:98:97:6c:31:27:6f:b4:7a:98:19:e1:
         47:2d:2b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:32 2024 by rpki-client on console-fra.rpki-client.org