Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/34352e37302e35362e302f32322d3234203d3e20323634363638.roa
File:                     34352e37302e35362e302f32322d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          I2Il/X2JBS01Cd1hfVRafzQmC4jh/MTlSAA1C3KD0xI=
Subject key identifier:   10:3A:47:F5:C6:67:F3:08:07:B7:46:C5:1B:79:49:4D:D4:FF:AB:5A
Certificate issuer:       /CN=81BC3D0F24DB890EA37C979CCC6BE88C7FED3340
Certificate serial:       6559F002D8537194B9AABA57B650AD71B8520FF1
Authority key identifier: 81:BC:3D:0F:24:DB:89:0E:A3:7C:97:9C:CC:6B:E8:8C:7F:ED:33:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/34352e37302e35362e302f32322d3234203d3e20323634363638.roa
Signing time:             Tue 04 Feb 2025 18:07:21 +0000
ROA not before:           Tue 04 Feb 2025 18:02:21 +0000
ROA not after:            Tue 03 Feb 2026 18:07:21 +0000
asID:                     264668
IP address blocks:        45.70.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.crl
                          rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 11:19:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:59:f0:02:d8:53:71:94:b9:aa:ba:57:b6:50:ad:71:b8:52:0f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81BC3D0F24DB890EA37C979CCC6BE88C7FED3340
        Validity
            Not Before: Feb  4 18:02:21 2025 GMT
            Not After : Feb  3 18:07:21 2026 GMT
        Subject: CN=103A47F5C667F30807B746C51B79494DD4FFAB5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:15:7e:9e:9f:a8:0d:f7:e2:05:f9:8a:43:c9:
                    85:47:12:1c:10:bd:f3:1f:68:3d:69:4b:47:aa:63:
                    e2:3a:b0:24:b0:b6:4f:3f:25:80:a4:c3:01:f7:ba:
                    18:81:48:79:12:59:f0:20:e5:37:c8:5f:b0:c0:d1:
                    6f:91:c2:c2:ef:a0:8d:73:76:ef:97:ff:3b:5c:34:
                    84:30:0d:a6:3a:bd:19:b9:55:94:5d:52:62:11:5b:
                    87:e6:a7:aa:d2:ff:e0:79:5f:c6:e9:d9:0d:05:24:
                    28:e0:8b:65:2d:92:ec:2d:31:17:c6:a9:a0:d8:d0:
                    e2:ea:81:4c:e9:b3:d5:76:39:83:aa:fc:f4:d7:5a:
                    d4:95:dc:29:ac:52:3e:86:87:2a:7e:75:4f:1c:cd:
                    24:3c:40:12:25:29:e5:c9:53:c5:a4:03:cf:bb:5b:
                    09:5a:09:52:f8:66:38:71:6c:4f:6a:32:d9:ec:8f:
                    a5:d8:c3:aa:df:27:d2:fe:b7:ee:86:55:a1:f3:a4:
                    2f:92:e0:96:81:6a:9d:a6:db:c2:c9:fa:8d:b3:b9:
                    1e:6d:37:52:09:5b:bc:f1:90:ae:dc:db:6d:13:13:
                    8d:be:60:f3:ec:20:0f:8e:9c:98:8a:d7:35:8b:a9:
                    85:40:44:26:ca:3c:03:73:77:7a:7f:fe:e9:e0:64:
                    07:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3A:47:F5:C6:67:F3:08:07:B7:46:C5:1B:79:49:4D:D4:FF:AB:5A
            X509v3 Authority Key Identifier:
                keyid:81:BC:3D:0F:24:DB:89:0E:A3:7C:97:9C:CC:6B:E8:8C:7F:ED:33:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/34352e37302e35362e302f32322d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:92:f9:6d:4a:23:33:04:08:e1:26:14:da:f2:c1:42:1a:9c:
         a3:f1:5a:fc:bd:24:a7:34:62:b6:39:02:6f:dd:15:0b:20:80:
         31:84:27:1e:2c:9d:5f:90:c4:b6:8c:f1:f9:64:6d:73:51:fe:
         83:d5:4d:fc:04:0e:48:68:3f:4a:72:1a:6e:8f:34:a4:db:f3:
         7c:fc:cf:90:0a:bd:ee:03:42:43:9c:01:ba:0f:ef:93:86:d8:
         d1:4e:fa:6c:d4:56:9e:80:98:09:b8:61:46:5b:e5:70:25:55:
         76:30:69:4b:87:80:d5:a8:4b:1e:b5:ed:80:5f:bb:28:f6:db:
         e5:0c:2f:e7:81:33:7f:ff:d2:ad:2d:a7:13:c3:47:39:92:26:
         d1:ee:98:dc:51:2f:79:21:6e:75:9f:31:02:c4:be:75:05:df:
         d6:04:02:72:4e:0e:f7:03:77:16:d7:ea:09:f8:b1:2b:f0:0e:
         86:06:b4:58:90:ab:4a:f4:94:5e:00:c5:a3:f3:68:5b:34:d1:
         5f:51:e4:95:2c:82:48:c3:98:0c:36:34:81:21:db:59:f1:20:
         41:1a:9a:ea:52:62:b0:29:5a:d8:b6:d5:fd:75:2c:ec:b2:a7:
         14:c1:aa:3a:c8:87:99:19:8b:f2:28:f2:3a:72:2e:8a:4c:fc:
         42:8a:04:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:42 2025 by rpki-client