Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/34352e37302e3139362e302f32322d3234203d3e203532343638.roa
File:                     34352e37302e3139362e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          uJKfG5D6tkJVUqPpZ1AAbCMR5oof7lnwbkfLTp9puLA=
Subject key identifier:   56:9C:C9:F2:88:4D:D5:F1:98:06:C3:56:5D:40:EC:00:B3:2E:29:D8
Certificate issuer:       /CN=AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86
Certificate serial:       781CE24A672393B803C53E89F85DC3269559E443
Authority key identifier: AE:D4:A1:E6:20:1D:A8:52:B9:60:F5:94:6F:4F:7E:5E:AA:9A:1F:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/34352e37302e3139362e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:54:46 +0000
ROA not before:           Tue 04 Feb 2025 18:49:46 +0000
ROA not after:            Tue 03 Feb 2026 18:54:46 +0000
asID:                     52468
IP address blocks:        45.70.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 04:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:1c:e2:4a:67:23:93:b8:03:c5:3e:89:f8:5d:c3:26:95:59:e4:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86
        Validity
            Not Before: Feb  4 18:49:46 2025 GMT
            Not After : Feb  3 18:54:46 2026 GMT
        Subject: CN=569CC9F2884DD5F19806C3565D40EC00B32E29D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6a:3d:05:15:a7:da:4a:9f:1f:60:ba:ba:17:
                    46:71:59:5c:7a:ba:ec:6b:48:1f:76:23:6f:98:6d:
                    aa:f1:eb:56:54:5c:26:03:a8:6a:5a:35:98:b4:5f:
                    5c:c5:9d:f0:13:18:6d:1c:49:62:ee:5f:d5:dd:c3:
                    44:7e:10:fc:44:1d:a2:27:5a:f9:4f:94:2a:f8:06:
                    b3:12:26:28:3d:42:aa:d2:dd:0a:6d:8e:e6:45:63:
                    cc:5f:0d:9d:cd:c7:83:e6:6c:b8:fa:7e:b6:58:7c:
                    97:8f:0a:a0:69:e4:6f:b0:17:95:89:4b:7b:c9:70:
                    91:31:62:71:b0:c4:fd:8f:88:75:f5:cb:93:99:69:
                    af:0f:e6:e7:a2:15:88:af:ee:5a:61:b2:3e:55:6d:
                    20:5d:57:6b:61:d0:eb:2f:5a:82:12:8c:40:9c:f6:
                    6b:3f:ff:8a:84:8b:e2:c1:88:5a:47:2b:c8:e1:07:
                    77:61:cf:78:8d:69:5c:9f:ec:28:71:dc:f2:f4:40:
                    30:45:97:52:99:2c:b5:e3:d3:67:36:f0:9f:22:f9:
                    40:fa:35:63:83:cb:f2:80:91:83:27:c5:16:aa:c3:
                    65:2e:90:a7:f0:cc:87:79:6f:e6:92:0d:8c:05:ea:
                    e9:20:ac:8e:16:49:0d:38:c2:16:c1:c5:41:bf:68:
                    3b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9C:C9:F2:88:4D:D5:F1:98:06:C3:56:5D:40:EC:00:B3:2E:29:D8
            X509v3 Authority Key Identifier:
                keyid:AE:D4:A1:E6:20:1D:A8:52:B9:60:F5:94:6F:4F:7E:5E:AA:9A:1F:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/34352e37302e3139362e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:e7:c0:71:4b:cd:a4:63:e3:68:30:aa:d8:e8:d3:98:da:e3:
         52:1f:b7:81:b6:cc:72:aa:09:0f:d3:29:2d:85:c1:a7:c4:fa:
         9c:3f:e2:a6:f5:66:60:46:b9:32:89:96:fb:f3:4f:9f:b3:47:
         f1:21:61:0f:73:d8:c4:b2:16:86:58:6e:2c:2d:c4:fd:05:03:
         c6:d3:00:15:cb:27:68:cf:b3:1c:bd:7c:8a:25:35:73:5e:de:
         86:7a:10:1b:0e:ab:8b:08:ec:ab:da:ec:09:3c:4a:2c:3c:59:
         7a:e2:c3:c6:3f:d8:a0:af:4f:0d:19:59:53:0d:7e:ee:d4:7f:
         c8:af:c0:27:d5:0f:66:81:57:b2:16:f5:62:4d:c6:c8:5e:fd:
         6e:d4:9e:16:82:bd:aa:ae:96:38:36:56:fc:4c:d7:cc:6c:7f:
         e4:c2:f1:1a:6a:7c:57:4d:d6:47:b3:c1:00:61:ae:f7:c8:bf:
         a3:3e:af:b1:3d:e2:64:c0:10:31:36:21:8f:f4:d9:bd:f8:11:
         7e:73:5d:ca:a8:da:e2:72:7f:7f:b0:47:a3:e1:a8:db:46:2e:
         fa:8a:42:0f:6b:b5:c6:52:f6:a1:85:f5:fe:b1:67:0b:5f:2f:
         14:dc:6a:5b:e1:ff:81:26:2d:06:a3:f5:bb:e0:62:fa:85:ed:
         45:d3:aa:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 01:56:31 2025 by rpki-client