Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/34352e37302e3139362e302f32342d3234203d3e203237393437.roa
File:                     34352e37302e3139362e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          XHvxVwVG3ICz3iA3roIz2lMEtq2nUwMy5ka3grvYMe8=
Subject key identifier:   67:C1:B7:A3:B9:0D:D6:D1:DE:47:CF:DD:16:82:94:51:68:55:FF:19
Certificate issuer:       /CN=AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86
Certificate serial:       72C45B8C5F256614FB0637E847893768516F7BAD
Authority key identifier: AE:D4:A1:E6:20:1D:A8:52:B9:60:F5:94:6F:4F:7E:5E:AA:9A:1F:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/34352e37302e3139362e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 17:48:13 +0000
ROA not before:           Tue 05 Mar 2024 17:43:13 +0000
ROA not after:            Tue 04 Mar 2025 17:48:13 +0000
asID:                     27947
IP address blocks:        45.70.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c4:5b:8c:5f:25:66:14:fb:06:37:e8:47:89:37:68:51:6f:7b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86
        Validity
            Not Before: Mar  5 17:43:13 2024 GMT
            Not After : Mar  4 17:48:13 2025 GMT
        Subject: CN=67C1B7A3B90DD6D1DE47CFDD168294516855FF19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e5:a8:56:37:bb:cb:31:88:51:20:f7:c6:a2:
                    f1:43:e2:5b:60:bd:d2:2c:8a:a2:a5:10:6d:d0:b2:
                    60:ce:e1:93:a4:d1:46:a5:9e:98:88:44:20:e2:45:
                    cd:e5:c3:21:70:f0:c6:6b:c2:b6:0f:a3:65:76:1b:
                    15:3e:13:59:0c:f4:b8:a8:9d:12:83:32:8a:f7:5a:
                    36:76:a8:51:0f:83:f8:7f:b6:77:5e:31:72:92:8b:
                    d0:6e:86:82:fe:48:1a:28:b9:d7:f3:73:87:e6:e1:
                    f9:70:6f:ba:5a:9f:c0:ec:0e:94:ef:6c:d1:e1:f8:
                    15:e7:8c:40:f6:be:eb:fa:06:e4:91:50:76:71:78:
                    c6:31:6c:78:a2:fd:57:79:9e:0c:b6:6b:58:39:71:
                    5e:f2:c3:c2:0d:10:bc:ef:5a:4c:22:ec:67:96:25:
                    07:60:1d:e9:71:f8:5b:18:e6:5d:41:d7:e9:f5:ca:
                    75:23:03:7a:04:db:d5:94:e6:8e:6d:8a:dd:29:10:
                    7a:f2:24:70:9e:9f:5f:4f:0b:10:37:4b:1a:56:ae:
                    cd:02:0d:20:be:53:bf:2a:a7:49:52:1e:fe:4e:c8:
                    f6:d2:51:c9:a6:71:de:6a:c8:55:92:6c:c8:38:de:
                    4f:92:d0:be:2c:99:fa:a4:12:e4:10:23:82:c4:90:
                    52:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C1:B7:A3:B9:0D:D6:D1:DE:47:CF:DD:16:82:94:51:68:55:FF:19
            X509v3 Authority Key Identifier:
                keyid:AE:D4:A1:E6:20:1D:A8:52:B9:60:F5:94:6F:4F:7E:5E:AA:9A:1F:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AED4A1E6201DA852B960F5946F4F7E5EAA9A1F86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E31FCEE674B889DCB26101BB3A42DA81330B9AA63D2722DDF515D067AF86125/0/34352e37302e3139362e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:cb:cc:6c:94:50:cf:73:fa:11:0f:c5:ec:0c:20:10:44:9b:
         81:02:2e:6f:ec:2f:b3:f6:ef:4b:63:a7:ad:a2:13:f1:9c:52:
         9a:71:6c:29:2f:36:c8:65:92:1d:8d:8a:8d:17:24:7a:96:e8:
         71:58:ef:6f:37:dc:4d:eb:3c:e6:fe:fc:66:97:8a:73:45:f9:
         31:be:40:fe:3e:59:0b:38:f8:59:94:63:61:53:91:ab:87:b9:
         08:a1:4b:c6:12:0c:e1:8e:de:c5:e4:db:6c:dd:7e:98:7e:c9:
         31:85:f0:c7:53:cb:1a:6a:e1:fc:df:3f:44:02:ed:cd:f8:73:
         ab:93:68:11:d2:ce:15:ca:c0:5f:a0:14:44:40:7e:f1:22:ee:
         02:c8:26:6b:4c:7c:de:13:62:9e:f3:ff:18:ef:7d:80:08:c5:
         ff:e8:17:b7:45:37:57:04:ef:23:da:b6:72:22:8a:a2:1e:72:
         ba:ab:b3:cd:2c:f4:e9:06:83:56:9d:0a:eb:e8:dc:ba:61:ae:
         28:84:70:a2:fa:12:0e:e4:85:cc:7b:93:4f:3c:02:07:ca:8c:
         f4:9a:b8:63:93:57:3c:b1:9b:24:eb:9f:f0:f3:6b:93:97:e9:
         13:ac:52:67:1a:c2:aa:6b:cc:f2:11:59:25:30:34:5e:66:56:
         87:d0:16:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 11:44:53 2024 by rpki-client on console-ams.rpki-client.org