Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/34352e37302e31322e302f32322d3234203d3e20323731393333.roa
File:                     34352e37302e31322e302f32322d3234203d3e20323731393333.roa (raw, json)
Hash identifier:          gRCSQCD1/SIzYEHmtlmIwy6iLhGrEsjGYNfN+sIsSdE=
Subject key identifier:   A0:6C:02:5A:2D:ED:63:C4:47:25:2F:23:28:AB:BF:0C:A3:98:36:6B
Certificate issuer:       /CN=E82376114B533B210E3DA974DE7523551E7BB8F8
Certificate serial:       09B0CC280787C138C2F0BD2E0D00F7B3E57F71D6
Authority key identifier: E8:23:76:11:4B:53:3B:21:0E:3D:A9:74:DE:75:23:55:1E:7B:B8:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E82376114B533B210E3DA974DE7523551E7BB8F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/34352e37302e31322e302f32322d3234203d3e20323731393333.roa
Signing time:             Tue 05 Mar 2024 18:07:36 +0000
ROA not before:           Tue 05 Mar 2024 18:02:36 +0000
ROA not after:            Tue 04 Mar 2025 18:07:36 +0000
asID:                     271933
IP address blocks:        45.70.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/E82376114B533B210E3DA974DE7523551E7BB8F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/E82376114B533B210E3DA974DE7523551E7BB8F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E82376114B533B210E3DA974DE7523551E7BB8F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b0:cc:28:07:87:c1:38:c2:f0:bd:2e:0d:00:f7:b3:e5:7f:71:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E82376114B533B210E3DA974DE7523551E7BB8F8
        Validity
            Not Before: Mar  5 18:02:36 2024 GMT
            Not After : Mar  4 18:07:36 2025 GMT
        Subject: CN=A06C025A2DED63C447252F2328ABBF0CA398366B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ae:92:25:61:8c:b8:10:f9:e3:d5:35:88:ad:
                    4a:31:4c:f0:db:94:17:6f:5c:56:ad:1f:86:8d:ab:
                    1c:78:21:ac:81:4b:c5:22:ac:9c:90:8a:64:dc:c1:
                    a0:1f:40:c2:0d:14:2e:31:b9:5d:a8:98:6c:00:0f:
                    79:5f:e1:b6:7d:b5:46:6d:46:50:99:38:df:13:c5:
                    c5:8c:b1:7d:ff:ee:16:80:65:26:59:a0:74:0d:01:
                    dd:1b:a3:ab:63:37:79:43:6d:86:a5:0d:58:b9:1a:
                    da:ae:a8:47:16:e4:a5:da:2c:c6:97:be:3a:b0:23:
                    2b:b0:c8:bc:28:75:ab:aa:88:1d:a1:28:04:ab:66:
                    f3:97:21:42:1a:c2:9e:b3:f3:0b:80:d9:d9:1e:03:
                    0b:ae:6a:24:d8:77:23:9f:d4:86:f6:19:1e:c7:57:
                    5c:95:5f:3c:15:35:23:49:2d:ac:5a:40:56:8e:89:
                    3a:14:d4:c1:66:8f:1e:c8:08:26:a2:6f:89:53:dc:
                    c2:84:cd:8d:5f:20:4c:a5:20:ac:75:90:02:be:76:
                    59:3a:09:ee:13:ff:9f:7a:d5:70:52:16:95:0b:62:
                    2b:9f:55:8e:89:de:59:6e:fb:be:ec:28:93:fa:19:
                    f0:8f:b0:c9:9f:70:80:a0:fd:e6:d2:bc:29:55:e6:
                    cf:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6C:02:5A:2D:ED:63:C4:47:25:2F:23:28:AB:BF:0C:A3:98:36:6B
            X509v3 Authority Key Identifier:
                keyid:E8:23:76:11:4B:53:3B:21:0E:3D:A9:74:DE:75:23:55:1E:7B:B8:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/E82376114B533B210E3DA974DE7523551E7BB8F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E82376114B533B210E3DA974DE7523551E7BB8F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/34352e37302e31322e302f32322d3234203d3e20323731393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:1b:87:15:f2:e3:64:d8:87:0c:28:c1:a5:82:4e:f8:47:68:
         fb:ef:d0:91:67:24:3a:2f:be:41:c8:a1:40:c0:22:de:d6:15:
         54:bd:7c:e7:7a:ab:80:16:f4:37:15:9b:c0:65:7d:dc:9b:0c:
         43:8b:14:5c:7e:08:01:84:76:bd:26:e6:db:bf:04:f2:70:f5:
         dc:81:5b:d3:6f:f0:dc:55:13:cc:c1:74:46:7c:93:ef:8c:97:
         e2:a8:6a:84:36:17:0d:f0:a9:aa:f9:f9:c9:c4:6c:37:88:73:
         2e:8d:a7:03:20:36:ff:78:39:7d:0e:28:b5:e3:14:d9:0f:a3:
         30:3f:2c:c1:5c:b4:1d:b0:30:1f:04:dd:7c:93:aa:b0:3f:ca:
         14:86:6a:b4:0e:07:ce:f5:9f:42:0c:fe:9e:8f:aa:1a:ff:a7:
         c4:f6:38:26:56:c7:9e:dd:b3:f8:14:5c:4f:f9:fe:d9:2e:ea:
         b0:ae:a5:b0:06:1a:c8:71:11:5b:01:ea:2d:2e:78:9d:e5:ba:
         5a:bb:f7:aa:b3:64:6b:31:3d:64:cb:59:ce:71:90:49:f4:8a:
         71:bc:59:c7:2e:b7:3e:f8:80:10:8c:e7:33:0a:ab:f1:25:b5:
         c6:a1:7f:f6:c9:69:11:00:b3:1b:4c:12:8b:ae:7e:38:4b:ae:
         db:9f:be:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 12:11:46 2024 by rpki-client on console-fra.rpki-client.org