Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/34352e37302e31322e302f32342d3234203d3e20323731393333.roa
File:                     34352e37302e31322e302f32342d3234203d3e20323731393333.roa (raw, json)
Hash identifier:          uThuNtIHzwNynIOEQcnABlVr16ttjqipNVtD9w6uqfU=
Subject key identifier:   1B:96:B4:56:F8:8D:8A:C4:FE:6B:9D:0B:99:FD:7F:66:2C:4F:D3:40
Certificate issuer:       /CN=E82376114B533B210E3DA974DE7523551E7BB8F8
Certificate serial:       1973D9ADB801874A997B4925F6FC77E5DC3713E6
Authority key identifier: E8:23:76:11:4B:53:3B:21:0E:3D:A9:74:DE:75:23:55:1E:7B:B8:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E82376114B533B210E3DA974DE7523551E7BB8F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/34352e37302e31322e302f32342d3234203d3e20323731393333.roa
Signing time:             Tue 04 Feb 2025 18:07:52 +0000
ROA not before:           Tue 04 Feb 2025 18:02:52 +0000
ROA not after:            Tue 03 Feb 2026 18:07:52 +0000
asID:                     271933
IP address blocks:        45.70.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/E82376114B533B210E3DA974DE7523551E7BB8F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/E82376114B533B210E3DA974DE7523551E7BB8F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E82376114B533B210E3DA974DE7523551E7BB8F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:73:d9:ad:b8:01:87:4a:99:7b:49:25:f6:fc:77:e5:dc:37:13:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E82376114B533B210E3DA974DE7523551E7BB8F8
        Validity
            Not Before: Feb  4 18:02:52 2025 GMT
            Not After : Feb  3 18:07:52 2026 GMT
        Subject: CN=1B96B456F88D8AC4FE6B9D0B99FD7F662C4FD340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:08:57:e0:27:51:95:3d:64:58:3e:34:13:6c:
                    52:b1:88:95:8f:9a:8c:ac:96:c3:57:e7:aa:4b:68:
                    c4:0d:12:cb:ec:e4:58:0e:52:9d:b3:98:a4:99:17:
                    79:69:76:0b:48:20:e7:17:42:35:0c:55:47:86:d5:
                    db:76:ce:a7:2e:2e:c4:9b:7a:af:4f:8b:7f:5f:a1:
                    19:19:63:2e:c3:8f:78:50:91:49:15:aa:9d:09:79:
                    5a:11:9a:41:a2:c5:b2:74:56:57:e8:6e:4f:d2:3b:
                    59:c7:d0:c0:a7:eb:f9:ed:f8:9e:78:b5:f8:6c:91:
                    07:28:8d:9a:a7:99:f5:07:c9:3d:cb:1d:bb:c2:6b:
                    27:95:9c:6c:d0:80:4a:26:d5:5e:bd:c2:f9:bc:fe:
                    2f:35:69:b6:b9:78:04:1a:64:1e:27:05:0e:66:21:
                    9c:d3:d5:7e:10:94:0d:06:71:a5:05:06:07:8b:56:
                    5f:0f:af:1b:2f:74:c0:0c:c9:c0:48:05:d9:56:bb:
                    3f:91:da:c0:6d:30:81:86:c1:bd:57:c0:e2:66:82:
                    fb:16:e2:ec:fd:07:74:f1:b6:ac:2b:07:d3:6c:ed:
                    91:39:0a:9f:2e:86:ec:33:9a:8d:2e:96:23:4c:80:
                    e8:9a:99:23:fe:c1:ba:04:99:f4:5c:02:4c:43:34:
                    21:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:96:B4:56:F8:8D:8A:C4:FE:6B:9D:0B:99:FD:7F:66:2C:4F:D3:40
            X509v3 Authority Key Identifier:
                keyid:E8:23:76:11:4B:53:3B:21:0E:3D:A9:74:DE:75:23:55:1E:7B:B8:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/E82376114B533B210E3DA974DE7523551E7BB8F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E82376114B533B210E3DA974DE7523551E7BB8F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/34352e37302e31322e302f32342d3234203d3e20323731393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:01:60:ff:7f:3e:1f:34:18:3c:c5:fe:dc:00:2e:6d:58:30:
         5e:54:7e:7b:fa:94:13:e4:da:90:d7:17:2b:ea:90:9b:5b:fe:
         7b:5e:fc:5c:cd:58:cb:23:c6:00:bd:b7:30:c2:f8:2a:ef:7c:
         5a:4a:82:56:c6:fb:ba:b7:1a:99:0a:f1:30:da:63:4a:42:7f:
         03:a0:9f:e9:2d:0a:c2:07:87:17:b5:3c:d3:d9:05:fa:3d:57:
         c3:52:db:5e:7f:d0:80:89:9b:a2:e2:14:85:e2:21:1b:fb:c9:
         7d:00:73:e4:26:32:66:ae:37:9b:b4:fe:92:2e:48:42:d4:a6:
         b2:3b:3c:d6:ed:86:8f:92:0d:04:33:3b:09:70:4b:ee:9d:97:
         10:eb:56:a6:5a:35:04:52:61:13:84:78:4e:92:9c:11:c5:fb:
         9e:c0:af:13:af:6d:e8:c6:fe:31:9a:7a:7c:f0:7e:1f:26:50:
         61:64:b6:d6:53:8b:7d:67:09:09:a9:13:c8:fe:a5:29:ef:19:
         a6:4c:aa:a5:7a:0a:77:da:5b:00:e1:11:08:61:a8:85:63:93:
         90:fc:66:2a:6b:9a:62:2f:8f:dd:f9:6d:8f:72:12:ac:1c:54:
         8f:ef:25:7d:f8:82:b4:6f:c2:7e:fe:6b:d3:a2:1c:82:d5:ee:
         1b:03:8f:d6
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUGXPZrbgBh0qZe0kl9vx35dw3E+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTgyMzc2MTE0QjUzM0IyMTBFM0RBOTc0REU3NTIzNTUx
RTdCQjhGODAeFw0yNTAyMDQxODAyNTJaFw0yNjAyMDMxODA3NTJaMDMxMTAvBgNV
BAMTKDFCOTZCNDU2Rjg4RDhBQzRGRTZCOUQwQjk5RkQ3RjY2MkM0RkQzNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGCFfgJ1GVPWRYPjQTbFKxiJWP
moyslsNX56pLaMQNEsvs5FgOUp2zmKSZF3lpdgtIIOcXQjUMVUeG1dt2zqcuLsSb
eq9Pi39foRkZYy7Dj3hQkUkVqp0JeVoRmkGixbJ0Vlfobk/SO1nH0MCn6/nt+J54
tfhskQcojZqnmfUHyT3LHbvCayeVnGzQgEom1V69wvm8/i81aba5eAQaZB4nBQ5m
IZzT1X4QlA0GcaUFBgeLVl8PrxsvdMAMycBIBdlWuz+R2sBtMIGGwb1XwOJmgvsW
4uz9B3TxtqwrB9Ns7ZE5Cp8uhuwzmo0uliNMgOiamSP+wboEmfRcAkxDNCEjAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUG5a0VviNisT+a50Lmf1/ZixP00AwHwYDVR0j
BBgwFoAU6CN2EUtTOyEOPal03nUjVR57uPgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RUVGMTY2MDJENUUxQTdGQ0UzQTU4RkNCNzIwRTI2RTVG
QUZEQ0FERkJFMzA0REQ3RTdBRUE4REIxMEE2NzU5LzAvRTgyMzc2MTE0QjUzM0Iy
MTBFM0RBOTc0REU3NTIzNTUxRTdCQjhGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FODIzNzYxMTRCNTMzQjIxMEUz
REE5NzRERTc1MjM1NTFFN0JCOEY4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0VFRjE2NjAyRDVFMUE3RkNFM0E1OEZDQjcyMEUyNkU1RkFGRENBREZC
RTMwNEREN0U3QUVBOERCMTBBNjc1OS8wLzM0MzUyZTM3MzAyZTMxMzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM3MzEzOTMzMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtRgwwDQYJ
KoZIhvcNAQELBQADggEBAJYBYP9/Ph80GDzF/twALm1YMF5Ufnv6lBPk2pDXFyvq
kJtb/nte/FzNWMsjxgC9tzDC+CrvfFpKglbG+7q3GpkK8TDaY0pCfwOgn+ktCsIH
hxe1PNPZBfo9V8NS215/0ICJm6LiFIXiIRv7yX0Ac+QmMmauN5u0/pIuSELUprI7
PNbtho+SDQQzOwlwS+6dlxDrVqZaNQRSYROEeE6SnBHF+57ArxOvbejG/jGaenzw
fh8mUGFkttZTi31nCQmpE8j+pSnvGaZMqqV6CnfaWwDhEQhhqIVjk5D8ZiprmmIv
j935bY9yEqwcVI/vJX34grRvwn7+a9OiHILV7hsDj9Y=
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:37:55 2025 by rpki-client