Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/34352e37302e31342e302f32342d3234203d3e20323731393333.roa
File:                     34352e37302e31342e302f32342d3234203d3e20323731393333.roa (raw, json)
Hash identifier:          7I8BQLaKroCnLupeyGvhWuqSo6YomU6iRLSHwvKvWDs=
Subject key identifier:   1B:62:B4:58:CE:2A:04:31:8E:14:B5:FE:B4:D6:72:0A:3A:AA:AD:20
Certificate issuer:       /CN=E82376114B533B210E3DA974DE7523551E7BB8F8
Certificate serial:       68DB9CB83AB8C221A8154BEC25D7EF17A0C13CC4
Authority key identifier: E8:23:76:11:4B:53:3B:21:0E:3D:A9:74:DE:75:23:55:1E:7B:B8:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E82376114B533B210E3DA974DE7523551E7BB8F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/34352e37302e31342e302f32342d3234203d3e20323731393333.roa
Signing time:             Tue 05 Mar 2024 18:07:36 +0000
ROA not before:           Tue 05 Mar 2024 18:02:36 +0000
ROA not after:            Tue 04 Mar 2025 18:07:36 +0000
asID:                     271933
IP address blocks:        45.70.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/E82376114B533B210E3DA974DE7523551E7BB8F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/E82376114B533B210E3DA974DE7523551E7BB8F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E82376114B533B210E3DA974DE7523551E7BB8F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:db:9c:b8:3a:b8:c2:21:a8:15:4b:ec:25:d7:ef:17:a0:c1:3c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E82376114B533B210E3DA974DE7523551E7BB8F8
        Validity
            Not Before: Mar  5 18:02:36 2024 GMT
            Not After : Mar  4 18:07:36 2025 GMT
        Subject: CN=1B62B458CE2A04318E14B5FEB4D6720A3AAAAD20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9d:ae:9c:b3:99:fe:8a:a4:0c:52:72:49:0b:
                    a7:d6:07:60:c5:f8:da:c8:19:41:9c:df:c2:64:fb:
                    20:d9:e7:9f:33:4f:de:f3:19:39:98:69:e4:e6:8b:
                    8d:86:79:7f:d7:7b:cf:ef:74:4b:57:e0:31:56:66:
                    63:49:05:f2:67:09:f9:d8:65:30:bf:b3:4e:39:7d:
                    2b:b4:89:58:93:07:d5:41:70:07:97:bb:1e:03:19:
                    ac:53:26:9e:69:23:94:20:1f:d7:a7:50:42:b2:f1:
                    c8:a5:a0:27:5b:41:7a:8e:42:f2:09:de:75:7f:fa:
                    d0:66:94:06:b3:66:ef:3d:63:c1:42:10:a3:32:82:
                    f4:d7:be:e0:b5:ff:5c:df:ab:d1:d7:60:d2:3b:17:
                    9f:95:93:ab:ce:76:84:c3:38:09:59:05:29:5b:d7:
                    b8:a2:38:64:27:5b:ef:e6:79:e0:1c:b4:8d:8f:e7:
                    3f:00:99:a3:91:ab:22:1b:82:ed:6a:e2:39:d1:10:
                    2e:ed:90:e5:c1:0d:3b:2a:67:1e:dd:f4:f7:1c:ac:
                    aa:22:b7:0e:a4:f4:2a:3d:2f:53:7e:66:7c:e4:25:
                    a4:ac:29:bc:fc:1c:c8:93:d8:3f:48:d6:ba:7a:0e:
                    3a:16:5f:c5:3b:01:5d:b2:b6:f6:aa:c1:db:68:8f:
                    35:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:62:B4:58:CE:2A:04:31:8E:14:B5:FE:B4:D6:72:0A:3A:AA:AD:20
            X509v3 Authority Key Identifier:
                keyid:E8:23:76:11:4B:53:3B:21:0E:3D:A9:74:DE:75:23:55:1E:7B:B8:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/E82376114B533B210E3DA974DE7523551E7BB8F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E82376114B533B210E3DA974DE7523551E7BB8F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/34352e37302e31342e302f32342d3234203d3e20323731393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:73:f1:3b:43:16:6d:8c:36:4c:39:95:54:b8:bc:db:2c:56:
         f4:5f:f7:e4:b5:e3:62:79:c3:26:0e:28:ee:57:6b:00:c9:45:
         34:b6:06:1e:e1:d5:52:21:d0:c7:c7:b6:bd:af:70:9c:08:47:
         a2:ec:9d:ce:7b:a3:4d:4f:d1:c3:ff:0a:0e:7c:c5:0d:6c:34:
         52:62:90:c6:4e:4a:35:44:9f:20:05:d5:61:dd:fb:9d:f5:37:
         c1:6e:77:08:bc:ea:7f:d9:f7:72:45:4d:20:7a:c0:02:78:78:
         4b:1f:bf:64:bc:a9:bc:56:c7:f1:4b:ce:59:4e:a0:a9:d1:87:
         b5:0b:7e:2b:7a:69:46:ed:1d:b3:d8:7b:19:fc:f5:a2:b3:ce:
         91:3e:fe:7f:2c:58:6c:2c:7b:dd:c8:28:a3:a6:20:4a:75:c1:
         7e:7f:ec:c8:88:90:6e:23:4f:f3:48:2b:0f:ab:2f:e8:68:e8:
         96:50:33:e3:6f:9a:4b:69:51:8d:ef:15:b3:02:35:e4:08:44:
         63:42:f5:1e:7d:b5:43:85:43:d8:fe:4c:2c:fe:b1:00:d9:c3:
         78:5b:fe:1b:97:b7:c8:7b:af:58:3f:a0:9e:16:50:34:6c:43:
         75:dd:dc:30:3b:02:d2:54:8c:2e:2e:da:9b:57:e1:f7:13:b4:
         9d:74:c0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 10:45:28 2024 by rpki-client on console-ams.rpki-client.org