Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/34352e37302e31352e302f32342d3234203d3e20323731393333.roa
File:                     34352e37302e31352e302f32342d3234203d3e20323731393333.roa (raw, json)
Hash identifier:          b47UVcj4RjEj0QXSPgzovc0IVPAZdk5lRVahNNohGjQ=
Subject key identifier:   A7:7A:A0:D3:EB:43:8E:47:44:01:31:9E:E7:F1:AB:AF:6D:DB:CA:F9
Certificate issuer:       /CN=E82376114B533B210E3DA974DE7523551E7BB8F8
Certificate serial:       1E8C75978FAC4150AB3CA9ACDB815448C29A30BE
Authority key identifier: E8:23:76:11:4B:53:3B:21:0E:3D:A9:74:DE:75:23:55:1E:7B:B8:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E82376114B533B210E3DA974DE7523551E7BB8F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/34352e37302e31352e302f32342d3234203d3e20323731393333.roa
Signing time:             Tue 05 Mar 2024 18:07:37 +0000
ROA not before:           Tue 05 Mar 2024 18:02:37 +0000
ROA not after:            Tue 04 Mar 2025 18:07:37 +0000
asID:                     271933
IP address blocks:        45.70.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/E82376114B533B210E3DA974DE7523551E7BB8F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/E82376114B533B210E3DA974DE7523551E7BB8F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E82376114B533B210E3DA974DE7523551E7BB8F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:8c:75:97:8f:ac:41:50:ab:3c:a9:ac:db:81:54:48:c2:9a:30:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E82376114B533B210E3DA974DE7523551E7BB8F8
        Validity
            Not Before: Mar  5 18:02:37 2024 GMT
            Not After : Mar  4 18:07:37 2025 GMT
        Subject: CN=A77AA0D3EB438E474401319EE7F1ABAF6DDBCAF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:ba:5b:12:95:33:97:5e:15:ed:86:08:14:
                    af:5a:a7:54:0d:d2:41:83:d8:03:d1:1f:c7:aa:ab:
                    6a:e7:7c:d1:63:8b:89:6a:ca:bf:f6:bc:b1:07:aa:
                    ec:22:0d:ca:1b:6c:ae:07:61:94:31:06:13:6c:1a:
                    fe:15:7f:f8:7d:fe:13:0e:04:c1:22:5c:f7:9a:ef:
                    af:7b:8d:00:ff:ff:ff:a9:6b:03:60:7b:e7:dd:d7:
                    6d:88:c6:f1:bd:f1:47:e0:4e:a0:b2:ef:9e:61:0e:
                    88:92:0b:f3:a5:77:17:6a:f8:e8:cb:c9:f9:66:a0:
                    fe:16:0b:ce:12:c2:40:4a:de:ee:a9:bc:0d:9f:8b:
                    64:43:76:dc:81:3a:f4:5c:46:e5:8a:63:80:33:2b:
                    61:7c:d1:00:00:cb:09:f4:ae:d3:6a:4a:be:ea:f8:
                    62:8e:53:69:58:bd:29:65:97:c3:5f:c2:b4:89:83:
                    56:19:4f:75:7a:c0:0b:90:16:60:ac:77:7c:fc:71:
                    63:0c:94:02:31:a4:15:9f:17:eb:c0:75:0b:68:5e:
                    94:09:f2:d9:f5:e4:6e:0a:97:88:51:94:c7:e6:5d:
                    63:5c:5e:84:65:1b:83:64:ef:ff:c6:df:c9:d3:33:
                    79:3c:5c:cb:14:8a:c6:27:84:60:d9:24:a9:2b:f3:
                    00:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7A:A0:D3:EB:43:8E:47:44:01:31:9E:E7:F1:AB:AF:6D:DB:CA:F9
            X509v3 Authority Key Identifier:
                keyid:E8:23:76:11:4B:53:3B:21:0E:3D:A9:74:DE:75:23:55:1E:7B:B8:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/E82376114B533B210E3DA974DE7523551E7BB8F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E82376114B533B210E3DA974DE7523551E7BB8F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/34352e37302e31352e302f32342d3234203d3e20323731393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:13:a9:fd:bb:ad:97:f9:58:db:72:cb:1b:0d:e8:cb:d4:6e:
         11:85:68:32:83:ac:fc:51:db:9e:c5:17:81:e0:9c:fd:eb:40:
         a7:e0:af:de:c0:30:47:fb:63:b6:39:5b:6b:d0:14:7c:c0:4c:
         2e:a5:41:ed:b8:09:bb:93:8d:9b:54:f3:c1:d3:98:b6:1f:c1:
         09:ec:94:5a:53:b6:44:25:74:20:5a:96:14:21:cb:80:d2:a2:
         1b:2e:9d:61:60:e0:18:b3:72:b1:08:1f:e4:a6:46:4e:00:37:
         42:b6:fb:70:41:65:4a:5b:aa:38:36:a7:8e:03:6f:38:9d:bc:
         e2:27:9a:01:73:f0:72:5d:e1:8d:7c:78:2d:10:97:cc:41:91:
         22:cc:81:1b:e5:40:0c:72:2e:d0:ec:7d:96:df:c4:ec:00:ac:
         03:26:7e:04:c0:85:76:57:ac:9c:d5:93:c5:17:32:e4:19:fa:
         23:02:92:97:80:44:5b:a7:dc:6d:8a:fc:87:f0:2a:f7:4b:73:
         0b:d4:79:62:34:f4:53:f0:4f:a9:79:e7:e2:da:26:8f:f5:26:
         b2:25:88:f2:33:95:02:18:49:02:34:ee:3c:1a:b6:71:3c:8d:
         94:21:a0:0d:e9:c2:67:90:fd:db:0e:2f:b2:6a:72:6b:e9:8b:
         d2:8b:2a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:07:58 2024 by rpki-client on console-ams.rpki-client.org