Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8EBDD1DCB41F6076C7E6FEA3333A5FC30D391BAF76D71BEC58EEF5B6085A607C/0/34352e37302e3234302e302f32322d3234203d3e20323635383138.roa
File:                     34352e37302e3234302e302f32322d3234203d3e20323635383138.roa (raw, json)
Hash identifier:          TAMA5QPa1oJBedAZGSQQNxQE539EapB6u9y8+O/OQxI=
Subject key identifier:   7A:C5:C5:21:8C:D8:D6:2C:9B:3C:B7:B2:29:13:32:C4:3A:80:95:CE
Certificate issuer:       /CN=F166E23E4118700C69E87B40D8D7DD225C3DF563
Certificate serial:       7BF2315AC8BBC25F8F929F782B4F7119A7E72778
Authority key identifier: F1:66:E2:3E:41:18:70:0C:69:E8:7B:40:D8:D7:DD:22:5C:3D:F5:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F166E23E4118700C69E87B40D8D7DD225C3DF563.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8EBDD1DCB41F6076C7E6FEA3333A5FC30D391BAF76D71BEC58EEF5B6085A607C/0/34352e37302e3234302e302f32322d3234203d3e20323635383138.roa
Signing time:             Wed 19 Feb 2025 03:15:00 +0000
ROA not before:           Wed 19 Feb 2025 03:10:00 +0000
ROA not after:            Wed 18 Feb 2026 03:15:00 +0000
asID:                     265818
IP address blocks:        45.70.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8EBDD1DCB41F6076C7E6FEA3333A5FC30D391BAF76D71BEC58EEF5B6085A607C/0/F166E23E4118700C69E87B40D8D7DD225C3DF563.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8EBDD1DCB41F6076C7E6FEA3333A5FC30D391BAF76D71BEC58EEF5B6085A607C/0/F166E23E4118700C69E87B40D8D7DD225C3DF563.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F166E23E4118700C69E87B40D8D7DD225C3DF563.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 08:27:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f2:31:5a:c8:bb:c2:5f:8f:92:9f:78:2b:4f:71:19:a7:e7:27:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F166E23E4118700C69E87B40D8D7DD225C3DF563
        Validity
            Not Before: Feb 19 03:10:00 2025 GMT
            Not After : Feb 18 03:15:00 2026 GMT
        Subject: CN=7AC5C5218CD8D62C9B3CB7B2291332C43A8095CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2e:17:1d:48:6f:e3:99:e9:a2:90:8d:67:da:
                    7a:cd:4c:75:cc:eb:64:55:ec:50:4c:3b:17:d8:6d:
                    89:53:41:c9:d2:73:60:d2:63:28:9a:eb:73:ba:de:
                    11:ae:c6:85:3b:75:4f:76:be:6a:24:61:69:96:40:
                    81:d1:aa:af:70:4c:29:32:19:19:ad:11:b7:9b:47:
                    03:ef:c6:30:f5:45:08:b1:11:3d:5c:42:73:f5:ff:
                    66:4e:7a:17:88:4f:73:c9:2e:ae:f5:01:5c:2e:11:
                    7f:19:68:d9:16:b1:6c:e8:98:01:75:6e:fa:76:04:
                    ea:f0:74:0a:b2:36:10:69:5f:ff:88:92:6c:36:6c:
                    23:b6:4d:d4:2b:ee:d8:64:3b:dd:e1:ca:f0:5a:a0:
                    f4:2c:32:fd:82:41:20:27:5b:36:9b:58:b2:df:66:
                    47:af:44:77:cf:2e:76:4c:13:df:df:38:d7:bb:a0:
                    b7:36:81:70:4d:91:ea:7e:4e:87:26:47:2c:9c:ec:
                    15:6f:43:4e:0e:ed:c6:d7:ca:dd:86:67:3b:1a:42:
                    c7:8b:05:1b:13:e8:e5:0a:60:1c:7e:ae:27:6a:27:
                    b2:8a:7f:42:e1:56:e2:78:b8:2a:1e:58:02:3f:4d:
                    c0:30:f5:40:0c:66:78:44:5e:20:b7:b9:e2:e0:5d:
                    9c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C5:C5:21:8C:D8:D6:2C:9B:3C:B7:B2:29:13:32:C4:3A:80:95:CE
            X509v3 Authority Key Identifier:
                keyid:F1:66:E2:3E:41:18:70:0C:69:E8:7B:40:D8:D7:DD:22:5C:3D:F5:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8EBDD1DCB41F6076C7E6FEA3333A5FC30D391BAF76D71BEC58EEF5B6085A607C/0/F166E23E4118700C69E87B40D8D7DD225C3DF563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F166E23E4118700C69E87B40D8D7DD225C3DF563.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EBDD1DCB41F6076C7E6FEA3333A5FC30D391BAF76D71BEC58EEF5B6085A607C/0/34352e37302e3234302e302f32322d3234203d3e20323635383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:10:85:bf:30:08:99:80:46:41:88:91:21:49:3c:29:49:c1:
         55:5d:2a:e3:45:77:2e:f0:31:68:bb:80:82:e8:c5:f8:2b:29:
         e7:32:15:15:13:d7:fd:1b:2e:a1:ce:a0:2d:5f:3d:c5:0f:fe:
         35:f1:20:d6:81:45:b4:87:df:7c:bc:08:a1:87:61:7a:36:9d:
         82:60:0c:e4:e2:20:d0:a9:27:72:44:0b:09:d1:d1:2f:c6:17:
         86:fc:96:6a:91:22:a2:f4:86:09:d6:1e:cb:1f:4a:a1:69:1b:
         f8:9c:17:5d:c0:0a:e7:8e:13:54:eb:51:10:08:fd:48:24:fa:
         32:1f:22:a9:b0:3f:7b:49:e5:a8:4e:c2:40:a7:b9:69:2a:77:
         1b:ea:44:47:94:8c:a8:08:e7:89:2d:f7:f7:fb:64:50:da:52:
         40:8e:a0:6e:16:3d:98:02:fe:d1:f9:d0:55:53:e4:cf:50:d4:
         c7:5a:e6:56:0e:7d:8b:6a:aa:15:f7:47:ab:16:78:b9:34:08:
         3e:33:48:e3:b2:f8:b2:5f:3e:ed:cd:b2:91:c3:0c:58:60:d6:
         67:c8:77:38:43:6c:15:c1:fc:7f:f4:c9:4c:d8:7e:f1:c2:9d:
         83:f8:b7:51:70:fd:91:14:cb:2e:86:0d:e8:2f:1a:bb:c3:a5:
         63:96:d7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:09:00 2025 by rpki-client