Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/34352e37302e3232382e302f32322d3232203d3e20323635383236.roa
File:                     34352e37302e3232382e302f32322d3232203d3e20323635383236.roa (raw, json)
Hash identifier:          aNbu75+urt4cLbuKW4YBU3FbGoeqJUcglEaYfbnFD4A=
Subject key identifier:   75:27:2B:04:95:FF:69:54:4B:2C:D8:6A:EE:8C:4C:CF:38:79:14:48
Certificate issuer:       /CN=F785859FBACDBEF31792F07975E7101B28F16433
Certificate serial:       7ECB4F26253CFCC5B773755356BD01AED5582EFE
Authority key identifier: F7:85:85:9F:BA:CD:BE:F3:17:92:F0:79:75:E7:10:1B:28:F1:64:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F785859FBACDBEF31792F07975E7101B28F16433.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/34352e37302e3232382e302f32322d3232203d3e20323635383236.roa
Signing time:             Tue 04 Feb 2025 18:23:29 +0000
ROA not before:           Tue 04 Feb 2025 18:18:29 +0000
ROA not after:            Tue 03 Feb 2026 18:23:29 +0000
asID:                     265826
IP address blocks:        45.70.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/F785859FBACDBEF31792F07975E7101B28F16433.crl
                          rsync://repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/F785859FBACDBEF31792F07975E7101B28F16433.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F785859FBACDBEF31792F07975E7101B28F16433.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Mar 2025 05:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:cb:4f:26:25:3c:fc:c5:b7:73:75:53:56:bd:01:ae:d5:58:2e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F785859FBACDBEF31792F07975E7101B28F16433
        Validity
            Not Before: Feb  4 18:18:29 2025 GMT
            Not After : Feb  3 18:23:29 2026 GMT
        Subject: CN=75272B0495FF69544B2CD86AEE8C4CCF38791448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e0:41:6c:ba:65:f0:54:80:07:2e:11:3d:4f:
                    99:8f:75:b8:74:d7:5c:8d:32:1b:74:1d:24:21:cf:
                    7d:b3:fc:16:ca:65:26:63:6f:59:1c:e0:71:b3:37:
                    15:2c:7f:56:41:6f:78:8f:34:b2:b7:ff:3a:d5:b8:
                    b8:f4:47:c3:06:6a:8c:88:a3:15:d7:b4:3d:33:73:
                    0f:db:f2:20:ce:49:c6:69:dd:8f:cb:dc:11:d0:d9:
                    42:6d:05:a2:cd:3a:ce:04:c6:1b:d4:1c:ec:29:2a:
                    70:3b:85:4d:2e:69:79:70:79:40:b6:8b:f9:0f:48:
                    4e:54:93:b4:ec:48:0b:5b:4c:30:e1:e4:65:34:38:
                    c0:08:cc:62:2e:05:88:88:36:e5:1d:2a:4f:a3:61:
                    b3:e9:62:e8:ff:5f:5f:c8:44:5f:b9:81:0a:57:b5:
                    2c:73:53:bd:e0:d6:fc:5c:bb:67:c7:02:cf:8e:e2:
                    c2:3a:e1:72:e4:55:b6:7a:c5:ff:56:a5:83:c8:89:
                    5d:2c:b9:23:57:ff:13:61:c3:f1:3e:d6:b8:b0:3a:
                    3a:a3:9e:7b:27:4f:04:1c:44:94:06:46:3d:fc:0d:
                    9c:26:bd:43:b1:9a:2e:7a:e6:f4:9d:a3:03:30:55:
                    df:9e:18:e6:59:0f:6a:dd:fa:a6:c1:8e:23:d3:a0:
                    9f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:27:2B:04:95:FF:69:54:4B:2C:D8:6A:EE:8C:4C:CF:38:79:14:48
            X509v3 Authority Key Identifier:
                keyid:F7:85:85:9F:BA:CD:BE:F3:17:92:F0:79:75:E7:10:1B:28:F1:64:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/F785859FBACDBEF31792F07975E7101B28F16433.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F785859FBACDBEF31792F07975E7101B28F16433.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/34352e37302e3232382e302f32322d3232203d3e20323635383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d9:9d:74:e8:8f:da:97:97:73:ab:73:b4:95:d4:22:fb:32:a6:
         ec:65:8f:71:e1:06:46:74:ac:0a:b3:74:55:f0:16:84:f6:73:
         f5:fa:69:dd:77:c2:8c:db:19:15:2c:6d:9e:3a:09:30:80:ae:
         eb:36:9c:29:21:e9:87:bf:7d:05:5c:e0:53:90:dc:01:5b:d0:
         17:9e:50:10:24:98:3c:38:9b:1e:c5:c0:6d:ce:45:41:56:7d:
         fe:92:9f:11:de:5d:81:d1:84:bd:9c:f3:4f:8d:03:83:70:5c:
         1c:4a:f8:0f:f2:0f:94:f1:4e:e3:92:14:fb:86:e7:66:a5:32:
         71:38:07:6a:59:44:9e:12:2b:80:31:d5:2e:e5:f9:de:eb:a7:
         b1:7b:41:03:2a:52:8b:ce:96:1e:ae:f1:ba:3b:5d:8e:3a:d3:
         4a:e1:c9:54:dc:7e:77:4b:26:4d:ee:38:56:41:41:4e:12:90:
         22:b0:72:5a:41:e3:f5:da:39:91:be:a1:d9:61:18:15:f8:25:
         24:49:3e:79:85:29:67:50:f9:1c:df:6e:13:f6:af:02:4e:f7:
         5d:f2:f8:8b:21:8f:de:41:07:74:b0:c3:e3:56:df:fd:0a:9d:
         61:a3:6d:68:43:84:d6:bd:81:ca:e4:d8:20:a0:35:70:c4:cf:
         e6:28:40:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:21:51 2025 by rpki-client