Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/34352e37302e3233302e302f32332d3233203d3e20323635383236.roa
File:                     34352e37302e3233302e302f32332d3233203d3e20323635383236.roa (raw, json)
Hash identifier:          Jo6NpD0Il7wceVtvWohvwDLr0i6WHfXAC4eSgjmIyY0=
Subject key identifier:   92:EE:B2:95:01:C4:F1:3F:5E:51:D3:8F:69:B9:07:04:CD:C4:F2:29
Certificate issuer:       /CN=F785859FBACDBEF31792F07975E7101B28F16433
Certificate serial:       3663D41642A3AACA7C1F1D68C7AD18121097D773
Authority key identifier: F7:85:85:9F:BA:CD:BE:F3:17:92:F0:79:75:E7:10:1B:28:F1:64:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F785859FBACDBEF31792F07975E7101B28F16433.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/34352e37302e3233302e302f32332d3233203d3e20323635383236.roa
Signing time:             Tue 05 Mar 2024 17:48:17 +0000
ROA not before:           Tue 05 Mar 2024 17:43:17 +0000
ROA not after:            Tue 04 Mar 2025 17:48:17 +0000
asID:                     265826
IP address blocks:        45.70.230.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/F785859FBACDBEF31792F07975E7101B28F16433.crl
                          rsync://repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/F785859FBACDBEF31792F07975E7101B28F16433.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F785859FBACDBEF31792F07975E7101B28F16433.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 08:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:63:d4:16:42:a3:aa:ca:7c:1f:1d:68:c7:ad:18:12:10:97:d7:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F785859FBACDBEF31792F07975E7101B28F16433
        Validity
            Not Before: Mar  5 17:43:17 2024 GMT
            Not After : Mar  4 17:48:17 2025 GMT
        Subject: CN=92EEB29501C4F13F5E51D38F69B90704CDC4F229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bf:c7:e8:bc:4c:cf:f2:fc:c5:46:ea:19:ce:
                    3c:a2:f3:e7:c0:b9:1f:90:1f:a0:e9:cd:8e:ac:d8:
                    eb:57:f9:3f:c1:7f:ac:f7:a1:d4:20:fe:e0:b8:28:
                    eb:7b:6d:cc:e2:6d:5a:36:59:4f:de:43:9a:9e:d8:
                    da:33:c9:28:ba:5b:4b:f9:a9:ef:6b:0b:dc:3c:4b:
                    6f:dc:a3:7d:1e:2f:14:22:c0:1e:77:aa:fc:db:36:
                    45:8b:1c:f6:0f:e6:2d:a8:93:36:35:00:ca:31:9e:
                    a7:75:af:cb:b9:f7:5e:09:b6:67:23:97:f3:0d:a8:
                    72:cb:d8:5e:de:f5:f1:3f:05:82:1e:11:24:3e:12:
                    21:2d:2c:53:40:95:e0:00:0c:aa:1a:a7:72:64:fc:
                    40:93:10:0f:77:c7:c3:2b:00:22:6d:cd:ab:35:e2:
                    aa:60:af:09:10:d3:34:36:5a:64:48:e7:bc:69:8e:
                    1b:1d:a1:50:d1:00:d4:b9:bd:cd:26:b7:af:75:55:
                    c6:35:e2:e2:67:f8:d4:ca:86:a7:72:31:de:91:93:
                    f0:0f:05:f4:80:84:5d:c7:52:bb:9c:c6:09:ed:e2:
                    6f:00:d5:9d:fe:fd:06:e2:9e:2e:d7:a6:43:76:84:
                    03:7b:0c:a9:a3:f6:4f:c9:9c:0f:d6:8f:bf:35:4b:
                    84:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:EE:B2:95:01:C4:F1:3F:5E:51:D3:8F:69:B9:07:04:CD:C4:F2:29
            X509v3 Authority Key Identifier:
                keyid:F7:85:85:9F:BA:CD:BE:F3:17:92:F0:79:75:E7:10:1B:28:F1:64:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/F785859FBACDBEF31792F07975E7101B28F16433.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F785859FBACDBEF31792F07975E7101B28F16433.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/34352e37302e3233302e302f32332d3233203d3e20323635383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:6f:7a:68:08:00:a8:0e:fc:a7:29:31:e7:04:3a:fd:cf:3d:
         29:11:8e:0e:cc:07:4a:5a:22:66:41:77:e5:23:9d:61:cf:f4:
         98:f7:78:90:0b:c8:8a:ee:a7:f0:91:4a:7f:f0:7e:54:b7:89:
         d1:3c:0c:32:05:4b:ac:28:78:ee:a9:20:9f:ad:a9:af:db:ef:
         f2:24:ac:7a:96:67:98:4f:6d:3f:2a:bf:84:d3:c2:09:da:2e:
         9e:62:46:79:86:3e:d0:ac:23:9f:a5:e8:2c:36:1d:be:8e:fc:
         13:47:26:6c:03:4e:30:17:2f:68:d9:85:ba:a5:50:86:8c:d3:
         4a:27:f3:70:fe:46:55:9f:21:b4:88:ff:55:cc:f8:67:0f:f5:
         cb:22:f6:56:ef:90:cf:43:8d:f3:47:7c:5b:5b:81:86:4b:e1:
         f0:64:6c:88:ab:77:db:79:44:33:f7:37:83:d1:ce:19:3b:ef:
         f0:13:ad:c9:00:fa:34:04:d0:54:51:c6:a3:ed:a9:88:62:8c:
         be:aa:00:52:05:d6:c4:de:4f:04:78:50:3a:ee:3c:35:34:d1:
         b3:8b:1c:ce:cf:18:d3:54:ff:7a:04:4a:73:ec:91:d2:a2:f8:
         4d:d9:61:e0:48:2f:56:a1:c3:ce:e5:b7:31:cc:a5:b6:3c:81:
         0b:57:e2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 10:50:55 2024 by rpki-client on console-ams.rpki-client.org