Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/34352e37302e3136382e302f32332d3234203d3e203237393531.roa
File:                     34352e37302e3136382e302f32332d3234203d3e203237393531.roa (raw, json)
Hash identifier:          wGpGfG/KDPBw1MHcBh++AlIsgZGfgiSrpiZ7v2nVDBo=
Subject key identifier:   67:57:AA:2A:F3:F1:08:6F:CC:F2:D1:56:D1:E2:CD:74:C8:42:41:A0
Certificate issuer:       /CN=80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB
Certificate serial:       08BD6688E7E0F096BF757C9910EA5056BFEF5803
Authority key identifier: 80:F7:A4:CB:2F:28:ED:1C:BB:79:FD:29:CE:13:77:70:37:61:DF:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/34352e37302e3136382e302f32332d3234203d3e203237393531.roa
Signing time:             Tue 05 Mar 2024 17:50:18 +0000
ROA not before:           Tue 05 Mar 2024 17:45:18 +0000
ROA not after:            Tue 04 Mar 2025 17:50:18 +0000
asID:                     27951
IP address blocks:        45.70.168.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:bd:66:88:e7:e0:f0:96:bf:75:7c:99:10:ea:50:56:bf:ef:58:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB
        Validity
            Not Before: Mar  5 17:45:18 2024 GMT
            Not After : Mar  4 17:50:18 2025 GMT
        Subject: CN=6757AA2AF3F1086FCCF2D156D1E2CD74C84241A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:71:e9:f1:72:11:0b:d5:c6:ae:67:a4:bb:af:
                    4e:b5:b8:13:8f:34:dc:97:1a:94:8e:29:e6:62:d2:
                    3a:32:9d:23:08:a7:f8:78:8c:8c:c9:a9:2f:7c:d1:
                    11:39:12:b6:a4:e1:52:d6:e1:b6:78:7b:e9:10:cc:
                    71:f1:bd:33:45:ca:09:2e:f9:1c:09:d8:19:e2:2b:
                    d5:e9:98:23:9b:6d:f0:b4:6f:f5:3a:49:2b:d4:fa:
                    a5:5d:d3:54:b4:dc:15:5c:a1:ba:93:21:fb:00:6e:
                    42:66:41:d3:e1:e1:bf:93:20:e8:a7:05:94:46:1c:
                    d5:c1:37:b3:01:58:01:58:76:29:70:9f:53:9c:5e:
                    d2:5e:89:8d:11:2f:f3:c2:8c:eb:5f:68:3e:16:13:
                    d8:d4:c2:b2:5d:d3:2b:32:8f:83:c0:44:67:df:06:
                    8d:e5:26:e5:ea:78:3a:1b:68:2a:76:e4:78:f9:f9:
                    58:27:f8:f8:20:96:a8:f8:57:28:5e:c0:b9:4c:7e:
                    2a:0d:87:69:ee:07:e7:d7:aa:98:c6:af:ba:f6:29:
                    88:e7:6b:94:6c:9c:e1:41:14:55:58:37:09:39:a4:
                    3b:c1:84:8a:05:ff:3a:3b:0d:37:eb:b8:d5:3d:be:
                    c6:9a:94:2c:46:ac:00:3c:d0:2b:5b:1d:44:8b:fd:
                    27:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:57:AA:2A:F3:F1:08:6F:CC:F2:D1:56:D1:E2:CD:74:C8:42:41:A0
            X509v3 Authority Key Identifier:
                keyid:80:F7:A4:CB:2F:28:ED:1C:BB:79:FD:29:CE:13:77:70:37:61:DF:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/34352e37302e3136382e302f32332d3234203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:34:c0:02:a3:39:1e:14:88:b2:d1:0c:71:7a:49:6a:a9:97:
         f6:ba:01:7e:42:72:99:1b:b2:16:74:8b:43:dc:cf:63:9a:a2:
         de:ec:25:da:28:5a:1b:32:dc:47:87:76:37:32:63:7b:76:e5:
         f9:f5:f8:40:75:b9:a1:ba:8f:b8:53:6f:e4:de:ca:af:5d:fd:
         e0:cb:41:7d:70:c0:e9:56:08:7b:a9:2e:f4:10:95:2a:a2:59:
         a6:96:76:42:2c:26:96:3a:c7:f9:3c:a5:52:48:f6:2c:37:64:
         86:fa:80:57:a1:cb:10:c0:06:cd:a2:8c:8c:b8:55:41:b4:3c:
         98:05:46:da:02:2a:8a:7c:31:df:fd:ec:ef:2d:41:a7:1d:af:
         a5:97:74:5e:74:65:32:69:ac:6c:16:2f:9a:1c:ec:23:d7:4c:
         42:fb:34:65:9c:b2:a5:d0:13:4f:d2:2a:30:e7:0f:7a:23:cf:
         9f:3f:a6:c3:ab:e6:b0:b0:a3:6d:d4:bd:38:fe:1e:d2:e6:37:
         72:89:7f:23:7b:54:18:d1:ad:81:42:4b:08:3c:03:81:f6:87:
         50:48:12:3f:3e:2d:a2:45:23:1c:84:94:1d:b4:6a:7f:26:b9:
         05:85:81:cf:4a:40:29:a4:ed:ce:63:2e:df:e3:70:b8:87:dd:
         ff:af:9c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 09:50:48 2024 by rpki-client on console-fra.rpki-client.org