Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/34352e37302e3137312e302f32342d3234203d3e20323635383333.roa
File:                     34352e37302e3137312e302f32342d3234203d3e20323635383333.roa (raw, json)
Hash identifier:          4wDPPZRfJDupP3wZPavfudBqpJdESM9/rSF/QcPSiOg=
Subject key identifier:   1C:A5:FC:E3:FF:DB:B1:C2:FE:90:37:57:58:B5:67:65:5C:C5:78:EF
Certificate issuer:       /CN=80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB
Certificate serial:       6712BE7B5E484ADE3E3D5599F60C3BACF412FF1A
Authority key identifier: 80:F7:A4:CB:2F:28:ED:1C:BB:79:FD:29:CE:13:77:70:37:61:DF:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/34352e37302e3137312e302f32342d3234203d3e20323635383333.roa
Signing time:             Tue 05 Mar 2024 17:50:18 +0000
ROA not before:           Tue 05 Mar 2024 17:45:18 +0000
ROA not after:            Tue 04 Mar 2025 17:50:18 +0000
asID:                     265833
IP address blocks:        45.70.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:12:be:7b:5e:48:4a:de:3e:3d:55:99:f6:0c:3b:ac:f4:12:ff:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB
        Validity
            Not Before: Mar  5 17:45:18 2024 GMT
            Not After : Mar  4 17:50:18 2025 GMT
        Subject: CN=1CA5FCE3FFDBB1C2FE90375758B567655CC578EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ba:ff:59:e0:e2:c7:aa:5b:3f:96:8b:85:e4:
                    03:4c:cc:8b:f7:b3:07:b2:76:ab:49:d0:0e:d4:1f:
                    06:01:5f:e2:65:af:ec:12:52:ae:f6:b7:55:d1:3c:
                    49:0f:e8:87:bb:6e:ac:0e:26:ad:a8:2c:71:3c:d6:
                    81:80:e4:ca:bb:04:4f:c0:69:75:8a:f7:80:c5:09:
                    2d:86:6e:1b:ef:40:da:e3:6e:46:1e:bf:0e:16:bc:
                    9c:2e:ba:fb:c1:50:5d:2f:5c:d7:96:35:94:2e:1c:
                    92:ef:46:1f:a5:af:aa:2e:63:0f:20:e4:0d:6e:8b:
                    b8:1b:37:f6:32:40:c6:44:51:ae:1d:94:72:95:08:
                    5c:cc:b5:d0:92:81:31:e8:35:9b:bc:6c:5c:49:06:
                    0f:81:ab:bb:f9:7b:7f:fa:5d:7a:b3:50:af:ee:5e:
                    27:81:8c:8d:6f:ec:5e:43:27:d8:9b:c9:57:2c:79:
                    6d:55:94:a6:05:95:b6:f8:ca:a6:c8:a1:26:1f:ce:
                    eb:af:b6:ff:e7:82:3a:34:bc:ec:8e:b3:f3:bf:4e:
                    7b:21:cc:01:c9:f0:6e:ad:dd:94:e6:90:97:fa:d1:
                    ae:dd:b7:e7:b7:45:83:bd:b1:95:67:2a:37:33:0c:
                    5d:e3:c6:bd:7e:1f:7d:85:65:6c:ef:30:be:76:30:
                    8a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A5:FC:E3:FF:DB:B1:C2:FE:90:37:57:58:B5:67:65:5C:C5:78:EF
            X509v3 Authority Key Identifier:
                keyid:80:F7:A4:CB:2F:28:ED:1C:BB:79:FD:29:CE:13:77:70:37:61:DF:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/34352e37302e3137312e302f32342d3234203d3e20323635383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:4a:08:44:1f:56:f1:39:93:91:bf:2d:c9:b9:15:f1:86:37:
         2f:13:6c:69:20:bc:97:96:0c:c3:48:2c:de:08:0e:f8:66:8e:
         f6:68:34:9f:07:b2:51:ec:d1:a1:ca:e1:a9:a9:9e:34:85:86:
         14:11:85:d4:0e:d4:b2:0d:ed:6a:df:f8:8c:d8:6d:01:a9:69:
         60:7f:13:98:46:55:f7:0b:f4:fb:0d:97:91:47:f1:c5:05:84:
         65:8b:f9:08:1d:14:8d:44:d9:8b:bd:fd:ac:ec:fa:dc:98:c4:
         a7:37:aa:c5:2b:34:5d:11:84:fb:93:6b:d6:9b:1c:3c:11:b5:
         e6:98:0a:41:06:ce:c3:10:cb:56:f6:57:89:10:07:f4:ad:ea:
         4f:a0:3e:9f:4a:37:5b:5b:3d:da:f2:50:9c:c3:c6:be:d9:21:
         5d:70:e5:22:a2:2f:52:33:41:c4:98:ec:f1:08:b3:12:3f:2f:
         15:93:c0:56:7f:f6:4b:3e:26:17:ac:b5:d8:42:e6:31:1e:67:
         c3:30:fd:bf:69:10:8c:2b:87:de:b7:03:32:a2:b5:5f:bf:ea:
         fb:4e:c7:a5:50:3f:49:94:4d:b6:91:4c:03:01:88:26:55:85:
         29:be:77:30:3f:47:b3:4f:e1:7c:0c:fd:25:e3:32:b0:ae:12:
         01:1b:37:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:50 2024 by rpki-client on console-ams.rpki-client.org