Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/34352e37302e3233362e302f32322d3234203d3e20323634363638.roa
File:                     34352e37302e3233362e302f32322d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          8E7wfkTA+Z/1hJkUGsyvL8MbVkh0B+gMDQhJf6WjNv8=
Subject key identifier:   3C:75:43:78:F7:85:B5:D8:F4:F8:F4:D7:F2:EE:65:C8:4A:5A:A5:4D
Certificate issuer:       /CN=5CB5BC2178578E05EB3BA17A1C805009B3BB65EB
Certificate serial:       3F1A428695065122C18EBE31AE66FA76EABA3DD7
Authority key identifier: 5C:B5:BC:21:78:57:8E:05:EB:3B:A1:7A:1C:80:50:09:B3:BB:65:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/34352e37302e3233362e302f32322d3234203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 17:51:06 +0000
ROA not before:           Tue 05 Mar 2024 17:46:06 +0000
ROA not after:            Tue 04 Mar 2025 17:51:06 +0000
asID:                     264668
IP address blocks:        45.70.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1a:42:86:95:06:51:22:c1:8e:be:31:ae:66:fa:76:ea:ba:3d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CB5BC2178578E05EB3BA17A1C805009B3BB65EB
        Validity
            Not Before: Mar  5 17:46:06 2024 GMT
            Not After : Mar  4 17:51:06 2025 GMT
        Subject: CN=3C754378F785B5D8F4F8F4D7F2EE65C84A5AA54D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:05:06:e4:da:ea:b1:f6:30:5b:3e:4b:93:59:
                    fb:bf:26:76:34:2f:19:e0:24:a6:86:95:4a:fd:c5:
                    32:9b:24:47:df:e1:c6:b7:64:c7:c8:9a:44:c5:d9:
                    b5:f1:9d:18:2a:f3:b6:0b:85:4f:53:e6:e2:11:f8:
                    c6:3b:46:63:2b:6e:f1:d0:64:3e:78:5c:b1:3a:f8:
                    e7:25:70:55:3d:61:80:ac:c8:90:0c:31:dc:f1:2f:
                    84:aa:9f:8a:27:0f:20:fc:b8:08:3e:d8:c8:24:4d:
                    6d:64:1f:f9:f1:80:83:35:cd:8e:80:01:59:86:e8:
                    08:16:77:70:ec:52:9a:88:f7:ad:13:fc:26:97:10:
                    c6:6c:ab:8d:cb:8d:23:90:d6:28:4c:08:d2:1e:e3:
                    95:93:ab:0c:39:ff:64:07:53:65:62:93:b4:31:96:
                    ba:0a:64:cd:a1:70:f9:74:52:21:10:e7:80:85:e7:
                    8a:2b:d7:6b:2f:fe:a9:a6:57:77:ac:ef:c1:6b:d4:
                    2b:64:4f:6a:78:f9:94:2e:88:d2:27:8a:61:3b:0a:
                    7c:c1:c7:12:43:c6:ff:ee:ac:90:18:78:ba:51:95:
                    92:1c:b1:ed:bd:c0:77:3d:92:35:20:e4:8c:c5:1d:
                    f4:65:74:c7:2e:a9:70:5c:cd:9b:ef:02:0d:54:dd:
                    04:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:75:43:78:F7:85:B5:D8:F4:F8:F4:D7:F2:EE:65:C8:4A:5A:A5:4D
            X509v3 Authority Key Identifier:
                keyid:5C:B5:BC:21:78:57:8E:05:EB:3B:A1:7A:1C:80:50:09:B3:BB:65:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/34352e37302e3233362e302f32322d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:ef:43:11:6f:32:69:e9:39:a3:c2:b0:4c:81:50:06:0b:cb:
         9a:66:fe:2f:b4:b0:51:d2:6a:7d:d9:c5:70:63:3a:47:5d:3d:
         b0:7c:0e:26:0f:4e:e1:fa:4c:e6:4f:43:ed:07:22:97:e8:a5:
         1c:a1:89:9c:86:2e:92:e9:b7:a5:0c:71:fb:24:3b:22:f1:67:
         ca:f0:aa:42:68:0b:a3:5d:5f:dc:7a:f6:dd:fe:fe:5a:db:e4:
         34:9d:86:f1:ed:3c:bc:8a:a4:a9:86:dc:1f:e1:13:fa:88:4d:
         0f:7c:1e:8e:17:a3:cd:8c:86:96:df:df:19:03:eb:e1:d7:ac:
         3c:f5:34:1d:62:6e:f2:65:74:36:b1:e2:1b:19:21:9e:60:f8:
         0d:09:2f:b7:ad:3e:25:87:6a:a7:0e:a2:99:b5:3d:e3:f0:af:
         87:f2:f8:a7:55:dd:90:88:49:8e:c6:da:e6:18:e1:b8:d0:a1:
         2c:d9:68:2b:ef:02:f8:d0:ff:eb:e8:52:c6:cb:28:5f:20:5c:
         93:16:57:c6:fb:08:ec:c9:54:ae:f1:5e:57:57:7e:24:57:47:
         de:b8:21:c4:77:58:a8:93:fc:71:dc:11:4a:d9:67:b6:2b:60:
         15:7d:68:f5:83:83:b1:6a:f3:9d:37:97:18:a4:09:e6:8b:c7:
         6c:99:f0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org