Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/34352e37302e3233362e302f32322d3234203d3e203532343638.roa
File:                     34352e37302e3233362e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          SZRQxockXGvEoxt1d4g5uVgUVK35V52vjQsfYo0FXDM=
Subject key identifier:   A9:93:15:8B:23:9A:61:74:5A:8C:45:DE:96:43:19:92:2D:D3:3F:46
Certificate issuer:       /CN=5CB5BC2178578E05EB3BA17A1C805009B3BB65EB
Certificate serial:       199DAFA434CFD1C99E4C8D8B5431714AE8D66DD0
Authority key identifier: 5C:B5:BC:21:78:57:8E:05:EB:3B:A1:7A:1C:80:50:09:B3:BB:65:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/34352e37302e3233362e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:51:06 +0000
ROA not before:           Tue 05 Mar 2024 17:46:06 +0000
ROA not after:            Tue 04 Mar 2025 17:51:06 +0000
asID:                     52468
IP address blocks:        45.70.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:9d:af:a4:34:cf:d1:c9:9e:4c:8d:8b:54:31:71:4a:e8:d6:6d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CB5BC2178578E05EB3BA17A1C805009B3BB65EB
        Validity
            Not Before: Mar  5 17:46:06 2024 GMT
            Not After : Mar  4 17:51:06 2025 GMT
        Subject: CN=A993158B239A61745A8C45DE964319922DD33F46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a4:20:20:ae:4a:f3:66:21:f8:1c:79:c4:cf:
                    a2:26:61:45:a5:54:97:e5:75:2f:5c:ea:e0:07:8e:
                    3c:dc:fa:c9:ca:e2:5e:68:2b:ff:15:3c:99:e0:00:
                    bd:76:b8:39:5d:99:54:fa:d0:43:10:4c:70:fb:6a:
                    a2:9c:a5:2f:af:83:6c:6e:79:d5:66:de:5e:f1:1f:
                    79:e6:07:4a:9e:f7:87:64:a6:fa:1e:d0:c1:57:f7:
                    13:b5:bd:45:5b:8c:03:eb:1b:76:17:1e:fa:e8:e5:
                    48:c2:03:e1:94:5f:7c:96:bb:a7:44:e1:2e:07:7f:
                    0f:74:8d:44:c6:52:b3:5e:36:68:89:df:e6:1b:20:
                    af:9d:29:a5:93:b8:1a:45:fe:94:7e:b0:2a:79:1b:
                    05:54:b5:0a:06:3a:7b:a2:ce:04:0b:be:e6:72:4d:
                    bd:be:47:1a:ef:ad:be:5e:1f:15:ee:9f:de:06:37:
                    60:ef:f7:c8:fe:e3:be:a8:7b:98:c8:7d:21:78:0a:
                    59:ad:ed:cc:89:30:ba:c5:4b:61:61:12:69:49:c7:
                    a8:18:11:6f:0e:45:21:b0:18:a8:51:14:a8:69:56:
                    eb:9f:d2:2d:73:06:8e:6e:90:16:21:53:b6:16:25:
                    df:e8:55:a7:36:97:27:07:2b:fa:da:73:82:b2:6a:
                    9c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:93:15:8B:23:9A:61:74:5A:8C:45:DE:96:43:19:92:2D:D3:3F:46
            X509v3 Authority Key Identifier:
                keyid:5C:B5:BC:21:78:57:8E:05:EB:3B:A1:7A:1C:80:50:09:B3:BB:65:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/34352e37302e3233362e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:bb:a7:4d:0e:ff:50:a6:94:c5:72:e6:28:05:d9:08:ec:0f:
         f3:1d:10:fb:d0:aa:ca:eb:4b:ea:8d:b6:83:66:df:5c:06:35:
         f7:c7:a8:2f:b3:53:f7:09:fd:8e:14:69:da:7e:32:69:93:4f:
         c5:c0:2e:5b:9a:3d:f9:27:45:7c:5b:03:c8:c2:53:13:59:f3:
         b8:d5:3c:ad:74:0c:2a:1d:b7:5c:e9:e8:03:ff:93:f5:9e:b8:
         4a:e0:a0:9f:e2:4c:34:75:81:dd:89:dc:9b:d6:ca:77:c2:8b:
         af:ea:c5:43:01:4a:1d:ee:1f:09:87:36:81:ca:a8:1c:7c:04:
         b0:19:5c:f6:63:ab:37:5b:d2:78:42:b3:70:b5:9e:ba:87:3c:
         a0:f5:ad:f4:04:0f:5c:a1:3d:d2:75:e7:27:98:a8:6e:32:d5:
         b0:59:96:2c:fb:6d:75:03:91:61:d2:f4:c4:ce:42:36:4c:01:
         63:93:80:b1:0c:01:d4:02:9f:57:8a:e8:80:75:a3:56:43:57:
         d6:f9:2d:70:53:58:a6:6e:71:16:92:89:45:4f:ce:44:de:c5:
         b1:5d:a3:77:35:53:36:aa:0a:02:5b:47:82:88:d8:45:77:92:
         92:2f:1d:5d:8e:28:37:98:8b:be:70:0d:cc:c0:e5:3d:62:9a:
         93:0b:87:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org