Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/34352e37302e3233362e302f32322d3234203d3e203532343638.roa
File:                     34352e37302e3233362e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          ThRyrr9p5qkc7/mPei5hLwnE0id36BPCpHyr8z0vlaU=
Subject key identifier:   B3:7E:BF:10:28:09:FF:FA:A8:BF:B6:EE:B0:D5:8B:9B:0E:3D:F7:62
Certificate issuer:       /CN=5CB5BC2178578E05EB3BA17A1C805009B3BB65EB
Certificate serial:       2F4DA9A2190B79279D86F9930ED2D23D3C4C0C1B
Authority key identifier: 5C:B5:BC:21:78:57:8E:05:EB:3B:A1:7A:1C:80:50:09:B3:BB:65:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/34352e37302e3233362e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:22:30 +0000
ROA not before:           Tue 04 Feb 2025 18:17:30 +0000
ROA not after:            Tue 03 Feb 2026 18:22:30 +0000
asID:                     52468
IP address blocks:        45.70.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:17:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:4d:a9:a2:19:0b:79:27:9d:86:f9:93:0e:d2:d2:3d:3c:4c:0c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CB5BC2178578E05EB3BA17A1C805009B3BB65EB
        Validity
            Not Before: Feb  4 18:17:30 2025 GMT
            Not After : Feb  3 18:22:30 2026 GMT
        Subject: CN=B37EBF102809FFFAA8BFB6EEB0D58B9B0E3DF762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:44:39:35:83:72:62:06:15:a3:6b:e3:08:d4:
                    bc:b4:6a:ec:51:b7:95:a3:84:c7:e3:22:5d:45:aa:
                    b9:2e:97:6a:19:2f:1f:33:99:a2:da:3a:bf:74:64:
                    41:66:ad:8f:c8:50:c9:ce:b9:8a:0c:c5:6a:f2:ea:
                    16:24:8b:3a:52:ae:85:fa:0f:87:d6:7e:21:11:00:
                    9e:a5:d5:2b:0c:69:ae:37:46:ee:bb:3f:af:c0:3a:
                    60:be:e8:8c:93:e3:f3:2e:20:b5:d6:43:a3:00:a8:
                    4c:69:54:54:a4:9f:6e:9a:00:94:9b:ea:b4:01:ee:
                    8a:3a:12:c6:6f:eb:bc:b5:16:09:42:04:bc:b0:62:
                    91:d1:18:aa:91:f4:07:f0:42:9c:9a:d1:f4:ae:fa:
                    df:33:ba:99:74:5c:51:7c:99:d9:c0:41:c9:cf:81:
                    39:0b:71:16:2a:cb:e1:73:cd:25:74:cc:c4:b0:f8:
                    b8:c9:e8:38:08:56:8f:d4:74:e4:31:88:6a:77:d8:
                    12:f4:3d:8b:1a:18:cc:eb:66:52:7d:92:38:77:9e:
                    f1:41:95:41:33:0f:49:0b:81:77:0f:4e:a4:d6:9f:
                    e4:51:a3:c3:d9:96:80:81:cb:67:9f:7b:1d:16:77:
                    17:b2:6a:e2:70:72:d5:5d:f7:dd:a9:5a:57:6d:31:
                    a8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7E:BF:10:28:09:FF:FA:A8:BF:B6:EE:B0:D5:8B:9B:0E:3D:F7:62
            X509v3 Authority Key Identifier:
                keyid:5C:B5:BC:21:78:57:8E:05:EB:3B:A1:7A:1C:80:50:09:B3:BB:65:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CB5BC2178578E05EB3BA17A1C805009B3BB65EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5A669E66E0226898970860795E838DAFA0421E6969F99415AB8BD789BF07A8A/0/34352e37302e3233362e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:27:79:a0:51:cc:ec:c3:ba:b7:01:97:cc:57:d8:96:d1:e1:
         b9:d1:9a:b8:98:98:27:a6:66:7c:63:25:74:27:bd:1d:4d:40:
         4b:81:15:4a:5d:e7:58:15:fa:05:a8:ef:ea:c5:ce:32:2f:bb:
         33:33:84:74:c0:6d:d1:fb:05:ed:88:36:a1:b0:d3:36:7a:d0:
         89:07:08:8e:ac:47:58:13:ba:2b:90:35:ab:32:03:1b:30:5e:
         6a:d9:c0:21:9e:84:a4:e3:ae:57:0e:25:ef:aa:77:04:fc:f9:
         ef:86:90:99:40:94:b7:ba:fc:40:23:55:85:56:23:bb:36:58:
         a5:47:ad:c6:a9:db:e7:87:5a:df:03:a5:13:ad:2f:2c:94:25:
         0c:eb:26:8a:71:cc:b3:ee:78:04:b1:93:dd:af:ba:4e:f5:57:
         82:a6:94:44:dd:92:ba:65:17:30:a9:b4:4c:f4:6f:ab:da:80:
         e1:e6:0c:99:e1:c6:0e:19:28:b0:91:28:b6:74:74:02:7e:d6:
         8f:08:9a:d0:f0:85:04:66:f4:40:87:a6:51:e9:d4:cb:32:cc:
         fd:40:26:af:3b:29:37:14:6f:c6:4c:e8:34:99:8e:40:c7:80:
         05:dc:66:1e:82:67:8e:23:17:22:a4:63:d1:35:fb:84:e0:3e:
         2b:02:d6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:21 2025 by rpki-client