Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/34352e352e37302e302f32342d3234203d3e20323635363931.roa
File:                     34352e352e37302e302f32342d3234203d3e20323635363931.roa (raw, json)
Hash identifier:          BPocnb6rI+CP2+WTS/5PBY+ZkliraVnK2vmnFmhGChI=
Subject key identifier:   D7:F7:1A:E4:1B:1A:F4:39:7A:C5:23:66:81:C0:C0:90:01:1B:C3:D4
Certificate issuer:       /CN=E7A27C8F6CDCF649D79DE823E920014569787295
Certificate serial:       5E76145B2CF047831B0E6D094ECAF2908881603A
Authority key identifier: E7:A2:7C:8F:6C:DC:F6:49:D7:9D:E8:23:E9:20:01:45:69:78:72:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7A27C8F6CDCF649D79DE823E920014569787295.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/34352e352e37302e302f32342d3234203d3e20323635363931.roa
Signing time:             Tue 05 Mar 2024 18:16:16 +0000
ROA not before:           Tue 05 Mar 2024 18:11:16 +0000
ROA not after:            Tue 04 Mar 2025 18:16:16 +0000
asID:                     265691
IP address blocks:        45.5.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/E7A27C8F6CDCF649D79DE823E920014569787295.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/E7A27C8F6CDCF649D79DE823E920014569787295.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7A27C8F6CDCF649D79DE823E920014569787295.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 17 May 2024 21:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:76:14:5b:2c:f0:47:83:1b:0e:6d:09:4e:ca:f2:90:88:81:60:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7A27C8F6CDCF649D79DE823E920014569787295
        Validity
            Not Before: Mar  5 18:11:16 2024 GMT
            Not After : Mar  4 18:16:16 2025 GMT
        Subject: CN=D7F71AE41B1AF4397AC5236681C0C090011BC3D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f6:73:c1:40:0c:a2:28:ee:da:ea:99:0b:84:
                    fd:f7:89:52:36:3e:1d:ba:53:5b:41:c2:4a:66:a8:
                    7b:99:ff:09:6f:d0:ce:48:9a:d6:74:36:2a:e1:50:
                    cc:87:57:53:59:3d:46:f6:a3:01:b8:9c:1a:89:78:
                    92:3f:82:8b:bd:de:de:49:27:9d:31:6a:d1:ee:dc:
                    18:41:50:4e:1b:69:60:63:7e:9d:e9:26:ec:a7:a3:
                    b9:bd:c6:c0:62:94:6f:de:4f:23:69:ef:2e:1a:55:
                    5e:2a:a7:d9:2e:a4:b2:e8:f9:39:76:b8:02:9e:73:
                    c1:f2:c1:9f:18:46:4b:2b:78:4b:6a:dc:78:24:6c:
                    dd:aa:04:ff:56:0e:d5:7d:b5:b8:b6:30:cf:a4:2e:
                    f7:71:3d:26:95:67:7d:9b:1c:d1:63:e5:a0:de:a8:
                    bd:0c:a7:b0:18:44:86:3c:cf:6a:e9:9c:40:ea:06:
                    df:c4:96:f7:4d:21:ca:de:11:80:25:9e:62:64:08:
                    20:9d:95:59:8a:9e:ee:52:46:2c:90:c4:97:2c:12:
                    2e:aa:49:8f:ec:1d:58:0e:1b:e8:b2:16:7e:b3:93:
                    44:39:7b:6c:37:00:6b:49:36:15:01:05:2f:43:42:
                    21:b4:a3:6d:43:6a:d3:cd:f9:aa:82:45:f7:70:70:
                    e5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F7:1A:E4:1B:1A:F4:39:7A:C5:23:66:81:C0:C0:90:01:1B:C3:D4
            X509v3 Authority Key Identifier:
                keyid:E7:A2:7C:8F:6C:DC:F6:49:D7:9D:E8:23:E9:20:01:45:69:78:72:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/E7A27C8F6CDCF649D79DE823E920014569787295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7A27C8F6CDCF649D79DE823E920014569787295.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/34352e352e37302e302f32342d3234203d3e20323635363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:e7:64:fc:f9:da:40:2b:df:c5:c5:1e:dd:14:61:4e:6a:31:
         65:1b:33:7b:85:b5:a7:16:51:2b:70:05:e4:c3:2e:82:7b:53:
         3e:67:35:76:40:30:9e:ec:81:72:33:e5:14:7d:27:1f:dd:01:
         9a:85:2d:17:4d:55:ad:c4:36:b1:52:dd:4d:72:90:1b:e8:27:
         78:20:56:bd:c2:68:22:62:c5:70:1a:60:2c:9c:20:4d:df:83:
         38:78:aa:a3:09:55:11:c5:72:eb:c2:34:bb:61:1e:a7:f6:0f:
         e5:1c:30:f0:ca:30:8c:3d:3a:97:4c:5a:66:cf:fb:61:cd:b2:
         5f:92:ed:0c:a5:98:c3:52:ce:7a:87:86:0f:25:71:20:82:dd:
         05:bb:ba:18:88:85:2f:9c:b0:b2:7d:a4:b9:73:f2:8f:96:67:
         e0:c8:1f:10:c6:83:33:ca:9a:26:d1:ce:60:77:dd:c5:2a:d8:
         15:fd:2d:3d:28:5b:6b:8c:db:43:10:34:be:95:d2:01:97:ec:
         df:fe:49:97:5b:5e:d4:bb:7d:68:1d:60:e9:96:3b:f7:9a:7b:
         1a:cc:01:cb:ee:c0:3c:11:c0:27:e4:a2:26:8a:00:41:a9:85:
         d5:2b:de:10:2a:fe:7e:cf:5c:b0:92:c0:52:5b:8e:8b:f0:bf:
         75:99:c4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 03:31:26 2024 by rpki-client on console-fra.rpki-client.org