Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E8A2E7989223FCBF7B69AE94A8BE2980C34B69F48AF6D285A1D76CB432B3B4BC/0/34352e37302e3232302e302f32322d3234203d3e20323635383136.roa
File:                     34352e37302e3232302e302f32322d3234203d3e20323635383136.roa (raw, json)
Hash identifier:          R5uS0BHCoPsuAmdfJDYwdzE8wbReIjFIbgoZd4YxJZ0=
Subject key identifier:   62:FF:CB:62:02:F7:3D:7F:FB:65:9E:9C:68:88:45:AC:45:5E:26:8C
Certificate issuer:       /CN=013E14B02B1AA5182E8C641FBA3FC0723665FE89
Certificate serial:       0B733D57248240CCDA0FD63DFBE011EF215B61E1
Authority key identifier: 01:3E:14:B0:2B:1A:A5:18:2E:8C:64:1F:BA:3F:C0:72:36:65:FE:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/013E14B02B1AA5182E8C641FBA3FC0723665FE89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E8A2E7989223FCBF7B69AE94A8BE2980C34B69F48AF6D285A1D76CB432B3B4BC/0/34352e37302e3232302e302f32322d3234203d3e20323635383136.roa
Signing time:             Tue 04 Feb 2025 18:52:24 +0000
ROA not before:           Tue 04 Feb 2025 18:47:24 +0000
ROA not after:            Tue 03 Feb 2026 18:52:24 +0000
asID:                     265816
IP address blocks:        45.70.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E8A2E7989223FCBF7B69AE94A8BE2980C34B69F48AF6D285A1D76CB432B3B4BC/0/013E14B02B1AA5182E8C641FBA3FC0723665FE89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E8A2E7989223FCBF7B69AE94A8BE2980C34B69F48AF6D285A1D76CB432B3B4BC/0/013E14B02B1AA5182E8C641FBA3FC0723665FE89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/013E14B02B1AA5182E8C641FBA3FC0723665FE89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:73:3d:57:24:82:40:cc:da:0f:d6:3d:fb:e0:11:ef:21:5b:61:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=013E14B02B1AA5182E8C641FBA3FC0723665FE89
        Validity
            Not Before: Feb  4 18:47:24 2025 GMT
            Not After : Feb  3 18:52:24 2026 GMT
        Subject: CN=62FFCB6202F73D7FFB659E9C688845AC455E268C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:66:f8:02:f8:74:20:2c:70:56:05:91:4b:52:
                    b0:14:27:35:14:38:31:8b:6f:7c:54:e7:88:a9:7b:
                    59:f2:c4:67:54:21:a0:2d:ae:98:0d:af:88:bc:3c:
                    4d:b1:70:09:04:1b:7e:48:bc:a4:c0:f2:aa:e9:68:
                    77:9a:b8:51:d2:ba:be:ce:eb:90:c2:5a:4d:bc:9b:
                    05:d4:44:d5:d4:5a:2d:e5:e7:de:48:5b:ae:42:52:
                    e4:cb:d9:6d:5a:b5:38:80:37:a3:18:5b:dd:61:0a:
                    b8:9d:1a:87:19:62:8a:de:5e:db:fc:f7:53:d8:c3:
                    15:bc:ac:48:da:7b:10:00:0a:d4:0f:49:c2:40:ed:
                    18:b1:1b:e3:5f:6c:32:e4:dd:ee:09:d6:13:88:eb:
                    5c:6e:82:43:5e:59:f1:1f:d8:16:ce:24:63:16:a6:
                    c5:5e:91:d8:3e:29:e7:3a:fa:b5:2d:2b:55:d0:3b:
                    e8:8f:40:0c:ad:e3:d0:b5:db:8b:80:76:c9:6f:c4:
                    8b:80:3d:aa:3d:78:0c:39:9f:2b:69:19:64:55:52:
                    78:25:59:e4:46:d5:1b:7b:ae:b1:01:dc:59:77:e8:
                    89:20:26:90:ea:07:96:4f:1b:03:d0:db:80:97:fe:
                    84:c1:51:5c:f5:8c:05:ac:ba:bd:2e:d2:3d:cc:95:
                    8e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FF:CB:62:02:F7:3D:7F:FB:65:9E:9C:68:88:45:AC:45:5E:26:8C
            X509v3 Authority Key Identifier:
                keyid:01:3E:14:B0:2B:1A:A5:18:2E:8C:64:1F:BA:3F:C0:72:36:65:FE:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E8A2E7989223FCBF7B69AE94A8BE2980C34B69F48AF6D285A1D76CB432B3B4BC/0/013E14B02B1AA5182E8C641FBA3FC0723665FE89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/013E14B02B1AA5182E8C641FBA3FC0723665FE89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E8A2E7989223FCBF7B69AE94A8BE2980C34B69F48AF6D285A1D76CB432B3B4BC/0/34352e37302e3232302e302f32322d3234203d3e20323635383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:2c:83:b5:bf:20:6c:9e:67:ee:27:3e:e5:3d:2f:45:6f:2d:
         1b:c3:bf:5a:9a:b9:91:60:5d:ff:7b:5d:ed:49:d7:19:ba:58:
         ae:79:c0:86:ed:76:f8:c0:58:77:80:09:00:7a:d5:6f:25:49:
         70:0e:cd:a6:65:d9:49:6e:2e:95:89:19:54:7b:8b:87:a3:c8:
         a4:34:8f:61:ed:8c:96:55:7d:eb:6f:b9:76:e8:6e:39:6c:bd:
         c6:d7:91:c0:c3:65:ed:42:9c:fb:44:0e:26:b5:f6:8d:61:65:
         dd:a4:02:5d:85:8b:37:24:91:d9:80:06:95:b7:41:5f:ac:0a:
         72:f3:13:79:1d:72:9b:8c:17:56:4c:f4:59:32:a4:81:ec:01:
         05:ad:df:90:b6:8c:e9:32:e5:84:d3:0f:74:82:e2:fc:00:39:
         d6:36:6c:67:93:ad:d1:97:31:67:c1:29:f2:9f:2a:59:23:31:
         dd:9d:9c:02:8c:fb:f9:ae:24:15:be:ed:3c:43:46:9d:4b:fe:
         47:2f:74:26:56:4b:e3:2b:b9:cf:90:d4:d3:2e:06:16:50:50:
         e0:50:a4:92:c5:e2:a1:c3:fa:ca:c6:81:90:7d:9f:7f:9c:ba:
         ec:d6:ec:2b:c2:43:af:0d:08:39:0e:07:ef:17:51:a0:5b:36:
         67:f7:6f:4a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUC3M9VySCQMzaD9Y9++AR7yFbYeEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEzRTE0QjAyQjFBQTUxODJFOEM2NDFGQkEzRkMwNzIz
NjY1RkU4OTAeFw0yNTAyMDQxODQ3MjRaFw0yNjAyMDMxODUyMjRaMDMxMTAvBgNV
BAMTKDYyRkZDQjYyMDJGNzNEN0ZGQjY1OUU5QzY4ODg0NUFDNDU1RTI2OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ZvgC+HQgLHBWBZFLUrAUJzUU
ODGLb3xU54ipe1nyxGdUIaAtrpgNr4i8PE2xcAkEG35IvKTA8qrpaHeauFHSur7O
65DCWk28mwXURNXUWi3l595IW65CUuTL2W1atTiAN6MYW91hCridGocZYoreXtv8
91PYwxW8rEjaexAACtQPScJA7RixG+NfbDLk3e4J1hOI61xugkNeWfEf2BbOJGMW
psVekdg+Kec6+rUtK1XQO+iPQAyt49C124uAdslvxIuAPao9eAw5nytpGWRVUngl
WeRG1Rt7rrEB3Fl36IkgJpDqB5ZPGwPQ24CX/oTBUVz1jAWsur0u0j3MlY6RAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUYv/LYgL3PX/7ZZ6caIhFrEVeJowwHwYDVR0j
BBgwFoAUAT4UsCsapRgujGQfuj/AcjZl/okwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FOEEyRTc5ODkyMjNGQ0JGN0I2OUFFOTRBOEJFMjk4MEMz
NEI2OUY0OEFGNkQyODVBMUQ3NkNCNDMyQjNCNEJDLzAvMDEzRTE0QjAyQjFBQTUx
ODJFOEM2NDFGQkEzRkMwNzIzNjY1RkU4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMTNFMTRCMDJCMUFBNTE4MkU4
QzY0MUZCQTNGQzA3MjM2NjVGRTg5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRThBMkU3OTg5MjIzRkNCRjdCNjlBRTk0QThCRTI5ODBDMzRCNjlGNDhB
RjZEMjg1QTFENzZDQjQzMkIzQjRCQy8wLzM0MzUyZTM3MzAyZTMyMzIzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNTM4MzEzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1G3DAN
BgkqhkiG9w0BAQsFAAOCAQEAFSyDtb8gbJ5n7ic+5T0vRW8tG8O/Wpq5kWBd/3td
7UnXGbpYrnnAhu12+MBYd4AJAHrVbyVJcA7NpmXZSW4ulYkZVHuLh6PIpDSPYe2M
llV962+5duhuOWy9xteRwMNl7UKc+0QOJrX2jWFl3aQCXYWLNySR2YAGlbdBX6wK
cvMTeR1ym4wXVkz0WTKkgewBBa3fkLaM6TLlhNMPdILi/AA51jZsZ5Ot0ZcxZ8Ep
8p8qWSMx3Z2cAoz7+a4kFb7tPENGnUv+Ry90JlZL4yu5z5DU0y4GFlBQ4FCkksXi
ocP6ysaBkH2ff5y67NbsK8JDrw0IOQ4H7xdRoFs2Z/dvSg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 14:33:17 2025 by rpki-client