Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14E923ACF6CC9BCC8A04F486E81A28636AA85C4697AC042C3A9994E7E2B34258/0/34352e3139302e3136382e302f32332d3234203d3e20323639393031.roa
File:                     34352e3139302e3136382e302f32332d3234203d3e20323639393031.roa (raw, json)
Hash identifier:          kTZpAc0YKIoyIHuEFN8NRVBHM6ZhYjclBgVVwUTFUh0=
Subject key identifier:   C7:D0:F2:30:7C:1D:38:2A:82:A8:A4:4A:63:37:93:BA:BC:53:28:83
Certificate issuer:       /CN=3ADE18BE908E59DAF6EDF98BC507574C686B73FF
Certificate serial:       5FDC4209F4F19FB1F2A3EB7CAA327BD2AC9657C0
Authority key identifier: 3A:DE:18:BE:90:8E:59:DA:F6:ED:F9:8B:C5:07:57:4C:68:6B:73:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE18BE908E59DAF6EDF98BC507574C686B73FF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/14E923ACF6CC9BCC8A04F486E81A28636AA85C4697AC042C3A9994E7E2B34258/0/34352e3139302e3136382e302f32332d3234203d3e20323639393031.roa
Signing time:             Tue 05 Mar 2024 18:16:04 +0000
ROA not before:           Tue 05 Mar 2024 18:11:04 +0000
ROA not after:            Tue 04 Mar 2025 18:16:04 +0000
asID:                     269901
IP address blocks:        45.190.168.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/14E923ACF6CC9BCC8A04F486E81A28636AA85C4697AC042C3A9994E7E2B34258/0/3ADE18BE908E59DAF6EDF98BC507574C686B73FF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/14E923ACF6CC9BCC8A04F486E81A28636AA85C4697AC042C3A9994E7E2B34258/0/3ADE18BE908E59DAF6EDF98BC507574C686B73FF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE18BE908E59DAF6EDF98BC507574C686B73FF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:dc:42:09:f4:f1:9f:b1:f2:a3:eb:7c:aa:32:7b:d2:ac:96:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ADE18BE908E59DAF6EDF98BC507574C686B73FF
        Validity
            Not Before: Mar  5 18:11:04 2024 GMT
            Not After : Mar  4 18:16:04 2025 GMT
        Subject: CN=C7D0F2307C1D382A82A8A44A633793BABC532883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:35:d2:39:c3:8e:ff:64:a3:03:8a:5b:74:58:
                    8e:24:f6:64:6e:5f:6d:8c:5b:71:56:de:53:a1:84:
                    13:3c:51:82:07:5f:98:8f:32:dd:e2:02:84:71:7f:
                    94:f1:8c:09:43:85:83:f9:e2:f1:0c:70:44:8c:7b:
                    e9:9a:b6:c9:cf:4a:5d:5e:e6:5f:f0:1f:e8:8b:72:
                    97:8a:04:29:9e:6c:56:9c:5a:7a:a3:e0:db:3f:ea:
                    da:a8:b6:97:0e:77:b9:8a:b9:52:1e:ee:66:7c:a0:
                    e0:9c:66:bc:a5:93:1a:48:5c:ec:09:d4:72:8b:cd:
                    6c:9d:91:07:51:85:a6:4f:79:52:9f:f6:3d:4b:0f:
                    9e:0a:34:3f:b0:12:9c:b1:1b:74:00:9e:7d:22:e1:
                    9d:01:77:03:bd:ab:19:83:79:29:d0:54:86:33:b7:
                    64:62:a4:f8:cb:88:03:30:b3:1f:8c:03:95:48:6d:
                    a8:1e:8d:be:3a:79:b6:2e:91:cc:e3:1e:6f:72:39:
                    48:f1:ff:ea:56:1b:d1:17:50:d7:cc:80:f7:54:d8:
                    5a:cd:f1:68:47:46:b5:a6:c8:86:9d:9b:a2:85:17:
                    c7:88:da:0b:6f:7b:c7:0d:b5:4b:e9:33:bf:30:55:
                    97:b8:dc:5d:7d:35:e3:52:eb:1b:f0:f1:72:b2:fb:
                    63:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D0:F2:30:7C:1D:38:2A:82:A8:A4:4A:63:37:93:BA:BC:53:28:83
            X509v3 Authority Key Identifier:
                keyid:3A:DE:18:BE:90:8E:59:DA:F6:ED:F9:8B:C5:07:57:4C:68:6B:73:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/14E923ACF6CC9BCC8A04F486E81A28636AA85C4697AC042C3A9994E7E2B34258/0/3ADE18BE908E59DAF6EDF98BC507574C686B73FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE18BE908E59DAF6EDF98BC507574C686B73FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14E923ACF6CC9BCC8A04F486E81A28636AA85C4697AC042C3A9994E7E2B34258/0/34352e3139302e3136382e302f32332d3234203d3e20323639393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:b6:57:05:5a:b4:f2:7c:06:57:cb:7c:72:d3:ef:8b:4a:8b:
         3c:8b:56:2f:1a:f6:4b:3e:86:c6:04:fa:eb:9c:46:b3:a3:7a:
         ba:23:5b:50:5e:d1:35:98:f0:7b:e1:63:0a:80:6a:33:4e:8b:
         2d:85:3e:4f:44:36:f3:10:02:d8:f4:9f:b8:85:82:d8:f2:a9:
         07:f8:8e:4c:f5:b7:69:b9:b8:29:6a:c9:97:fd:de:41:9d:c6:
         01:77:a3:6b:64:ee:e9:4f:24:c7:a0:e4:4b:7f:6b:7c:82:e8:
         fb:c0:24:34:79:a7:ce:d8:c6:8b:8b:18:12:d5:65:53:0c:83:
         75:9d:5f:18:3d:c0:3a:73:fc:5a:11:4f:aa:d4:94:a1:05:4c:
         29:42:cd:31:89:39:be:98:c2:11:3a:cb:f1:55:ed:90:ef:03:
         f6:b1:8d:17:ca:ef:a4:14:7c:04:6c:2d:73:e8:fa:c0:84:0b:
         10:d6:ef:94:3a:6f:e6:f4:0c:08:a8:d0:c9:cc:8e:61:af:b6:
         6e:19:d7:aa:63:1e:7b:0a:f1:a9:8a:8f:fd:5c:61:b8:18:1f:
         8c:4f:97:2a:34:55:80:bf:4b:9a:56:9a:55:74:07:eb:2b:20:
         d3:ba:40:a0:4e:06:12:53:d8:66:c1:0a:67:1b:a9:fc:18:d6:
         4d:cb:89:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org