Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/34352e3138382e3231392e302f32342d3234203d3e20323639383434.roa
File:                     34352e3138382e3231392e302f32342d3234203d3e20323639383434.roa (raw, json)
Hash identifier:          ft/mTQkWbWZNXUf+U3PVW6TLWthNPOl9mcmcauVBj7g=
Subject key identifier:   2E:7D:76:27:F0:F6:62:68:82:8F:F6:BF:0F:94:DF:E5:6F:01:87:64
Certificate issuer:       /CN=FF941E14D5CF47AE65FBFC53B7F577CEC71BB790
Certificate serial:       6B3F0FACCA046ACB21D3A358F07165D6C542CFFA
Authority key identifier: FF:94:1E:14:D5:CF:47:AE:65:FB:FC:53:B7:F5:77:CE:C7:1B:B7:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/34352e3138382e3231392e302f32342d3234203d3e20323639383434.roa
Signing time:             Tue 05 Mar 2024 18:00:20 +0000
ROA not before:           Tue 05 Mar 2024 17:55:20 +0000
ROA not after:            Tue 04 Mar 2025 18:00:20 +0000
asID:                     269844
IP address blocks:        45.188.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.crl
                          rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:3f:0f:ac:ca:04:6a:cb:21:d3:a3:58:f0:71:65:d6:c5:42:cf:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF941E14D5CF47AE65FBFC53B7F577CEC71BB790
        Validity
            Not Before: Mar  5 17:55:20 2024 GMT
            Not After : Mar  4 18:00:20 2025 GMT
        Subject: CN=2E7D7627F0F66268828FF6BF0F94DFE56F018764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0b:4a:38:47:13:d0:4b:89:58:6d:5c:46:85:
                    e1:29:a3:2d:38:db:91:b8:c0:f1:df:0a:be:f2:e6:
                    89:e5:b4:c4:71:f4:09:93:ca:80:c1:72:fd:c3:69:
                    79:c2:c3:66:db:bf:d0:d7:3c:7c:22:f3:de:88:02:
                    87:a4:c9:27:fc:29:a7:9e:d8:e6:19:f1:92:50:3b:
                    c2:a0:39:28:0a:ab:a8:8d:dd:19:41:ba:ae:a1:24:
                    78:23:2c:0c:87:68:0d:99:43:2c:81:7e:a5:4c:0c:
                    89:54:02:ff:2f:52:c2:e9:cf:90:16:ca:ee:2b:3c:
                    87:b3:65:a1:21:94:67:a8:ad:a7:c7:f2:2f:15:56:
                    1e:0c:65:ce:bb:b4:f1:93:68:94:0f:a2:62:5e:8c:
                    b2:e5:5e:23:e3:d4:2e:6c:a5:be:20:11:5e:be:39:
                    4a:4f:6f:a4:fe:a0:14:13:dd:99:31:e3:0c:ce:ab:
                    68:35:3d:44:f4:58:cb:23:c9:38:69:81:82:22:b6:
                    71:7d:b1:e4:af:8d:7d:9a:a0:da:73:20:2b:74:19:
                    de:d3:1b:e4:38:61:be:d4:72:02:d6:24:85:93:bf:
                    96:09:6e:86:37:35:e8:b9:04:8f:ec:c0:8d:3d:5d:
                    ca:c4:15:72:d9:40:ce:b1:b2:c8:05:11:e0:ae:68:
                    3b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7D:76:27:F0:F6:62:68:82:8F:F6:BF:0F:94:DF:E5:6F:01:87:64
            X509v3 Authority Key Identifier:
                keyid:FF:94:1E:14:D5:CF:47:AE:65:FB:FC:53:B7:F5:77:CE:C7:1B:B7:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/34352e3138382e3231392e302f32342d3234203d3e20323639383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:76:b2:84:28:7b:31:f7:c0:18:2a:12:d1:47:9d:fb:01:5f:
         d6:c5:7a:81:eb:fa:a3:e6:8a:61:f1:9f:7b:87:da:61:d7:08:
         21:e9:3c:6d:f1:30:7c:d3:b6:14:ff:cc:85:36:6d:12:5f:c3:
         9d:ce:9b:33:20:df:9a:60:08:57:b6:c3:78:70:8b:88:fe:a7:
         0f:aa:13:a5:12:7e:a6:7c:c1:fc:87:5b:68:8a:cb:87:b2:86:
         92:db:f3:cc:29:53:59:07:b3:75:be:63:73:81:ec:75:3a:67:
         a7:a5:c0:ab:47:11:da:d4:60:83:0c:15:5b:10:48:a9:68:c0:
         34:fa:fc:52:9a:9f:d9:44:a9:db:75:1e:5b:68:78:06:34:03:
         a1:7d:52:3f:7d:9c:08:c2:5a:76:d7:eb:63:3c:6b:a5:5d:be:
         aa:af:f9:be:b3:0a:1d:36:af:ea:27:6e:bc:c2:45:c5:50:54:
         4e:d5:d6:ee:64:c5:39:ca:2e:e5:10:ef:b0:44:ff:fb:ed:1b:
         d8:dc:d1:7e:b9:01:93:ec:97:e0:63:a9:ed:a1:75:4e:f3:41:
         66:fc:d4:bd:8a:55:e9:12:85:d9:a2:6e:11:37:5a:3e:43:73:
         a1:f0:a0:89:62:f8:84:71:94:72:6d:a8:91:83:97:67:c0:aa:
         a1:79:e5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:50 2024 by rpki-client on console-ams.rpki-client.org