Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/34352e3139302e3139302e302f32342d3234203d3e20323633373530.roa
File:                     34352e3139302e3139302e302f32342d3234203d3e20323633373530.roa (raw, json)
Hash identifier:          rbDbItG5e84yJlcsrRqY4lXqE8cua+EZPX4vfLyZK7U=
Subject key identifier:   51:33:10:C1:BB:47:D6:A2:96:77:A7:9D:11:E7:B7:B4:9D:B9:36:EA
Certificate issuer:       /CN=66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698
Certificate serial:       65F8189F89F87161601285BD1F580D423D69B414
Authority key identifier: 66:FF:CE:89:2A:47:04:0F:2D:AB:7D:4D:1A:0B:1B:0B:3C:07:B6:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/34352e3139302e3139302e302f32342d3234203d3e20323633373530.roa
Signing time:             Thu 27 Jun 2024 20:30:05 +0000
ROA not before:           Thu 27 Jun 2024 20:25:05 +0000
ROA not after:            Thu 26 Jun 2025 20:30:05 +0000
asID:                     263750
IP address blocks:        45.190.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Oct 2024 22:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f8:18:9f:89:f8:71:61:60:12:85:bd:1f:58:0d:42:3d:69:b4:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698
        Validity
            Not Before: Jun 27 20:25:05 2024 GMT
            Not After : Jun 26 20:30:05 2025 GMT
        Subject: CN=513310C1BB47D6A29677A79D11E7B7B49DB936EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:32:ec:fd:c2:75:65:ef:23:60:5b:6d:9b:fc:
                    68:71:fb:90:24:49:5a:43:97:a5:29:f3:4f:bb:ba:
                    54:8d:4f:a1:cf:a7:44:5b:b9:17:cd:02:1d:1d:35:
                    2a:25:3b:3d:b3:10:95:f7:ad:aa:0e:81:a1:e3:63:
                    9c:de:d7:8e:64:c2:0c:65:af:5c:f5:9a:00:fc:15:
                    bc:2b:48:b7:ba:7d:43:e3:b7:99:f9:3e:41:83:bf:
                    41:ec:f9:f7:01:b0:b3:2e:ec:1a:84:ad:f4:ad:5d:
                    a5:74:75:ba:e9:54:47:55:12:31:bd:f5:a0:40:f6:
                    e7:3a:8c:d2:d0:3c:c0:f1:ec:4e:23:72:d3:86:82:
                    47:2c:dc:92:fc:a4:2b:2b:d1:a7:a8:9d:c1:b2:21:
                    67:39:50:95:f9:22:bb:fe:03:ef:80:9b:fc:5b:7e:
                    ce:bf:34:3f:6c:e3:4f:c0:02:0d:d4:e3:dd:6d:4b:
                    14:0f:a7:83:96:2d:ed:43:98:2b:20:20:2c:e6:2e:
                    cf:42:9a:98:db:d9:0a:f8:b7:bf:bc:b3:85:7c:24:
                    8f:8e:62:3d:ff:84:97:c7:a5:18:a2:ee:ea:23:01:
                    82:69:ba:ac:c5:98:cb:15:0d:9f:42:cc:2b:02:ce:
                    0a:37:2a:b3:11:34:a9:b1:0c:9c:ec:87:d3:ae:63:
                    f7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:33:10:C1:BB:47:D6:A2:96:77:A7:9D:11:E7:B7:B4:9D:B9:36:EA
            X509v3 Authority Key Identifier:
                keyid:66:FF:CE:89:2A:47:04:0F:2D:AB:7D:4D:1A:0B:1B:0B:3C:07:B6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/34352e3139302e3139302e302f32342d3234203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:24:41:f8:7a:a9:ad:fc:fc:30:d3:82:c8:f8:89:ce:f3:c7:
         b9:79:b8:b0:a2:3f:c0:20:6f:ab:84:54:b1:59:bc:0a:2a:9e:
         25:e7:4c:ab:a5:76:04:42:07:73:8c:87:09:b1:b8:3f:ac:04:
         bd:5d:3e:41:13:c1:af:30:74:aa:20:70:5d:b0:74:8d:ee:c5:
         84:56:54:b8:97:8b:99:60:1f:89:13:38:39:87:8b:63:07:17:
         e6:02:32:35:02:c8:0f:86:6e:d1:d6:06:3f:e2:3b:c9:f5:82:
         00:ef:ea:19:9b:18:4a:c2:39:3b:9f:51:4a:c0:f4:26:0e:91:
         e3:a3:47:56:11:8a:4b:2d:f3:5e:62:57:e1:59:37:87:b4:0a:
         aa:17:8d:9e:97:61:44:4a:e1:0d:98:62:21:00:b9:64:8a:cd:
         6d:5f:ca:e8:d6:03:10:11:7f:d7:bd:3b:a7:72:0a:fb:de:9b:
         2a:dd:ea:79:fa:ef:2d:f1:f2:42:30:4f:1c:08:1a:87:f5:8a:
         87:82:6e:d4:14:e1:df:0f:a8:14:0d:7b:12:42:2b:09:87:7c:
         f4:dd:fd:25:39:27:76:0a:0b:41:ff:d6:a2:59:b7:1b:72:7a:
         5f:ef:11:e8:00:33:14:13:bc:91:96:1d:a3:2e:1b:3c:58:65:
         ba:8e:1f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 16:43:50 2024 by rpki-client on console-fra.rpki-client.org