Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E010AAE752A3D7FBFC86A2D2D41443DFF16B28DE6AD3F304E06784601ED4C76/0/34352e3139302e3137302e302f32342d3234203d3e20323639383938.roa
File:                     34352e3139302e3137302e302f32342d3234203d3e20323639383938.roa (raw, json)
Hash identifier:          t91M1ZJ4FdhqK5c5f3WZNWU27fCE5h7gdTPcYayxC7A=
Subject key identifier:   52:38:B5:DB:D5:75:A9:4A:1B:9C:D0:01:C6:34:AC:8D:84:6E:FF:71
Certificate issuer:       /CN=19F82C7F9B6BF31374504A7A6059468A396C9C7C
Certificate serial:       64981F3E83B94DCDB29DC26BAF572955F4B67530
Authority key identifier: 19:F8:2C:7F:9B:6B:F3:13:74:50:4A:7A:60:59:46:8A:39:6C:9C:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19F82C7F9B6BF31374504A7A6059468A396C9C7C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E010AAE752A3D7FBFC86A2D2D41443DFF16B28DE6AD3F304E06784601ED4C76/0/34352e3139302e3137302e302f32342d3234203d3e20323639383938.roa
Signing time:             Tue 05 Mar 2024 18:06:37 +0000
ROA not before:           Tue 05 Mar 2024 18:01:37 +0000
ROA not after:            Tue 04 Mar 2025 18:06:37 +0000
asID:                     269898
IP address blocks:        45.190.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4E010AAE752A3D7FBFC86A2D2D41443DFF16B28DE6AD3F304E06784601ED4C76/0/19F82C7F9B6BF31374504A7A6059468A396C9C7C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4E010AAE752A3D7FBFC86A2D2D41443DFF16B28DE6AD3F304E06784601ED4C76/0/19F82C7F9B6BF31374504A7A6059468A396C9C7C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19F82C7F9B6BF31374504A7A6059468A396C9C7C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:98:1f:3e:83:b9:4d:cd:b2:9d:c2:6b:af:57:29:55:f4:b6:75:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19F82C7F9B6BF31374504A7A6059468A396C9C7C
        Validity
            Not Before: Mar  5 18:01:37 2024 GMT
            Not After : Mar  4 18:06:37 2025 GMT
        Subject: CN=5238B5DBD575A94A1B9CD001C634AC8D846EFF71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ea:01:57:48:13:86:6b:5a:05:07:36:4a:47:
                    29:8c:79:d4:2b:f6:67:7e:68:b0:d8:a9:87:fd:60:
                    62:18:92:13:34:70:9e:a6:8a:76:d1:bf:4d:dd:90:
                    9c:62:2d:34:9a:97:5c:03:77:f9:32:f7:40:c0:b9:
                    48:e7:5f:2f:78:5a:a6:f6:46:32:21:36:f1:79:2c:
                    c2:b9:f7:bf:89:34:7b:ea:5e:66:63:c7:11:8e:5f:
                    5b:38:30:83:9c:ea:25:38:56:58:ec:8b:89:46:bc:
                    d5:bc:d0:97:75:82:ed:e4:f4:15:0e:60:5f:b8:02:
                    24:bd:cf:16:d3:f5:50:69:5e:be:1d:3b:f2:4c:d2:
                    cf:30:1d:1c:4b:5b:34:e5:ab:b9:9a:46:de:4d:97:
                    b0:51:e5:98:e1:e2:a8:4e:9d:1b:2c:81:7c:67:2e:
                    4b:dc:26:d5:4d:41:a4:c4:94:de:95:74:85:28:e7:
                    84:09:ea:f9:2a:09:96:b7:76:86:1f:f9:bd:54:70:
                    70:cf:f0:9c:ad:a5:90:09:a9:ae:40:a7:6f:42:ad:
                    11:aa:75:c6:cf:56:af:b5:d2:7f:73:a6:71:c5:23:
                    54:67:91:98:0c:0f:04:52:e1:1c:93:e4:37:b2:7e:
                    89:0f:51:f4:2c:e8:2b:85:1b:bd:33:76:af:f3:5f:
                    46:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:38:B5:DB:D5:75:A9:4A:1B:9C:D0:01:C6:34:AC:8D:84:6E:FF:71
            X509v3 Authority Key Identifier:
                keyid:19:F8:2C:7F:9B:6B:F3:13:74:50:4A:7A:60:59:46:8A:39:6C:9C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E010AAE752A3D7FBFC86A2D2D41443DFF16B28DE6AD3F304E06784601ED4C76/0/19F82C7F9B6BF31374504A7A6059468A396C9C7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19F82C7F9B6BF31374504A7A6059468A396C9C7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E010AAE752A3D7FBFC86A2D2D41443DFF16B28DE6AD3F304E06784601ED4C76/0/34352e3139302e3137302e302f32342d3234203d3e20323639383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:62:6b:b6:10:0f:c4:d6:ee:e4:fd:d7:0a:39:5a:ba:dc:d8:
         50:4d:b0:61:80:10:fc:74:a3:d9:4e:89:3e:d3:ed:5e:89:0c:
         b4:fc:0f:1f:9d:51:3c:b1:cb:f3:f6:c8:30:95:a4:fb:3c:31:
         17:3b:18:53:ba:23:fa:3d:3d:f5:d7:8e:54:56:02:ae:c8:e8:
         84:47:0d:5d:45:c6:60:64:1a:c7:05:20:11:b5:09:89:b8:f9:
         e1:a0:3c:68:b9:d7:4a:0b:24:2d:7d:c5:04:88:5f:8c:39:00:
         ca:b7:52:c6:aa:ea:66:53:ab:0a:9a:19:a4:d5:1f:18:bb:25:
         cc:25:0c:a5:77:8a:7d:60:ce:5b:a7:cc:6e:d4:10:c8:76:28:
         c9:0b:99:c8:3f:50:31:a0:bc:9d:f7:ed:21:af:a6:8a:26:12:
         9b:66:ac:ed:fa:aa:20:36:64:09:c9:9a:e0:10:21:06:15:08:
         ab:11:64:46:4d:b5:ad:a7:0e:53:70:6b:3e:12:a0:2a:00:3f:
         66:d0:30:94:22:f2:dd:4c:1c:4d:48:88:bb:3d:36:d2:42:39:
         e8:25:2d:bf:3f:df:75:dc:47:ea:ae:d5:49:92:ee:29:64:3b:
         ef:f2:1e:6c:9e:6a:73:dc:a9:73:eb:c4:64:32:fb:f5:b4:a9:
         33:96:e2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:22 2024 by rpki-client on console-fra.rpki-client.org