Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5213295AB6217F99D6293CDB335864FE36F61C446E98C5E0E50298371708EE2C/0/34352e3139312e3234342e302f32342d3234203d3e20323633323138.roa
File:                     34352e3139312e3234342e302f32342d3234203d3e20323633323138.roa (raw, json)
Hash identifier:          072K0gysJHqw9r2H2bsUAqWhle0UGB3xTzVu/doT4Qw=
Subject key identifier:   40:A7:35:B2:2D:C9:A0:0B:54:C6:CC:81:3C:50:EF:D0:0B:D0:DD:63
Certificate issuer:       /CN=B7590EAE50B1547B0859265299E0B232EBB12D54
Certificate serial:       45D61877B05AD8AC8E31005D31BFD5D7648109AF
Authority key identifier: B7:59:0E:AE:50:B1:54:7B:08:59:26:52:99:E0:B2:32:EB:B1:2D:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7590EAE50B1547B0859265299E0B232EBB12D54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5213295AB6217F99D6293CDB335864FE36F61C446E98C5E0E50298371708EE2C/0/34352e3139312e3234342e302f32342d3234203d3e20323633323138.roa
Signing time:             Tue 05 Mar 2024 18:15:30 +0000
ROA not before:           Tue 05 Mar 2024 18:10:30 +0000
ROA not after:            Tue 04 Mar 2025 18:15:30 +0000
asID:                     263218
IP address blocks:        45.191.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5213295AB6217F99D6293CDB335864FE36F61C446E98C5E0E50298371708EE2C/0/B7590EAE50B1547B0859265299E0B232EBB12D54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5213295AB6217F99D6293CDB335864FE36F61C446E98C5E0E50298371708EE2C/0/B7590EAE50B1547B0859265299E0B232EBB12D54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7590EAE50B1547B0859265299E0B232EBB12D54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d6:18:77:b0:5a:d8:ac:8e:31:00:5d:31:bf:d5:d7:64:81:09:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7590EAE50B1547B0859265299E0B232EBB12D54
        Validity
            Not Before: Mar  5 18:10:30 2024 GMT
            Not After : Mar  4 18:15:30 2025 GMT
        Subject: CN=40A735B22DC9A00B54C6CC813C50EFD00BD0DD63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:bc:6b:58:ad:87:0a:00:64:3e:15:b5:67:
                    5b:f4:1c:f9:ae:5a:fb:76:bb:cc:6a:ae:bf:d6:69:
                    09:66:75:83:57:3f:ec:eb:76:6e:5e:18:a0:3f:19:
                    1b:be:56:38:a3:c8:f9:4f:e2:13:c6:09:33:19:5f:
                    e0:1b:f4:62:3c:bf:c3:a4:b5:96:2a:23:46:e2:5a:
                    92:f9:af:fd:8a:52:a8:d8:1f:8e:47:2e:d8:83:a7:
                    f7:7b:80:00:0c:1a:97:b1:d7:d6:54:e0:89:89:dc:
                    e2:f7:4c:cb:e4:88:10:57:1a:7b:8e:4c:b2:df:ac:
                    be:af:d5:02:3b:c0:c6:04:52:02:e6:c3:b4:32:08:
                    83:0f:93:bf:45:5d:18:57:93:97:8f:5b:1b:f6:ee:
                    c6:b2:18:1f:f1:dc:19:12:e7:91:5e:c5:9f:86:c8:
                    0b:e6:bc:71:cf:a7:f6:08:7b:62:f4:81:28:1e:e9:
                    18:40:6f:3f:68:6e:91:23:8a:a4:a6:8a:eb:c8:0a:
                    cc:5a:1c:ec:3d:9d:d2:6b:41:2c:8e:c9:aa:f3:9f:
                    cc:6b:81:1a:63:b5:b7:e7:ae:a2:94:d4:f6:45:49:
                    f0:05:c3:8e:5c:69:61:2b:62:2c:a2:38:58:f0:ca:
                    f2:e0:54:6b:91:11:bd:dc:6b:e0:88:3e:1d:43:c4:
                    9a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A7:35:B2:2D:C9:A0:0B:54:C6:CC:81:3C:50:EF:D0:0B:D0:DD:63
            X509v3 Authority Key Identifier:
                keyid:B7:59:0E:AE:50:B1:54:7B:08:59:26:52:99:E0:B2:32:EB:B1:2D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5213295AB6217F99D6293CDB335864FE36F61C446E98C5E0E50298371708EE2C/0/B7590EAE50B1547B0859265299E0B232EBB12D54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7590EAE50B1547B0859265299E0B232EBB12D54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5213295AB6217F99D6293CDB335864FE36F61C446E98C5E0E50298371708EE2C/0/34352e3139312e3234342e302f32342d3234203d3e20323633323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:4d:39:00:a7:a1:0e:b3:e2:ae:8b:be:5f:21:4d:a6:fd:67:
         33:c9:96:73:a4:72:2a:2e:a8:4f:97:00:94:c4:0b:04:9d:f5:
         77:93:96:bf:05:d4:a2:16:65:d6:fe:01:8b:9f:ee:84:1d:15:
         df:f6:3b:6f:24:75:d2:bd:9f:c3:fb:2d:8b:5f:02:ac:ed:5e:
         1c:e5:1e:64:43:76:fd:7e:3f:20:b3:c0:c6:53:f3:43:da:f4:
         a4:d9:51:2c:e7:d1:5d:7e:9d:49:a3:19:b0:9b:40:ec:be:42:
         55:3c:58:ca:d3:82:16:2f:fe:cd:2f:b2:71:4f:0a:18:5d:d9:
         53:d8:e3:85:20:d8:b0:1e:bb:2c:bb:cd:ca:c8:43:dc:68:83:
         ed:97:06:36:f1:76:91:ad:40:6d:3d:ca:70:68:01:0b:12:a2:
         87:a1:1a:52:78:4a:61:39:5f:45:e1:d3:ff:d6:12:8c:d6:02:
         3c:c9:ea:99:23:3a:57:b7:ec:05:25:4a:af:73:1a:5c:16:60:
         17:93:f4:ad:64:da:ea:4b:cc:13:24:b9:b8:d9:ce:cc:9c:6c:
         32:37:d6:93:4a:7d:f3:c9:d4:4c:4b:ad:db:3d:cf:b5:6a:34:
         47:c0:87:be:c1:ef:f1:29:cb:a2:0f:bc:ad:c9:0d:9e:fb:07:
         7c:8b:bf:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:11 2024 by rpki-client on console-fra.rpki-client.org