Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5213295AB6217F99D6293CDB335864FE36F61C446E98C5E0E50298371708EE2C/0/34352e3139312e3234352e302f32342d3234203d3e20323633323138.roa
File:                     34352e3139312e3234352e302f32342d3234203d3e20323633323138.roa (raw, json)
Hash identifier:          gG1J5z1kzOYcNcUmitXTMggyNriV79/vUI1Bg5i2vfI=
Subject key identifier:   9B:8F:A6:FF:EA:90:80:00:D3:01:F0:D6:AD:0F:82:F1:4C:43:B5:2B
Certificate issuer:       /CN=B7590EAE50B1547B0859265299E0B232EBB12D54
Certificate serial:       1AE5DCAB164E1447920716A2FE77892EADBE218E
Authority key identifier: B7:59:0E:AE:50:B1:54:7B:08:59:26:52:99:E0:B2:32:EB:B1:2D:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7590EAE50B1547B0859265299E0B232EBB12D54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5213295AB6217F99D6293CDB335864FE36F61C446E98C5E0E50298371708EE2C/0/34352e3139312e3234352e302f32342d3234203d3e20323633323138.roa
Signing time:             Tue 05 Mar 2024 18:15:30 +0000
ROA not before:           Tue 05 Mar 2024 18:10:30 +0000
ROA not after:            Tue 04 Mar 2025 18:15:30 +0000
asID:                     263218
IP address blocks:        45.191.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5213295AB6217F99D6293CDB335864FE36F61C446E98C5E0E50298371708EE2C/0/B7590EAE50B1547B0859265299E0B232EBB12D54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5213295AB6217F99D6293CDB335864FE36F61C446E98C5E0E50298371708EE2C/0/B7590EAE50B1547B0859265299E0B232EBB12D54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7590EAE50B1547B0859265299E0B232EBB12D54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e5:dc:ab:16:4e:14:47:92:07:16:a2:fe:77:89:2e:ad:be:21:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7590EAE50B1547B0859265299E0B232EBB12D54
        Validity
            Not Before: Mar  5 18:10:30 2024 GMT
            Not After : Mar  4 18:15:30 2025 GMT
        Subject: CN=9B8FA6FFEA908000D301F0D6AD0F82F14C43B52B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a3:91:bc:f2:27:ba:f9:80:cb:6b:a2:ae:c7:
                    2e:c1:a5:5b:c0:5c:12:93:9f:ec:f7:9c:41:c3:d0:
                    90:c7:54:8e:05:39:cf:67:aa:53:9f:fe:bf:d2:95:
                    81:4f:f5:d9:69:25:f5:72:f5:6a:3b:ed:87:7d:a2:
                    cd:ef:a9:08:54:43:cd:b4:4b:f9:ac:ac:23:cc:70:
                    9f:bb:a7:f9:79:a2:7c:dd:20:16:87:b4:ee:80:2f:
                    73:e1:42:8b:a2:02:b9:d4:f8:b3:d5:79:20:d4:be:
                    f9:e7:83:55:24:e8:73:45:f3:85:e8:01:3e:86:be:
                    67:42:bd:5c:f2:f1:4d:dd:9c:ba:48:ff:6e:fb:8a:
                    90:92:c9:c6:e6:15:39:55:5c:ef:e4:5a:fb:49:35:
                    7e:f6:d1:d3:7b:9c:b6:c1:21:bd:49:ff:a4:d4:4b:
                    d4:c4:71:eb:0a:18:5c:fa:f4:fd:d2:59:55:22:8b:
                    a1:47:2c:81:2e:22:e1:5a:52:35:b5:6d:f5:a4:00:
                    38:be:25:e1:26:f3:10:6d:e8:ab:b2:12:ea:d0:04:
                    9f:94:fd:f3:c9:c9:77:7a:34:bb:df:b7:62:56:5b:
                    4a:2c:47:dc:e6:dd:73:2d:80:11:cc:63:6d:20:00:
                    e1:22:da:a7:54:fd:3d:d3:3f:b1:e6:19:dc:8d:a0:
                    ab:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8F:A6:FF:EA:90:80:00:D3:01:F0:D6:AD:0F:82:F1:4C:43:B5:2B
            X509v3 Authority Key Identifier:
                keyid:B7:59:0E:AE:50:B1:54:7B:08:59:26:52:99:E0:B2:32:EB:B1:2D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5213295AB6217F99D6293CDB335864FE36F61C446E98C5E0E50298371708EE2C/0/B7590EAE50B1547B0859265299E0B232EBB12D54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7590EAE50B1547B0859265299E0B232EBB12D54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5213295AB6217F99D6293CDB335864FE36F61C446E98C5E0E50298371708EE2C/0/34352e3139312e3234352e302f32342d3234203d3e20323633323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:3d:92:ed:9d:23:3d:24:3e:9b:56:76:5d:4f:a0:8d:72:28:
         6f:a1:39:16:7f:83:b4:d3:7f:87:b8:92:7d:f3:94:9c:87:10:
         d7:95:1c:ae:cb:29:60:f6:97:60:9d:39:e4:7c:e6:84:c4:4f:
         82:94:56:06:05:67:23:75:98:4a:68:69:49:da:b7:e9:d8:b0:
         2f:9a:95:80:8e:b5:d6:b9:43:e2:a5:b6:fe:eb:22:a6:a4:a8:
         ef:e7:21:1d:33:3c:25:7a:1e:9b:d6:1b:75:45:6c:0f:e6:d7:
         5e:2c:75:b4:a7:22:1a:c0:3b:16:c9:48:0d:f7:34:e7:26:ad:
         80:0e:f9:27:64:04:9f:44:e6:8e:16:86:c4:29:cd:f4:80:0a:
         fc:2e:89:01:56:7d:c2:bc:e4:64:1b:df:c3:10:3e:b7:a1:54:
         0b:a6:1f:97:b9:2b:6e:06:07:c6:63:f7:ea:6a:9e:ac:b4:0f:
         0c:1f:5b:8b:2c:c8:68:b3:ab:e3:da:55:ac:b3:5a:23:0e:5f:
         a8:1b:82:b4:ab:af:51:9f:57:7d:dd:a7:31:c0:7a:f7:59:2a:
         1e:74:c0:52:1c:39:74:c3:ef:4c:33:69:61:c6:74:5b:da:ad:
         ba:8d:57:db:54:74:80:d1:89:89:3b:0e:10:d3:c6:a0:f2:b3:
         f0:d1:ea:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:11 2024 by rpki-client on console-fra.rpki-client.org