Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/34352e36382e36342e302f32342d3234203d3e2030.roa
File:                     34352e36382e36342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          5GjU1t2SVw/qZfhITxOEiRIqermnwrUJ77pZ23Ipgvs=
Subject key identifier:   5D:B2:2B:21:65:10:94:7F:1D:C8:5C:F5:32:EF:4E:D9:04:6B:2B:5B
Certificate issuer:       /CN=42088D6FEC3FD14B71DEDB78860C90D825571466
Certificate serial:       689B32F0A2A0532F0ACEAECB41658B9FD1FFC48C
Authority key identifier: 42:08:8D:6F:EC:3F:D1:4B:71:DE:DB:78:86:0C:90:D8:25:57:14:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/34352e36382e36342e302f32342d3234203d3e2030.roa
Signing time:             Mon 04 Nov 2024 20:50:00 +0000
ROA not before:           Mon 04 Nov 2024 20:45:00 +0000
ROA not after:            Mon 03 Nov 2025 20:50:00 +0000
asID:                     0
IP address blocks:        45.68.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:9b:32:f0:a2:a0:53:2f:0a:ce:ae:cb:41:65:8b:9f:d1:ff:c4:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42088D6FEC3FD14B71DEDB78860C90D825571466
        Validity
            Not Before: Nov  4 20:45:00 2024 GMT
            Not After : Nov  3 20:50:00 2025 GMT
        Subject: CN=5DB22B216510947F1DC85CF532EF4ED9046B2B5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:08:69:e6:48:29:1a:fc:3b:b8:7a:a8:07:4c:
                    e0:6f:ff:d5:93:54:51:ac:e9:f0:4a:4a:77:18:46:
                    ec:54:44:5b:16:1c:46:ec:42:73:50:00:a9:7b:ee:
                    24:13:66:36:7b:0d:9a:92:d8:57:73:21:55:2c:a6:
                    f4:dc:5a:46:d4:86:53:fa:37:49:99:d5:30:14:1e:
                    f6:bc:86:65:2d:4f:4c:28:95:5b:8d:af:16:8e:3c:
                    09:5b:95:7e:74:92:46:e3:87:3b:93:98:1b:3d:7c:
                    d9:75:ea:ae:46:86:4f:ac:af:d9:f0:1d:bb:b1:dc:
                    84:c5:69:af:ed:78:2b:1d:b1:2c:d8:f1:d7:22:f2:
                    f3:89:92:40:ab:02:54:91:df:93:f7:85:43:42:5a:
                    14:3d:a5:2d:c4:e6:c1:5a:33:a7:4a:fd:54:30:17:
                    26:ea:fb:ad:c0:00:41:63:5a:d0:6f:cd:79:a7:ae:
                    47:07:e2:27:ce:5a:f7:55:a1:c5:59:1a:eb:24:38:
                    20:a6:21:05:74:f0:8c:d6:52:53:f3:79:f4:7e:ea:
                    a8:6c:be:6d:13:70:1d:33:e5:d6:0f:60:6f:d6:78:
                    2a:40:37:c3:15:d7:06:f1:0c:a6:76:47:6d:67:02:
                    97:97:58:86:58:5d:6d:5c:35:dd:de:5b:ae:61:94:
                    1e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B2:2B:21:65:10:94:7F:1D:C8:5C:F5:32:EF:4E:D9:04:6B:2B:5B
            X509v3 Authority Key Identifier:
                keyid:42:08:8D:6F:EC:3F:D1:4B:71:DE:DB:78:86:0C:90:D8:25:57:14:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/42088D6FEC3FD14B71DEDB78860C90D825571466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42088D6FEC3FD14B71DEDB78860C90D825571466.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5E821E6B0754F2B4CE47521F21E3E73CB7AA22580B95F9C727AB6760F25A5028/0/34352e36382e36342e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:7b:ad:13:59:ab:47:ac:ba:7a:fa:68:45:b6:2e:53:21:91:
         58:d0:5d:76:e7:bb:a4:34:b3:20:d1:6c:27:1a:65:64:1b:2d:
         6c:a7:b7:93:8a:e4:c2:d4:c3:4b:64:54:ad:25:7a:3c:8f:65:
         8a:ba:66:00:09:bf:80:56:5f:10:99:99:d1:a3:e3:44:a9:29:
         ae:08:c4:9c:27:3d:38:4d:0a:f4:fc:cf:80:97:03:ce:79:b7:
         86:1e:d8:ba:06:d1:ec:b5:9a:a7:e9:bc:ed:a9:72:1e:2d:29:
         83:2b:f3:f2:61:56:df:52:f5:87:2f:c8:f5:d9:61:21:25:d7:
         70:77:70:4f:97:06:8a:3c:4d:9f:11:75:c7:75:ed:b6:ea:c7:
         f9:5a:af:2a:8a:f6:72:1f:0d:73:50:bb:a4:6f:79:29:ac:37:
         b2:15:e5:c2:b3:ab:f2:cf:84:07:ef:85:44:bf:c2:bd:5d:39:
         f6:58:84:e6:cf:8e:59:99:0e:7d:10:f8:d3:7d:2b:74:48:b3:
         cf:43:55:eb:3e:b9:11:63:f7:52:98:0d:5e:c8:72:fb:d3:c9:
         93:01:15:43:19:11:cc:bb:6c:c6:38:dc:b7:2b:7d:7d:b5:36:
         3f:27:3b:06:f1:b5:3d:3d:f7:d5:56:39:44:74:f8:4a:bb:af:
         9b:0b:45:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:53 2024 by rpki-client on console-ams.rpki-client.org