Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31362e302f32332d3233203d3e20323639383735.roa
File:                     34352e3139302e31362e302f32332d3233203d3e20323639383735.roa (raw, json)
Hash identifier:          5vekEU1VXcTuPWf1RoDlkmatj/Ptf7q/MBWvi0CwHJI=
Subject key identifier:   87:5A:26:E9:9D:49:78:11:25:52:21:81:9A:C5:33:E2:1F:10:40:43
Certificate issuer:       /CN=34F8C1DD8450593AA754227576BF44115ADF427B
Certificate serial:       4C90E1ABA9BB2BE3C46C956CDD02690B228EA99C
Authority key identifier: 34:F8:C1:DD:84:50:59:3A:A7:54:22:75:76:BF:44:11:5A:DF:42:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31362e302f32332d3233203d3e20323639383735.roa
Signing time:             Tue 05 Mar 2024 18:10:03 +0000
ROA not before:           Tue 05 Mar 2024 18:05:03 +0000
ROA not after:            Tue 04 Mar 2025 18:10:03 +0000
asID:                     269875
IP address blocks:        45.190.16.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:90:e1:ab:a9:bb:2b:e3:c4:6c:95:6c:dd:02:69:0b:22:8e:a9:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34F8C1DD8450593AA754227576BF44115ADF427B
        Validity
            Not Before: Mar  5 18:05:03 2024 GMT
            Not After : Mar  4 18:10:03 2025 GMT
        Subject: CN=875A26E99D497811255221819AC533E21F104043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:2b:08:d2:6a:df:19:3a:04:9a:8c:64:4e:
                    f9:db:4e:32:65:a1:33:a3:96:14:ee:21:14:cb:94:
                    c6:ff:98:b3:72:a5:f4:55:4c:42:d6:4a:76:0e:14:
                    81:b7:25:9e:38:a8:1e:70:75:a2:9e:cf:4e:87:fa:
                    ea:1a:f6:5f:75:44:41:7c:aa:b8:5b:62:da:1e:90:
                    83:cc:99:dc:01:ca:56:16:2e:cc:83:76:f5:5f:3e:
                    b2:7f:a7:8f:b3:5c:94:81:06:aa:98:24:a0:88:e8:
                    fd:7c:61:13:c6:14:26:85:1a:bc:bc:84:e5:4d:2a:
                    49:23:1d:6e:1f:16:a0:c2:d9:36:ae:70:36:28:53:
                    6f:f6:6c:6b:dd:75:09:fe:bd:97:89:d2:4e:33:83:
                    a1:d1:98:26:42:5b:06:72:3c:ad:f8:e6:f9:10:07:
                    e8:f5:19:5c:65:34:ee:16:1f:6d:5f:47:f9:f6:12:
                    9f:a6:a0:83:3b:5f:db:c5:d4:f9:c9:73:1c:0d:aa:
                    c0:2c:d0:fe:f5:78:40:38:10:e7:72:03:a3:20:4f:
                    1f:6d:cb:40:69:e3:07:fc:4d:c4:ed:b4:fb:d5:3d:
                    23:a2:60:18:c7:c9:dd:51:98:b1:cb:4f:1f:80:cd:
                    4e:f6:22:46:97:28:da:32:fa:60:5e:a0:c2:c0:44:
                    c8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5A:26:E9:9D:49:78:11:25:52:21:81:9A:C5:33:E2:1F:10:40:43
            X509v3 Authority Key Identifier:
                keyid:34:F8:C1:DD:84:50:59:3A:A7:54:22:75:76:BF:44:11:5A:DF:42:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31362e302f32332d3233203d3e20323639383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:fa:9d:88:35:75:61:d2:70:08:a9:33:8f:84:f8:d8:b2:77:
         17:fc:98:59:cb:77:59:47:09:52:61:75:24:8d:e1:c7:a8:0c:
         50:3c:fe:54:e2:44:77:43:dd:31:c4:3a:9f:55:f6:a0:42:42:
         fa:25:ef:da:bc:16:14:59:57:4b:e8:2d:ab:82:33:d3:7e:11:
         10:ec:8a:4c:f4:e5:76:f1:07:0f:c1:eb:95:ec:c7:d8:2d:a9:
         da:7e:6d:27:d6:c9:95:50:eb:0d:9b:a2:90:c2:46:4b:78:88:
         9b:b4:6f:68:58:c1:10:af:e8:2d:dd:f8:c7:d9:05:e7:ac:e9:
         a3:a9:c2:cb:e2:ec:b2:80:07:e4:33:4b:7e:63:0d:77:eb:90:
         6b:7f:d6:2f:04:17:99:a3:90:29:8b:6d:0c:8b:47:64:c2:79:
         a3:ed:cd:8a:53:aa:a3:8b:f0:53:cd:b7:ce:08:bb:ab:2e:58:
         a0:31:c9:ea:3c:76:73:d5:f7:be:1c:f7:1f:f8:85:56:55:90:
         4d:d5:58:5c:6b:82:3a:dd:24:ff:c4:a7:0b:06:21:e7:72:ff:
         45:21:4a:77:53:f2:2e:86:e3:86:01:33:e4:00:5a:81:66:69:
         fe:36:77:3a:91:05:43:9f:1b:b7:96:9b:71:c8:ef:f8:a9:f3:
         04:bd:95:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:36 2024 by rpki-client on console-fra.rpki-client.org