Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31362e302f32342d3234203d3e20323639383735.roa
File:                     34352e3139302e31362e302f32342d3234203d3e20323639383735.roa (raw, json)
Hash identifier:          deRtGAkmX8hf3bEmH45vKm3WXL3i6OOjbRtIU7WtDQM=
Subject key identifier:   33:0A:30:FE:FB:0E:D7:77:3B:2A:2B:92:3C:F6:B7:3E:97:EC:83:1B
Certificate issuer:       /CN=34F8C1DD8450593AA754227576BF44115ADF427B
Certificate serial:       25ED2854A04D3B744811EF6ABD2C58DDE035B182
Authority key identifier: 34:F8:C1:DD:84:50:59:3A:A7:54:22:75:76:BF:44:11:5A:DF:42:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31362e302f32342d3234203d3e20323639383735.roa
Signing time:             Tue 05 Mar 2024 18:10:03 +0000
ROA not before:           Tue 05 Mar 2024 18:05:03 +0000
ROA not after:            Tue 04 Mar 2025 18:10:03 +0000
asID:                     269875
IP address blocks:        45.190.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ed:28:54:a0:4d:3b:74:48:11:ef:6a:bd:2c:58:dd:e0:35:b1:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34F8C1DD8450593AA754227576BF44115ADF427B
        Validity
            Not Before: Mar  5 18:05:03 2024 GMT
            Not After : Mar  4 18:10:03 2025 GMT
        Subject: CN=330A30FEFB0ED7773B2A2B923CF6B73E97EC831B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3d:51:24:98:b8:80:54:0c:24:70:20:37:ad:
                    80:6f:b4:4c:09:57:20:d6:6d:82:1c:23:58:7e:47:
                    d1:86:94:f8:2d:39:f5:64:f3:e1:2a:18:9c:11:3f:
                    5b:ff:b8:9f:43:b5:eb:d4:3a:f6:49:46:90:22:ca:
                    71:95:69:b9:6d:c8:78:2f:62:39:7b:33:8c:a5:4d:
                    f3:a5:ac:6b:b7:42:58:45:4c:63:20:52:34:50:65:
                    02:61:2f:47:83:2a:a5:80:b4:9f:32:4d:e9:39:6b:
                    5f:dc:1e:c3:25:88:6c:4f:18:cf:a3:6e:54:b6:ae:
                    b5:e8:88:74:83:a5:be:48:4d:f4:ad:03:d5:d8:7b:
                    a8:47:f4:a4:33:b8:db:a4:74:66:8f:ee:08:ef:32:
                    d3:90:c6:c2:70:12:2a:0b:33:5b:b2:08:cb:c5:70:
                    81:1f:df:ae:96:2a:fe:47:e4:7c:ff:60:f5:9d:00:
                    29:46:f5:96:49:a7:c8:93:44:8b:4a:23:73:45:00:
                    45:49:10:25:16:fc:04:5c:b9:89:d7:3d:a3:b7:ff:
                    5d:c1:20:87:97:2b:b9:7a:ae:0b:22:8d:42:35:fb:
                    ca:d6:03:2f:59:2a:58:ea:ba:fa:d5:4a:e0:66:ea:
                    6d:41:d8:25:43:2c:ef:75:c9:e2:88:84:42:df:65:
                    c4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0A:30:FE:FB:0E:D7:77:3B:2A:2B:92:3C:F6:B7:3E:97:EC:83:1B
            X509v3 Authority Key Identifier:
                keyid:34:F8:C1:DD:84:50:59:3A:A7:54:22:75:76:BF:44:11:5A:DF:42:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31362e302f32342d3234203d3e20323639383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:2f:0e:c7:36:6a:8b:f9:ba:3e:32:ac:52:7d:2b:93:9d:1a:
         0b:12:d1:ef:dc:8f:8c:23:2c:31:fc:cc:63:95:75:31:24:44:
         18:51:4c:c8:2b:88:33:4a:f6:eb:7f:dc:61:09:f5:7b:d1:df:
         60:fb:f9:a7:ad:2d:44:59:cf:7c:ce:dd:a0:b9:27:c1:79:f4:
         18:b5:8b:f7:4e:25:06:17:64:e6:9a:c2:22:27:1c:41:fe:b9:
         31:b7:64:c3:17:a4:41:a5:f4:44:1f:47:9b:a9:ea:8a:f6:35:
         2c:8a:0e:93:70:a2:39:fe:58:d3:5e:26:bb:fc:8c:00:48:8c:
         5b:95:db:23:71:12:8c:b1:ca:14:a1:a9:ae:84:aa:3f:4f:ad:
         7b:be:ec:81:e8:87:df:40:ae:18:6f:8c:33:55:c9:3e:7c:b4:
         a6:58:3f:e3:78:9d:b2:2c:8a:36:cd:89:6b:8a:77:c3:73:8f:
         e5:3c:f8:42:91:d1:58:af:19:cd:6f:24:b8:36:7f:2b:62:8b:
         1d:30:99:57:73:0d:f9:81:9a:c0:89:93:98:43:5a:94:91:c1:
         79:56:5f:5c:65:44:69:52:4e:3e:62:85:dc:49:20:21:cc:44:
         dd:ce:a5:db:cc:a1:30:71:05:25:e9:05:51:ee:b7:ae:de:97:
         5b:a3:9d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org