Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31362e302f32342d3234203d3e20323639383735.roa
File:                     34352e3139302e31362e302f32342d3234203d3e20323639383735.roa (raw, json)
Hash identifier:          ACsmXc0XpPUsmpSOqCFqwJ648lKUjGl809xStRgJRv8=
Subject key identifier:   8E:07:20:F1:37:35:55:AC:9E:7A:ED:1B:91:86:26:99:E2:36:18:90
Certificate issuer:       /CN=34F8C1DD8450593AA754227576BF44115ADF427B
Certificate serial:       455848D2B3CD1114422B657E46EF8512E4BE4DB0
Authority key identifier: 34:F8:C1:DD:84:50:59:3A:A7:54:22:75:76:BF:44:11:5A:DF:42:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31362e302f32342d3234203d3e20323639383735.roa
Signing time:             Tue 04 Feb 2025 19:59:35 +0000
ROA not before:           Tue 04 Feb 2025 19:54:35 +0000
ROA not after:            Tue 03 Feb 2026 19:59:35 +0000
asID:                     269875
IP address blocks:        45.190.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:58:48:d2:b3:cd:11:14:42:2b:65:7e:46:ef:85:12:e4:be:4d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34F8C1DD8450593AA754227576BF44115ADF427B
        Validity
            Not Before: Feb  4 19:54:35 2025 GMT
            Not After : Feb  3 19:59:35 2026 GMT
        Subject: CN=8E0720F1373555AC9E7AED1B91862699E2361890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5c:bf:ba:60:b9:41:62:dc:76:5a:a1:ad:43:
                    0c:71:8f:1f:f1:e3:c3:ca:5e:96:8a:8e:4e:ff:87:
                    10:b1:00:96:31:46:77:28:84:50:8a:d7:81:76:bb:
                    78:24:01:0f:f6:6a:c7:be:3c:44:d5:51:1d:11:50:
                    79:9f:64:97:c6:71:a6:f4:e4:cd:e8:2c:78:87:28:
                    df:09:d2:dc:f1:a8:4d:a5:e8:43:d7:37:d4:a9:f9:
                    6e:83:0a:4c:57:d2:4a:58:3e:bf:bc:a4:b3:1b:6f:
                    a3:17:07:82:cb:3e:d7:9f:cd:4a:2d:1e:92:2f:66:
                    c0:51:de:62:f1:bf:66:2d:a2:ba:4d:8b:28:eb:11:
                    07:ee:d5:7a:ad:b7:fc:f1:68:46:ff:f2:d6:96:31:
                    7f:f1:02:3f:95:b8:e8:07:61:72:62:77:47:06:39:
                    68:e3:ed:8f:3c:7b:87:ec:37:2f:e8:44:45:c4:d4:
                    b2:c6:7f:75:be:5d:12:82:28:fc:eb:9c:21:65:a7:
                    66:43:0c:ae:9d:4a:30:86:e4:36:cf:29:e8:83:5b:
                    1e:7a:8a:37:5b:da:c9:fd:be:ee:a3:85:79:cb:4f:
                    15:18:37:96:d8:4a:07:a1:e3:c2:7e:03:a5:78:cc:
                    0d:1e:17:5e:37:81:25:a7:40:ca:d8:40:8c:f3:56:
                    d8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:07:20:F1:37:35:55:AC:9E:7A:ED:1B:91:86:26:99:E2:36:18:90
            X509v3 Authority Key Identifier:
                keyid:34:F8:C1:DD:84:50:59:3A:A7:54:22:75:76:BF:44:11:5A:DF:42:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31362e302f32342d3234203d3e20323639383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:87:71:d7:44:82:5f:4f:b6:5f:ff:02:97:09:7e:86:1d:a9:
         d5:c1:f4:f2:f8:64:3e:1a:a1:8d:36:80:2f:8d:e7:54:95:d0:
         7d:72:5d:e9:62:ac:73:88:ec:96:0c:77:ba:4f:18:46:b9:3c:
         5a:84:da:0d:e3:90:86:3a:05:2c:31:8b:9a:76:3a:b2:d5:ef:
         cc:56:38:99:af:0e:08:2e:9c:ab:cf:c4:eb:33:31:b2:f7:34:
         7f:85:63:7f:20:42:73:32:0e:e7:cb:4b:cb:82:ff:41:99:3c:
         00:bd:1c:1c:1b:cd:57:6c:63:c6:1e:aa:fb:4f:2f:8f:08:5c:
         8e:cf:5a:3e:c0:6c:22:7a:89:5b:7d:9b:6d:37:2d:a6:53:e8:
         c5:0e:9b:c3:30:3c:4b:80:70:6c:ca:a1:d3:83:63:68:14:34:
         db:cd:02:54:17:7d:5a:ba:cb:e8:d5:1f:9f:8d:ef:97:de:ab:
         be:f7:da:5b:a6:ee:5c:c7:bf:f4:6c:20:eb:f5:04:0b:0a:13:
         65:28:de:47:71:86:b4:41:b4:a7:f9:c4:14:dd:4c:9e:a1:8d:
         d0:1c:ba:e7:80:b5:b0:c6:3d:00:53:dc:c9:66:d3:d1:35:92:
         c6:28:5b:91:98:b9:d4:dc:1d:37:de:fa:c4:df:04:84:4c:ee:
         1d:21:1c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 10:43:55 2025 by rpki-client