Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31372e302f32342d3234203d3e20323639383735.roa
File:                     34352e3139302e31372e302f32342d3234203d3e20323639383735.roa (raw, json)
Hash identifier:          vLYdlrQqXO3UTzCY7EXNl247y6HUGLhmjKUGKS3eWfQ=
Subject key identifier:   05:DD:F8:C2:2D:F4:85:58:93:15:41:5F:5C:ED:6C:A7:18:2E:77:9D
Certificate issuer:       /CN=34F8C1DD8450593AA754227576BF44115ADF427B
Certificate serial:       6844827D140F7501B774CDF903ED62C5FB598AD5
Authority key identifier: 34:F8:C1:DD:84:50:59:3A:A7:54:22:75:76:BF:44:11:5A:DF:42:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31372e302f32342d3234203d3e20323639383735.roa
Signing time:             Tue 05 Mar 2024 18:10:04 +0000
ROA not before:           Tue 05 Mar 2024 18:05:04 +0000
ROA not after:            Tue 04 Mar 2025 18:10:04 +0000
asID:                     269875
IP address blocks:        45.190.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:44:82:7d:14:0f:75:01:b7:74:cd:f9:03:ed:62:c5:fb:59:8a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34F8C1DD8450593AA754227576BF44115ADF427B
        Validity
            Not Before: Mar  5 18:05:04 2024 GMT
            Not After : Mar  4 18:10:04 2025 GMT
        Subject: CN=05DDF8C22DF485589315415F5CED6CA7182E779D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f6:c5:ca:0d:5b:b7:27:9a:35:07:64:8a:83:
                    e2:2d:a7:cc:e0:d4:77:d7:01:53:07:ae:40:59:eb:
                    58:aa:22:e1:e9:61:5b:7a:5e:e7:21:b7:1e:b5:91:
                    49:51:06:3f:c8:ea:ce:94:a5:82:f3:76:84:72:d8:
                    6b:7f:a2:58:05:2a:09:c4:dd:87:47:df:d6:55:09:
                    11:d5:63:c3:65:f1:70:a7:c9:0a:9f:65:7a:cf:7f:
                    32:67:d9:9d:95:c5:c8:5e:7d:77:27:6d:ef:d8:49:
                    bc:e5:3e:b5:65:9b:f5:70:29:e0:1d:71:bb:d6:e5:
                    d0:7c:26:13:e9:6d:87:87:1d:08:4d:32:44:26:67:
                    72:68:80:5f:7b:dd:5c:2c:14:a2:b4:42:4f:a8:7e:
                    0d:40:8a:9b:9a:81:d1:bb:46:10:1c:2f:3b:fd:04:
                    63:5d:48:da:7d:bf:57:21:62:7e:8b:d8:d6:3e:a2:
                    d4:99:51:a4:e8:a3:05:26:45:e8:1f:ef:55:62:79:
                    e8:7b:d8:c5:52:23:00:18:7d:e9:45:b3:36:e8:b4:
                    1a:3d:1e:c8:11:e0:8e:89:25:f1:94:91:d9:07:11:
                    35:dc:46:90:6e:20:6d:30:41:93:9a:ce:c0:04:df:
                    0c:61:ad:c1:5a:09:43:fd:ca:ac:e7:42:ae:db:9f:
                    99:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DD:F8:C2:2D:F4:85:58:93:15:41:5F:5C:ED:6C:A7:18:2E:77:9D
            X509v3 Authority Key Identifier:
                keyid:34:F8:C1:DD:84:50:59:3A:A7:54:22:75:76:BF:44:11:5A:DF:42:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31372e302f32342d3234203d3e20323639383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:c4:a3:43:f9:5a:7b:76:05:48:77:13:37:24:e2:62:64:c2:
         51:f0:a4:a8:2f:a9:12:e6:49:e0:f4:1c:b5:38:5d:a4:98:7c:
         1a:43:43:7f:dc:0e:78:0c:5a:d3:b8:b3:c9:a7:a6:47:8c:46:
         4d:34:40:c0:81:17:2a:33:2f:84:23:12:2b:07:4d:e4:a1:bd:
         16:bc:23:38:c5:41:22:ee:4b:d6:23:9d:cd:26:6f:64:69:50:
         fd:17:4f:84:68:19:ed:00:ee:64:8e:99:c9:7a:2b:13:61:70:
         d3:fc:49:58:e0:ab:4f:c8:5f:56:ec:a0:f6:2f:15:35:f0:39:
         00:08:a2:c1:e2:62:57:64:7c:93:40:12:f8:4e:e7:f3:3f:43:
         7e:be:c5:56:3a:0c:a9:68:98:ef:09:eb:26:87:67:c9:a8:b2:
         9f:bf:b4:0f:ba:d4:69:1d:c2:5e:21:9e:2d:e8:a4:0e:75:1a:
         c0:71:bb:f1:b0:b9:9e:18:c3:b6:05:9d:5c:3e:ee:73:1c:93:
         75:30:26:5c:bf:f7:b9:86:ff:7f:65:a4:80:6e:dd:b4:26:4b:
         e8:65:df:94:72:0a:0b:e7:48:6d:eb:65:7e:fc:8a:54:2c:70:
         c4:b5:29:84:78:9e:30:eb:1f:bf:e7:b9:0a:8e:16:5e:eb:ab:
         0b:d1:aa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 15:20:35 2024 by rpki-client on console-ams.rpki-client.org