Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31382e302f32342d3234203d3e20323639383735.roa
File:                     34352e3139302e31382e302f32342d3234203d3e20323639383735.roa (raw, json)
Hash identifier:          N+2uPXaGKSw4+3/5wBfYukzei2fJwTebB+3KZtpCkAA=
Subject key identifier:   33:BB:2A:71:92:CC:31:9F:9E:42:64:6E:97:C3:F0:16:55:19:E4:CE
Certificate issuer:       /CN=34F8C1DD8450593AA754227576BF44115ADF427B
Certificate serial:       0D07A4E22F830BBDF0D99EC562CD2FA11D4976B4
Authority key identifier: 34:F8:C1:DD:84:50:59:3A:A7:54:22:75:76:BF:44:11:5A:DF:42:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31382e302f32342d3234203d3e20323639383735.roa
Signing time:             Tue 05 Mar 2024 18:10:03 +0000
ROA not before:           Tue 05 Mar 2024 18:05:03 +0000
ROA not after:            Tue 04 Mar 2025 18:10:03 +0000
asID:                     269875
IP address blocks:        45.190.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:07:a4:e2:2f:83:0b:bd:f0:d9:9e:c5:62:cd:2f:a1:1d:49:76:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34F8C1DD8450593AA754227576BF44115ADF427B
        Validity
            Not Before: Mar  5 18:05:03 2024 GMT
            Not After : Mar  4 18:10:03 2025 GMT
        Subject: CN=33BB2A7192CC319F9E42646E97C3F0165519E4CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:52:9b:8c:46:2f:62:1b:de:fc:aa:2c:ac:70:
                    92:f5:04:68:a9:21:8e:72:9e:ff:de:96:09:20:6e:
                    44:30:ac:1c:7c:e1:99:62:73:c5:a0:c8:53:2b:6a:
                    dc:e5:1d:c9:e5:28:52:62:44:e5:e2:5a:df:e8:39:
                    4a:a7:d5:18:0c:1b:85:17:00:c1:ce:b3:55:51:d3:
                    41:51:aa:4b:31:48:23:f8:a1:e2:9c:ce:4d:fe:cc:
                    f6:bb:8d:e8:a5:af:cf:c5:41:77:7b:7c:56:0f:61:
                    d5:d2:47:b0:7c:b3:8b:96:c4:2e:2c:98:72:8a:6e:
                    35:a7:d0:f8:e9:dc:2a:9b:c8:ab:3a:ba:b1:bd:88:
                    20:7e:99:38:7c:ef:29:22:ab:67:7d:f7:41:3e:d1:
                    6c:c3:bb:85:5a:29:c7:fd:4e:10:ca:d0:e9:a5:fe:
                    a1:8e:36:1d:32:cb:ca:2b:1c:d7:81:35:7a:d7:73:
                    aa:f3:84:f9:73:bb:6c:11:48:12:df:8a:b8:a5:2c:
                    0b:1b:07:22:62:03:eb:dd:3f:5d:78:78:bd:cd:68:
                    4a:f8:39:e9:1f:a1:f7:ca:0b:30:32:64:ec:13:10:
                    5a:05:ed:29:0d:a5:e1:53:09:1d:d0:21:c8:96:19:
                    a9:19:9d:18:1c:6c:78:ac:3a:d6:7e:34:87:f5:32:
                    94:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BB:2A:71:92:CC:31:9F:9E:42:64:6E:97:C3:F0:16:55:19:E4:CE
            X509v3 Authority Key Identifier:
                keyid:34:F8:C1:DD:84:50:59:3A:A7:54:22:75:76:BF:44:11:5A:DF:42:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31382e302f32342d3234203d3e20323639383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:32:10:56:4d:62:63:ca:01:bd:fc:e0:43:b9:11:50:3b:df:
         65:f8:ce:45:96:6c:5d:e9:2c:47:7b:0f:2e:11:73:3a:67:2d:
         e8:82:c8:50:b2:1d:1c:22:68:8e:25:67:5e:50:79:06:36:46:
         0a:9b:be:2c:7e:8b:62:dd:6a:69:c0:1a:56:58:ea:eb:ff:f7:
         73:df:b8:4b:22:e4:7d:9e:ea:b5:86:ad:a1:3f:02:7b:46:72:
         72:82:03:f9:46:6a:a3:66:21:3d:ca:ff:28:5d:e2:db:de:1b:
         4e:63:14:f6:98:88:88:22:f4:3f:66:4d:50:3c:fa:1f:e8:56:
         7c:0d:c6:81:ce:ef:33:4f:1f:33:e0:4e:38:e3:ce:da:9a:c4:
         bc:5d:0e:39:d1:31:4d:05:ca:d8:80:df:f1:31:a4:fd:28:07:
         07:f9:5c:01:66:19:04:cb:43:71:60:34:62:e2:a7:3a:e9:fb:
         b3:06:b8:be:8e:98:1c:af:fd:7c:96:01:a9:69:8b:4a:10:6c:
         84:35:7b:02:35:4b:06:71:de:aa:b5:e2:49:ae:d9:ea:1b:ee:
         f0:2b:28:16:6b:a2:f1:31:4b:92:37:2d:73:c5:8b:97:58:fa:
         a3:95:8d:d0:4a:52:75:e4:f0:26:80:a1:91:31:0f:06:4c:76:
         d6:36:2d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:36 2024 by rpki-client on console-fra.rpki-client.org