Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31392e302f32342d3234203d3e20323639383735.roa
File:                     34352e3139302e31392e302f32342d3234203d3e20323639383735.roa (raw, json)
Hash identifier:          HObly3XMTK+elJ7eulHZWEHWyNGWeFAXdfKXspLcK9c=
Subject key identifier:   5A:26:8A:8F:57:DF:CE:1A:A5:E9:1B:BD:5A:5E:AA:08:A5:53:3F:AC
Certificate issuer:       /CN=34F8C1DD8450593AA754227576BF44115ADF427B
Certificate serial:       1ACDDFB2060575347C334C2ABAF21C6D3305F287
Authority key identifier: 34:F8:C1:DD:84:50:59:3A:A7:54:22:75:76:BF:44:11:5A:DF:42:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31392e302f32342d3234203d3e20323639383735.roa
Signing time:             Tue 05 Mar 2024 18:10:04 +0000
ROA not before:           Tue 05 Mar 2024 18:05:04 +0000
ROA not after:            Tue 04 Mar 2025 18:10:04 +0000
asID:                     269875
IP address blocks:        45.190.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:cd:df:b2:06:05:75:34:7c:33:4c:2a:ba:f2:1c:6d:33:05:f2:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34F8C1DD8450593AA754227576BF44115ADF427B
        Validity
            Not Before: Mar  5 18:05:04 2024 GMT
            Not After : Mar  4 18:10:04 2025 GMT
        Subject: CN=5A268A8F57DFCE1AA5E91BBD5A5EAA08A5533FAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c9:5b:3d:71:f5:33:1e:4b:c5:74:47:0c:18:
                    f1:19:2f:2b:8a:27:25:c0:ca:2e:fb:e0:dc:7d:05:
                    d2:36:52:85:78:7f:a0:f9:c1:a1:7e:eb:1a:1d:cc:
                    c1:ec:1e:5b:62:a7:6d:c3:3f:35:b3:39:50:d2:62:
                    8f:3e:d8:a9:17:10:fc:52:9a:09:5e:ed:f5:fa:a2:
                    69:99:1e:cc:f9:6a:9f:07:a8:00:cc:26:0f:c7:28:
                    ae:6a:65:bd:94:ac:42:2a:82:80:35:7b:d2:43:a2:
                    0b:42:3b:f5:ab:4c:c6:66:32:1a:1d:78:7d:49:08:
                    82:31:51:98:a9:04:81:79:f4:ac:6a:b4:e1:d8:46:
                    f0:76:f8:2e:d9:24:c0:f6:6c:93:0e:37:81:78:30:
                    10:24:55:2f:60:4a:35:9a:8c:08:17:46:1c:55:c3:
                    23:9a:27:ed:94:36:c3:07:95:84:b3:d2:8a:0f:cb:
                    0c:ae:c1:ad:a2:56:5e:e1:db:5b:73:f6:9b:40:72:
                    56:d4:96:d3:6e:e2:85:97:9a:91:8d:7c:13:9a:eb:
                    ef:c7:0a:99:92:32:df:fd:1d:c9:51:24:29:da:16:
                    f6:d7:02:57:71:b7:19:3f:03:a0:f5:43:c6:24:57:
                    17:ed:26:61:40:d2:96:33:9a:2a:f0:19:e6:b7:cd:
                    6d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:26:8A:8F:57:DF:CE:1A:A5:E9:1B:BD:5A:5E:AA:08:A5:53:3F:AC
            X509v3 Authority Key Identifier:
                keyid:34:F8:C1:DD:84:50:59:3A:A7:54:22:75:76:BF:44:11:5A:DF:42:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31392e302f32342d3234203d3e20323639383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:a7:ae:63:15:10:d5:e7:3f:dd:9a:fc:10:9e:e5:fc:b4:17:
         13:4b:99:06:b9:36:18:98:72:11:23:17:a9:50:80:50:6d:b3:
         69:88:a6:14:d8:68:e8:af:27:9f:a1:c0:de:6a:08:15:63:1e:
         dc:b1:7d:34:71:2f:bd:d0:fa:ff:da:70:4a:15:ef:66:05:97:
         b9:f9:e1:ec:16:b4:c4:7a:69:8a:cb:42:ea:d8:81:75:58:82:
         4f:70:e1:99:98:c9:b9:2c:7b:5d:21:ed:85:5c:d8:cf:58:57:
         6d:5c:64:7b:ba:ec:81:7e:df:b9:d4:ff:70:08:e9:26:7c:df:
         aa:b4:e3:f5:f7:1e:ef:6b:a4:22:ad:6f:76:36:a8:68:14:ad:
         ba:31:89:8c:e2:39:44:7d:fe:4a:ac:36:5e:c6:1e:25:7a:3f:
         a8:b5:ad:c0:75:e9:16:05:17:54:5b:ba:48:d7:bd:68:79:fc:
         ca:c6:0c:dd:c2:24:7a:3d:71:e9:55:86:a1:cd:1b:12:ad:23:
         c3:b9:5f:26:74:a9:b7:31:49:55:59:74:e5:ae:c9:45:7f:b7:
         de:56:4a:6c:c4:8b:56:cb:34:16:89:28:bf:e1:7c:a2:31:49:
         76:27:b6:60:e5:d6:07:fe:ac:64:ac:f6:dd:6f:97:08:59:37:
         cd:6c:94:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org