Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31392e302f32342d3234203d3e20323639383735.roa
File:                     34352e3139302e31392e302f32342d3234203d3e20323639383735.roa (raw, json)
Hash identifier:          dD5dicCM0YoP/Dl8M4C7hyCtgN3nxxXC7JdKRtS+UnE=
Subject key identifier:   5B:11:64:35:E5:BF:B6:3F:80:99:97:19:11:34:B0:A7:A3:6B:B3:39
Certificate issuer:       /CN=34F8C1DD8450593AA754227576BF44115ADF427B
Certificate serial:       0AA44EB236FFE9C6675A5EFB7D63F0A9645C8A
Authority key identifier: 34:F8:C1:DD:84:50:59:3A:A7:54:22:75:76:BF:44:11:5A:DF:42:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31392e302f32342d3234203d3e20323639383735.roa
Signing time:             Tue 04 Feb 2025 19:59:36 +0000
ROA not before:           Tue 04 Feb 2025 19:54:36 +0000
ROA not after:            Tue 03 Feb 2026 19:59:36 +0000
asID:                     269875
IP address blocks:        45.190.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a4:4e:b2:36:ff:e9:c6:67:5a:5e:fb:7d:63:f0:a9:64:5c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34F8C1DD8450593AA754227576BF44115ADF427B
        Validity
            Not Before: Feb  4 19:54:36 2025 GMT
            Not After : Feb  3 19:59:36 2026 GMT
        Subject: CN=5B116435E5BFB63F809997191134B0A7A36BB339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9f:db:38:92:eb:ef:e8:87:ae:50:d3:be:13:
                    48:60:2a:34:25:fa:2d:fb:a7:36:c2:27:7d:b4:d2:
                    d2:06:10:21:43:83:37:11:fa:39:21:08:f3:d3:7a:
                    d0:be:d2:ae:d7:e2:40:36:ac:f2:26:d0:71:fe:b4:
                    48:39:be:a0:d7:41:51:3f:09:a7:8e:31:c7:0b:34:
                    ec:85:d8:64:fa:34:f2:5c:20:94:a6:30:3f:63:00:
                    97:5c:2d:f1:aa:9f:eb:b2:96:4a:56:31:ab:a8:6a:
                    a9:d0:93:c4:96:54:c5:e2:e7:99:02:df:ea:7f:b4:
                    b7:a1:62:29:99:f1:1c:0c:67:4d:88:1a:8d:0f:4c:
                    b0:8a:d6:b6:34:c3:36:6f:00:2c:94:f2:85:2c:e6:
                    67:da:52:08:75:31:85:31:b0:b3:bf:5d:d7:84:42:
                    a1:1b:d8:44:09:10:b8:a1:0f:09:2d:97:eb:6d:d6:
                    55:b2:b6:9b:3c:e9:e2:f0:3f:88:f2:09:c9:96:cb:
                    a6:38:d1:a8:a5:7b:a1:bc:bc:3f:db:88:80:2f:a8:
                    ce:c0:19:d1:dd:5f:92:08:3d:96:ce:a6:ce:4b:16:
                    d3:82:12:4d:c5:dc:c5:77:7a:1b:03:1e:69:2a:6d:
                    b6:dd:90:78:39:31:3c:32:a6:1e:8d:dd:d5:82:ed:
                    e1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:11:64:35:E5:BF:B6:3F:80:99:97:19:11:34:B0:A7:A3:6B:B3:39
            X509v3 Authority Key Identifier:
                keyid:34:F8:C1:DD:84:50:59:3A:A7:54:22:75:76:BF:44:11:5A:DF:42:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34F8C1DD8450593AA754227576BF44115ADF427B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34F8C1DD8450593AA754227576BF44115ADF427B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68E8A0FB894626374DE90CEDD81DC38D2458D4A875121D5B73B097258D382C61/0/34352e3139302e31392e302f32342d3234203d3e20323639383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:81:bf:46:63:ea:36:e7:37:4c:a4:77:f8:97:60:22:aa:89:
         88:ad:7f:e4:e1:fe:b0:54:b0:83:21:a3:0a:35:4c:00:2f:0e:
         f9:7f:60:9b:08:01:65:f3:37:d9:f1:1b:f8:a2:04:17:61:40:
         86:4a:eb:1b:4b:43:20:ca:78:d8:12:3b:c6:d7:49:66:d3:f7:
         74:c2:6f:68:1f:6c:c1:33:f7:7a:89:90:36:b4:5c:23:bd:95:
         85:24:a3:14:53:03:02:cb:96:23:13:f3:e3:19:fb:2d:1b:16:
         e9:94:f3:88:79:02:38:8e:ec:00:5e:94:5b:d3:0f:86:8b:44:
         16:83:52:11:3a:52:dc:cf:42:21:bf:13:29:0a:91:00:bd:08:
         c5:85:56:aa:c0:1e:09:e4:2e:33:c7:f0:1e:18:c8:17:ee:95:
         c9:83:30:1d:b2:81:e9:c8:05:0d:fa:ff:a7:f7:84:a0:3c:8a:
         5e:16:6f:06:5d:f9:f4:20:c0:a0:6c:a8:fe:73:7f:f9:c5:c0:
         87:33:91:7e:f2:bb:fa:5a:7f:f8:d8:be:71:05:ff:03:1e:5a:
         26:71:09:db:cd:26:0a:19:de:b9:15:23:2a:aa:df:45:8f:2b:
         26:a6:98:64:70:96:fa:b8:d7:5e:04:65:02:b7:3a:bb:48:21:
         13:93:83:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 10:43:55 2025 by rpki-client