Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3130382e302f32342d3234203d3e20323639383836.roa
File:                     34352e3139312e3130382e302f32342d3234203d3e20323639383836.roa (raw, json)
Hash identifier:          NeBRBkPnb98ripgOstuGo04XbRbGNrvotDx5Q8R3kTE=
Subject key identifier:   3B:40:D7:83:F8:22:54:53:FE:8B:AB:91:D0:6B:79:94:1A:B6:64:E7
Certificate issuer:       /CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
Certificate serial:       6CDE87F5CD7A16D4B2F96A1BE719C554557F5722
Authority key identifier: C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3130382e302f32342d3234203d3e20323639383836.roa
Signing time:             Tue 05 Mar 2024 18:06:37 +0000
ROA not before:           Tue 05 Mar 2024 18:01:37 +0000
ROA not after:            Tue 04 Mar 2025 18:06:37 +0000
asID:                     269886
IP address blocks:        45.191.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:de:87:f5:cd:7a:16:d4:b2:f9:6a:1b:e7:19:c5:54:55:7f:57:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
        Validity
            Not Before: Mar  5 18:01:37 2024 GMT
            Not After : Mar  4 18:06:37 2025 GMT
        Subject: CN=3B40D783F8225453FE8BAB91D06B79941AB664E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5d:d9:74:1c:db:34:30:33:55:33:8c:12:d9:
                    17:94:6e:62:6c:7a:d5:f0:d8:36:5a:52:bf:0e:19:
                    ab:58:f7:25:df:cd:59:12:1e:f3:fc:a8:ae:4a:ba:
                    f1:8d:b6:66:dc:d8:90:8c:b7:3f:c4:e9:76:9f:22:
                    84:9a:59:23:e3:9e:7c:70:14:00:f1:d2:9d:78:a3:
                    e2:b1:78:0b:3a:ed:c8:cc:2d:b3:bc:72:1e:a3:47:
                    a7:9d:0c:06:b7:f5:a6:c2:98:c0:b6:12:76:c5:76:
                    5c:12:82:3b:d3:ea:a0:c9:ab:64:73:10:ce:20:3b:
                    3d:77:d2:5c:dd:f2:62:f9:9f:9e:23:b5:64:a7:b9:
                    2b:8f:17:7c:14:f9:f6:8b:0b:02:27:c1:4c:ea:17:
                    f5:53:23:bc:09:d1:3f:db:8c:4a:bb:50:b7:40:0d:
                    e4:38:ff:08:17:96:01:a1:31:82:e7:d5:b3:87:bd:
                    2e:fe:e0:1b:a6:28:5e:95:6d:b9:27:2e:eb:22:20:
                    5b:98:62:8e:3c:b4:c2:ba:e8:6a:e0:e1:b1:12:3a:
                    c9:75:8c:ee:f3:92:e2:43:a1:a6:cb:44:c7:06:86:
                    10:e4:84:f6:69:fc:92:8b:60:dd:78:f2:b4:e9:75:
                    97:fc:eb:2d:6f:de:28:50:b1:27:68:37:9d:2f:94:
                    8f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:40:D7:83:F8:22:54:53:FE:8B:AB:91:D0:6B:79:94:1A:B6:64:E7
            X509v3 Authority Key Identifier:
                keyid:C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3130382e302f32342d3234203d3e20323639383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:06:4b:e2:f0:48:2c:7d:7a:6f:c0:db:4c:3f:45:fe:29:5f:
         98:29:a8:c4:2c:34:e8:71:ed:d9:79:88:ac:54:67:82:d6:9c:
         89:e8:be:44:2d:44:aa:33:5a:c2:21:8c:83:0e:e0:a1:42:12:
         4e:77:f7:b0:04:97:44:2f:17:f1:ba:b8:45:06:f2:2c:04:00:
         77:66:45:12:1c:f8:9f:dd:a4:90:47:f3:40:5f:7b:dc:58:70:
         a5:d9:7c:0c:63:9a:0a:85:7a:ae:7d:11:6d:7f:a7:9d:c3:a5:
         72:71:63:9d:c7:c1:3d:2d:ae:92:59:f7:4b:91:ba:51:db:23:
         a3:ef:31:55:53:87:4c:7f:ba:fa:f0:26:be:8e:03:d3:12:79:
         2c:ac:1a:43:02:d7:2e:ae:7b:3c:11:da:49:81:b2:7c:4e:99:
         86:4b:c8:9e:bf:83:d5:10:d2:b2:34:7d:44:29:82:67:89:5b:
         79:10:4c:12:bb:64:41:a8:ff:7f:cc:a2:5d:e9:85:63:96:fe:
         94:f5:fe:8d:55:70:71:bd:f6:c6:20:a6:8a:c4:05:34:74:1f:
         11:e7:9e:06:e9:6d:dc:e7:7e:3b:d4:0e:b4:e7:07:4d:56:c9:
         7a:d4:33:62:89:0c:1f:b8:59:76:c2:3e:c3:f9:fa:c8:d2:0b:
         00:09:c0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:49 2024 by rpki-client on console-ams.rpki-client.org