Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/34352e3139302e3234302e302f32322d3232203d3e20323635363135.roa
File:                     34352e3139302e3234302e302f32322d3232203d3e20323635363135.roa (raw, json)
Hash identifier:          pve3Jmg07GY5SHAgo6PWoo/69NN0PcNh5eDITD/4e4M=
Subject key identifier:   AA:10:E6:09:0C:BF:88:7D:0C:D1:D7:F2:39:30:E4:57:F2:49:E7:F5
Certificate issuer:       /CN=B51B463646421D5ECF9038E8B33EAF99E6E4D824
Certificate serial:       763D5FD2EF5CB67196CEA1982A3A9F048291083D
Authority key identifier: B5:1B:46:36:46:42:1D:5E:CF:90:38:E8:B3:3E:AF:99:E6:E4:D8:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/34352e3139302e3234302e302f32322d3232203d3e20323635363135.roa
Signing time:             Tue 05 Mar 2024 17:45:29 +0000
ROA not before:           Tue 05 Mar 2024 17:40:29 +0000
ROA not after:            Tue 04 Mar 2025 17:45:29 +0000
asID:                     265615
IP address blocks:        45.190.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:3d:5f:d2:ef:5c:b6:71:96:ce:a1:98:2a:3a:9f:04:82:91:08:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B51B463646421D5ECF9038E8B33EAF99E6E4D824
        Validity
            Not Before: Mar  5 17:40:29 2024 GMT
            Not After : Mar  4 17:45:29 2025 GMT
        Subject: CN=AA10E6090CBF887D0CD1D7F23930E457F249E7F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f4:e4:e0:d5:0b:69:39:54:b9:95:3b:f1:5b:
                    5d:cf:a7:9d:65:4f:95:6b:b2:ba:e9:84:95:37:09:
                    a2:d0:64:fc:cd:e1:ac:fc:9e:d3:b3:98:42:4a:fe:
                    bc:08:46:c5:c1:89:57:51:c2:bd:30:c4:64:da:83:
                    9d:0b:50:48:d8:77:9c:32:f7:8d:ba:96:f7:84:7f:
                    44:77:79:3c:62:7b:d7:6b:c4:8c:0a:1a:40:57:81:
                    83:76:d4:33:ca:7a:ee:f2:d1:58:8e:72:db:bd:fa:
                    0a:46:91:56:59:88:23:33:31:d2:7c:89:41:88:71:
                    24:af:88:9a:fb:e2:b0:9a:72:1a:29:0a:b9:8f:dc:
                    71:7a:a8:97:b2:59:ea:bc:14:c9:2f:e8:b3:7d:77:
                    66:88:20:b6:3e:28:85:b7:e7:dc:95:f0:bb:0b:26:
                    08:df:f9:f5:3c:28:09:64:6b:82:e6:3f:98:69:23:
                    92:d6:35:4a:29:f1:a1:a9:d0:b6:77:15:4e:0d:2d:
                    d5:53:ea:86:22:b2:f6:26:15:a8:0c:ec:3c:d0:15:
                    1b:d6:e6:cd:46:30:f7:f2:70:fb:02:14:98:72:34:
                    63:90:92:78:db:4e:06:c6:23:06:d5:55:c2:59:8f:
                    36:f0:21:05:2c:c8:ac:25:26:1f:64:a5:49:41:ca:
                    de:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:10:E6:09:0C:BF:88:7D:0C:D1:D7:F2:39:30:E4:57:F2:49:E7:F5
            X509v3 Authority Key Identifier:
                keyid:B5:1B:46:36:46:42:1D:5E:CF:90:38:E8:B3:3E:AF:99:E6:E4:D8:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/34352e3139302e3234302e302f32322d3232203d3e20323635363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:ff:b1:44:a0:cf:c5:7a:ad:24:f7:ea:1c:49:84:db:72:d0:
         44:73:9f:5b:5d:ff:5c:10:b9:14:e4:0b:25:66:1e:a5:d4:b8:
         d8:69:22:ef:49:b7:7e:4f:2a:12:5d:74:b3:8d:8d:b6:34:72:
         4d:b9:34:95:ab:c6:be:15:ea:ae:19:ef:d0:4c:96:fd:39:04:
         06:d1:cf:9a:9e:dd:0a:df:91:c9:50:3d:2e:65:a6:aa:51:64:
         2b:a0:3f:41:16:81:ba:44:a7:92:98:c1:20:de:64:04:68:df:
         ae:c1:c6:1e:03:da:b8:da:ea:26:d1:72:02:c4:57:cf:7e:ec:
         ca:f8:a0:9a:b2:b2:06:c1:ea:59:56:7d:d6:3b:e7:a6:46:db:
         2c:76:6c:4c:36:cb:12:9e:3d:01:d6:89:d5:77:97:66:8a:a9:
         0d:61:e1:a1:2d:12:63:69:e1:b0:03:e4:37:25:c6:38:e7:ba:
         e6:66:a4:61:01:d0:4c:c9:a6:f4:8f:45:3c:fe:ff:ad:b7:53:
         4f:55:ed:e1:a5:d8:12:96:56:3c:45:ca:3a:7d:cc:8f:a2:f3:
         46:cb:7c:02:6a:bc:41:d2:bc:59:58:42:68:42:7e:96:4e:05:
         d2:1a:6f:00:62:a2:50:62:09:9c:5c:54:15:52:7e:83:bc:87:
         3d:2a:87:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 16:11:47 2024 by rpki-client on console-fra.rpki-client.org