Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/34352e3139302e3234302e302f32342d3234203d3e20323635363135.roa
File:                     34352e3139302e3234302e302f32342d3234203d3e20323635363135.roa (raw, json)
Hash identifier:          XRvVdvdixPoPScEokxxE0+NIL99dWTiDKuZEAL2R8Ko=
Subject key identifier:   10:70:F3:92:09:A3:2B:42:29:22:EE:B8:9D:5D:87:94:F8:BD:43:DC
Certificate issuer:       /CN=B51B463646421D5ECF9038E8B33EAF99E6E4D824
Certificate serial:       2901169F45CA4C5595B35928F5741AE9C063BAAF
Authority key identifier: B5:1B:46:36:46:42:1D:5E:CF:90:38:E8:B3:3E:AF:99:E6:E4:D8:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/34352e3139302e3234302e302f32342d3234203d3e20323635363135.roa
Signing time:             Tue 05 Mar 2024 17:45:28 +0000
ROA not before:           Tue 05 Mar 2024 17:40:28 +0000
ROA not after:            Tue 04 Mar 2025 17:45:28 +0000
asID:                     265615
IP address blocks:        45.190.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:01:16:9f:45:ca:4c:55:95:b3:59:28:f5:74:1a:e9:c0:63:ba:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B51B463646421D5ECF9038E8B33EAF99E6E4D824
        Validity
            Not Before: Mar  5 17:40:28 2024 GMT
            Not After : Mar  4 17:45:28 2025 GMT
        Subject: CN=1070F39209A32B422922EEB89D5D8794F8BD43DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fe:7f:cd:89:5d:43:a9:28:d5:41:a6:80:ec:
                    98:ec:52:5f:8c:7c:ab:6f:99:24:42:c9:30:fc:11:
                    54:09:42:a5:43:fe:d8:00:50:89:6d:ef:16:b2:49:
                    1d:02:3a:8e:d4:2a:d1:34:cb:d9:21:50:2f:6e:ed:
                    ea:27:d1:d6:82:99:97:40:4a:76:3d:83:d1:f4:bc:
                    b1:e9:27:f9:a1:a8:1f:07:3a:72:4a:9e:92:48:9d:
                    b3:10:82:aa:04:1c:0f:ae:e4:80:e7:59:2b:73:a6:
                    df:49:99:48:e7:c7:92:a9:a4:51:a2:dc:e1:33:d6:
                    54:5d:59:84:c7:9f:d2:a2:88:e3:cb:01:4b:e3:22:
                    44:0d:1f:4a:b6:3f:f7:0a:14:ed:ec:35:01:93:da:
                    36:a4:4b:4b:f3:49:c0:6a:cc:b8:c7:c2:ce:e3:4e:
                    be:59:2d:82:d8:c1:31:30:13:62:4d:05:3b:05:8b:
                    c0:8c:50:28:bd:39:0b:c3:f0:7f:00:39:eb:fb:a8:
                    9f:a9:ef:22:0a:b8:15:79:02:d4:83:cf:eb:91:3b:
                    40:b4:32:b1:25:9f:f7:ed:c7:df:d6:5c:75:1f:7f:
                    86:2e:57:9b:ee:35:7d:36:34:c3:9d:7b:49:3e:9a:
                    c4:99:2d:10:d2:af:15:8d:6c:69:31:0d:02:2a:00:
                    6a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:70:F3:92:09:A3:2B:42:29:22:EE:B8:9D:5D:87:94:F8:BD:43:DC
            X509v3 Authority Key Identifier:
                keyid:B5:1B:46:36:46:42:1D:5E:CF:90:38:E8:B3:3E:AF:99:E6:E4:D8:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/34352e3139302e3234302e302f32342d3234203d3e20323635363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:b7:bc:22:3c:5f:60:c3:97:9e:1d:19:65:54:da:4e:19:0e:
         6e:d9:9d:cb:87:94:89:fe:80:68:87:96:08:21:c4:38:1f:a3:
         b5:02:68:7b:6f:24:e6:06:1f:09:15:bb:84:ac:32:83:1d:f4:
         f7:d9:25:ec:81:0f:b2:39:46:de:5b:76:06:da:0b:5d:29:35:
         4d:2b:45:7e:9c:44:da:1a:ad:8c:4b:bc:f4:12:a3:c9:2e:40:
         ed:2c:19:ac:91:34:19:26:fe:31:44:0b:20:8c:d6:f4:0c:5a:
         7d:6d:75:d5:9e:ea:1c:24:cb:b7:6f:a3:30:16:2e:fd:a2:1a:
         d6:96:17:cd:57:07:93:bc:e8:73:48:3b:82:ed:80:67:ac:00:
         b1:7c:d6:3f:6b:39:7d:e2:43:a1:b0:c1:13:ea:61:61:68:e8:
         57:1e:a1:98:a6:03:8a:1d:f2:a2:3d:0c:d0:d4:5e:b2:f5:7f:
         70:4e:76:47:d0:4c:f3:3d:6d:44:1a:e2:95:0e:ca:95:90:22:
         d8:f1:17:02:bf:a6:cc:9c:e8:24:cb:97:5f:cd:e2:ea:32:61:
         35:e8:23:9b:01:55:c5:94:d1:63:ff:8e:d9:0f:4c:86:0e:d2:
         04:17:e0:bd:f0:a7:cb:bc:cd:e6:3e:94:c0:ea:d8:fb:2d:85:
         14:a8:db:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 16:11:47 2024 by rpki-client on console-fra.rpki-client.org