Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/34352e3139302e3234312e302f32342d3234203d3e20323635363135.roa
File:                     34352e3139302e3234312e302f32342d3234203d3e20323635363135.roa (raw, json)
Hash identifier:          8nguzJY8Y/1HjjVCqD2jX04UlxMQ1ItrIPAUYDYvdMI=
Subject key identifier:   E7:34:F9:2F:52:F8:36:66:1F:DE:34:20:31:0F:ED:A9:88:CE:58:F9
Certificate issuer:       /CN=B51B463646421D5ECF9038E8B33EAF99E6E4D824
Certificate serial:       1DFFB0BA6093EBA2E60FF06AE6CA352EE9BB57DF
Authority key identifier: B5:1B:46:36:46:42:1D:5E:CF:90:38:E8:B3:3E:AF:99:E6:E4:D8:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/34352e3139302e3234312e302f32342d3234203d3e20323635363135.roa
Signing time:             Tue 05 Mar 2024 17:45:29 +0000
ROA not before:           Tue 05 Mar 2024 17:40:29 +0000
ROA not after:            Tue 04 Mar 2025 17:45:29 +0000
asID:                     265615
IP address blocks:        45.190.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ff:b0:ba:60:93:eb:a2:e6:0f:f0:6a:e6:ca:35:2e:e9:bb:57:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B51B463646421D5ECF9038E8B33EAF99E6E4D824
        Validity
            Not Before: Mar  5 17:40:29 2024 GMT
            Not After : Mar  4 17:45:29 2025 GMT
        Subject: CN=E734F92F52F836661FDE3420310FEDA988CE58F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:48:54:bf:6b:95:ae:63:6d:8c:35:5a:30:07:
                    b9:75:01:7f:46:69:ce:ae:d4:35:24:df:8e:71:ff:
                    ee:22:6d:7d:92:59:f9:ce:53:0a:50:05:30:37:f6:
                    ff:93:9b:15:2a:a1:c0:30:5f:c5:5d:6e:bb:3f:a7:
                    a1:10:3c:2c:55:fc:03:cb:0e:db:42:19:76:3a:48:
                    1f:7f:20:68:7b:fb:dd:9e:29:1b:06:e9:30:8e:04:
                    c4:ee:be:b5:cb:94:9d:6d:68:07:24:53:7c:cb:27:
                    74:11:f1:8e:6a:1f:62:ac:78:31:a5:d7:64:01:c0:
                    71:dc:44:8c:ed:03:cc:32:e3:d5:02:98:12:76:33:
                    d9:37:b5:f9:24:ea:81:0d:5e:ab:47:4a:82:74:c2:
                    40:8b:a6:75:fd:4e:95:9d:4d:f5:39:11:b2:a9:9b:
                    20:8c:f7:6d:c8:a5:c6:21:b8:3a:c9:c4:7c:4b:41:
                    ff:fa:05:e9:45:1f:3b:46:48:ce:9a:35:37:98:6d:
                    94:34:a5:51:03:9b:87:2c:35:a9:12:76:1a:14:59:
                    85:30:54:04:f5:c6:da:6c:78:06:2d:42:eb:09:db:
                    cc:82:64:9f:52:fb:1e:48:be:76:11:e7:d2:40:77:
                    ca:4e:d0:8c:55:e4:62:51:ff:bf:75:a8:b2:35:ee:
                    df:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:34:F9:2F:52:F8:36:66:1F:DE:34:20:31:0F:ED:A9:88:CE:58:F9
            X509v3 Authority Key Identifier:
                keyid:B5:1B:46:36:46:42:1D:5E:CF:90:38:E8:B3:3E:AF:99:E6:E4:D8:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/34352e3139302e3234312e302f32342d3234203d3e20323635363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:4f:e4:b7:6d:a1:c9:0e:5c:1d:be:7e:88:7d:a5:cd:f3:28:
         19:5b:c9:be:f2:76:16:de:41:59:e0:75:1f:dc:21:79:3c:72:
         9f:85:af:fa:d3:2e:51:cc:a9:45:3d:8e:4f:7b:c7:cd:6e:6d:
         2a:4b:49:64:80:28:ff:89:bf:21:06:ea:41:24:32:16:53:db:
         c8:1d:ac:20:6f:e7:e4:ff:2f:f8:cb:40:62:ca:1e:09:05:d2:
         db:c4:79:fc:9b:c9:a4:ad:6f:02:94:6d:76:3b:4b:4f:0f:3a:
         16:c4:2e:88:7c:0f:24:bc:34:d8:a3:29:45:13:5d:d8:0a:85:
         63:d3:ed:10:84:9b:08:bc:a4:cb:a2:e7:11:fa:49:dc:a0:eb:
         f0:64:fd:c3:13:2a:98:88:53:48:aa:09:9e:88:9d:c9:ed:ec:
         be:4e:31:3a:5c:a1:d0:04:b4:42:3e:38:9c:00:2d:70:aa:2b:
         3d:c4:45:20:3a:2c:23:ea:b3:f0:5e:9d:fa:ba:a2:30:5c:ba:
         20:d2:8a:c3:d2:b5:6b:78:8c:ee:82:1f:bd:6e:f1:56:1b:3a:
         ec:b7:38:27:10:05:ba:ec:ac:d0:cc:0b:64:2e:ba:d1:d2:ca:
         44:13:5a:0f:68:3e:a5:c0:0d:e1:5d:7a:d9:09:c8:6a:c7:cc:
         3f:c0:de:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:32 2024 by rpki-client on console-ams.rpki-client.org