Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/34352e3138312e3139302e302f32342d3234203d3e20323639373335.roa
File:                     34352e3138312e3139302e302f32342d3234203d3e20323639373335.roa (raw, json)
Hash identifier:          sYqFVuf8SqUQY8OufOh6HM6fE9yHQoZCRaRVrcJEnp0=
Subject key identifier:   5A:05:E3:BF:54:02:68:BB:1B:5A:AF:B7:B0:A1:56:E1:DB:B1:78:32
Certificate issuer:       /CN=6B10736B719525EEF03A0E2B1890255AD5B6AFB4
Certificate serial:       3CC110895947E663FBB2B85C5DF252D4B5F248D5
Authority key identifier: 6B:10:73:6B:71:95:25:EE:F0:3A:0E:2B:18:90:25:5A:D5:B6:AF:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/34352e3138312e3139302e302f32342d3234203d3e20323639373335.roa
Signing time:             Tue 05 Mar 2024 17:48:02 +0000
ROA not before:           Tue 05 Mar 2024 17:43:02 +0000
ROA not after:            Tue 04 Mar 2025 17:48:02 +0000
asID:                     269735
IP address blocks:        45.181.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c1:10:89:59:47:e6:63:fb:b2:b8:5c:5d:f2:52:d4:b5:f2:48:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B10736B719525EEF03A0E2B1890255AD5B6AFB4
        Validity
            Not Before: Mar  5 17:43:02 2024 GMT
            Not After : Mar  4 17:48:02 2025 GMT
        Subject: CN=5A05E3BF540268BB1B5AAFB7B0A156E1DBB17832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3c:b0:9c:d8:d9:56:6f:18:e6:1e:71:e9:b6:
                    da:3e:25:bb:c5:ea:79:4a:bf:a3:53:a4:68:8a:bf:
                    51:ee:a5:f5:76:cd:5b:6f:14:8e:35:d6:9b:bd:3e:
                    ed:b7:8f:41:b3:6f:32:04:dc:61:a7:b1:90:56:49:
                    c0:ca:6d:25:7c:72:90:60:80:bd:01:81:a4:d8:87:
                    d0:96:a4:cf:fd:fb:06:39:ce:b8:29:9f:77:80:03:
                    f5:3a:4d:d6:1c:e7:0d:88:78:97:ef:8e:06:c7:55:
                    bd:7d:ce:e0:f5:9d:19:c7:fc:2c:2f:21:28:50:74:
                    5f:38:d6:80:35:7d:22:78:42:4c:61:71:cf:0d:12:
                    d1:bc:da:04:4e:3b:fb:1c:3b:2b:3a:91:21:5f:ce:
                    9a:7c:02:3a:5e:1f:bb:cf:e8:bc:9c:34:9b:6a:50:
                    37:9d:88:26:ed:d9:64:4e:66:06:bf:7b:dd:b8:98:
                    1f:f1:1e:b4:08:2a:af:04:65:e2:11:05:dc:e6:8a:
                    71:ac:af:80:35:af:f3:cf:12:fa:0b:e0:23:41:11:
                    82:4c:c3:b5:b3:d9:b4:3a:6b:d9:7c:ab:d3:06:4c:
                    7c:8d:39:50:30:72:03:30:d0:1d:c9:67:38:5f:81:
                    e3:45:eb:22:6c:6b:df:a8:f5:2b:40:23:91:76:52:
                    96:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:05:E3:BF:54:02:68:BB:1B:5A:AF:B7:B0:A1:56:E1:DB:B1:78:32
            X509v3 Authority Key Identifier:
                keyid:6B:10:73:6B:71:95:25:EE:F0:3A:0E:2B:18:90:25:5A:D5:B6:AF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/34352e3138312e3139302e302f32342d3234203d3e20323639373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:96:1e:1e:cf:56:ba:e2:13:e0:28:63:36:f2:79:cd:33:ee:
         dd:02:33:1f:95:4b:0d:92:cf:d3:96:28:12:23:64:41:9b:ad:
         ea:bc:57:2c:84:c2:0f:3e:40:e8:29:ec:e8:f3:04:43:8b:55:
         d8:c1:5e:52:66:7e:e9:08:2c:82:1b:af:93:1c:da:76:55:12:
         7a:cc:0d:26:2a:3e:75:95:ee:23:cc:27:1d:b3:7d:ea:27:53:
         13:74:ce:91:af:a4:6d:cb:f5:16:3b:4c:14:56:af:94:18:7b:
         a9:fb:cb:8a:81:98:2b:e2:f8:0c:ea:30:7b:6a:f0:f9:43:c7:
         41:16:ba:69:6f:1d:e0:61:f7:a8:ae:a1:86:34:84:4f:7d:15:
         d1:ae:bc:09:65:b0:8e:be:48:7e:7a:eb:88:71:c2:fa:fb:94:
         47:3c:fd:9c:6f:73:49:3a:f4:be:99:55:14:97:87:79:dc:68:
         15:67:69:ed:1e:d1:e0:9f:01:9c:a9:55:2d:25:98:ca:bf:36:
         9a:50:c3:e0:6a:f1:9d:88:38:7e:b5:69:f5:1c:14:57:17:16:
         a5:da:b8:b3:d4:99:4c:ea:81:cd:b8:c9:12:19:74:a2:4b:b7:
         89:25:30:29:67:2d:9c:05:26:da:14:cb:82:be:5a:28:7b:77:
         33:8b:87:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:38 2024 by rpki-client on console-ams.rpki-client.org