Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07bc3c08-6ded-4d14-ba51-c107c63a6fa6/134f606e2fddb88e89910cf98cef25efb02e1cf6.roa
File:                     134f606e2fddb88e89910cf98cef25efb02e1cf6.roa (raw, json)
Hash identifier:          qjQbaanwfrIMOu8e8Tj7bCzdtNcH2Y08/HExWDv9QQM=
Subject key identifier:   8E:5B:89:14:D7:81:68:3F:57:F2:88:E7:57:93:B4:A5:63:89:B4:67
Certificate issuer:       /CN=f678e11049659c38ac02262c4abce83a57481a23
Certificate serial:       0D25A4
Authority key identifier: A3:F4:AC:E9:6C:20:E7:A8:66:85:4F:7B:7D:DD:29:4A:2D:B7:58:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f678e11049659c38ac02262c4abce83a57481a23.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07bc3c08-6ded-4d14-ba51-c107c63a6fa6/134f606e2fddb88e89910cf98cef25efb02e1cf6.roa
Signing time:             Wed 24 Mar 2021 14:45:05 +0000
ROA not before:           Wed 24 Mar 2021 14:45:05 +0000
ROA not after:            Tue 24 Mar 2026 14:45:05 +0000
asID:                     264843
IP address blocks:        170.82.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/07bc3c08-6ded-4d14-ba51-c107c63a6fa6/f678e11049659c38ac02262c4abce83a57481a23.crl
                          rsync://repository.lacnic.net/rpki/lacnic/07bc3c08-6ded-4d14-ba51-c107c63a6fa6/f678e11049659c38ac02262c4abce83a57481a23.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f678e11049659c38ac02262c4abce83a57481a23.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861604 (0xd25a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f678e11049659c38ac02262c4abce83a57481a23
        Validity
            Not Before: Mar 24 14:45:05 2021 GMT
            Not After : Mar 24 14:45:05 2026 GMT
        Subject: CN=134f606e2fddb88e89910cf98cef25efb02e1cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:91:66:53:14:db:92:68:ed:ee:0b:3d:c7:b4:
                    7a:c0:ef:9b:52:03:dc:56:7b:d0:ca:47:bb:84:74:
                    42:b0:c6:42:11:b3:d8:9b:8f:67:d2:c1:bd:fa:bd:
                    13:40:f0:ba:7c:8c:2c:48:ee:75:62:5a:8e:c8:b4:
                    f9:09:86:d9:82:d9:cd:20:38:1b:a4:7e:11:f3:0b:
                    b3:ee:95:92:e6:9a:fd:b3:f7:76:bd:76:62:a9:f7:
                    9b:15:27:7a:37:32:5c:91:52:c4:33:b5:23:5a:27:
                    a6:bd:f9:f2:ca:28:5b:51:96:45:1b:6f:ab:f9:76:
                    20:84:50:d4:94:a5:46:09:6b:42:39:8d:9f:fb:4e:
                    56:b8:0a:3c:85:6d:65:ed:b1:0f:7f:4c:85:1e:b9:
                    0c:21:50:87:a7:86:70:ad:f6:71:6e:ed:fe:c2:c9:
                    f0:91:d2:dc:f2:a2:e4:7c:87:6c:88:57:d5:b8:70:
                    47:b5:41:05:09:6d:f4:b1:69:14:1c:2b:17:54:f3:
                    58:36:c6:c2:2a:61:09:e1:ac:75:3f:e8:35:96:40:
                    f1:9a:c2:17:bb:91:76:18:87:87:b7:fd:63:4b:90:
                    fb:c9:67:84:0c:3e:1e:22:7d:d4:9b:a2:ac:49:49:
                    67:b0:4a:c5:e6:01:c5:62:af:40:6c:c0:55:93:1b:
                    50:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5B:89:14:D7:81:68:3F:57:F2:88:E7:57:93:B4:A5:63:89:B4:67
            X509v3 Authority Key Identifier:
                keyid:A3:F4:AC:E9:6C:20:E7:A8:66:85:4F:7B:7D:DD:29:4A:2D:B7:58:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f678e11049659c38ac02262c4abce83a57481a23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07bc3c08-6ded-4d14-ba51-c107c63a6fa6/134f606e2fddb88e89910cf98cef25efb02e1cf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07bc3c08-6ded-4d14-ba51-c107c63a6fa6/f678e11049659c38ac02262c4abce83a57481a23.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:13:8d:33:67:3d:ca:13:78:ec:38:50:ec:49:59:2e:8d:73:
         94:84:19:fc:96:aa:73:87:dd:a5:66:80:e9:e2:d2:5e:6a:1e:
         30:1e:96:1f:c0:de:e5:89:15:61:fe:8f:6d:64:6c:c5:1d:17:
         1e:08:4b:da:29:3a:8a:02:0e:ec:d9:ee:7c:4b:e3:27:da:f2:
         df:3b:bd:42:33:74:e3:ed:11:a6:fc:71:6d:8c:64:1e:f0:b0:
         21:94:2a:c7:a9:bd:b5:fc:83:4f:65:e9:02:99:97:b8:49:21:
         13:75:46:01:86:65:40:a1:e0:b9:9f:a6:a9:8f:ff:5b:07:6c:
         01:cd:a6:4b:0f:f8:d0:73:78:48:c3:c8:c7:96:85:1c:d8:ff:
         21:e3:43:a2:18:41:6e:71:10:84:31:5d:98:59:3e:2f:89:e8:
         ff:e4:ee:49:37:f3:77:c7:e6:69:10:6f:5f:2b:c2:7d:ce:2f:
         5e:18:d5:87:62:dd:7b:d3:b4:53:aa:d3:33:b7:eb:08:7c:de:
         3b:55:54:d2:f4:f1:37:d4:e4:0c:79:80:a9:16:48:55:a1:fd:
         7b:88:3e:04:29:16:21:0a:00:89:2e:4e:f3:35:c0:cd:09:36:
         30:8c:30:55:99:28:52:69:59:4b:34:7b:dc:ab:7d:85:97:f2:
         23:0f:16:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 10:46:58 2024 by rpki-client on console-ams.rpki-client.org