Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0a0b73b6-eaa0-4884-b426-78948e2e935d/aa7b0ed9aa7a5661e68f8039e7282d997ff8f98b.roa
File:                     aa7b0ed9aa7a5661e68f8039e7282d997ff8f98b.roa (raw, json)
Hash identifier:          FSKljO/iS4JiDDc7AxtDhXnuJ5V2m1kBhLmvKG3ZXQ0=
Subject key identifier:   87:8E:35:71:E5:C8:EE:DF:E5:05:0D:6F:1A:09:B1:F1:C0:08:3B:F6
Certificate issuer:       /CN=00932e972389ea7205865b22c4909bed7cdcbf7e
Certificate serial:       0D6191
Authority key identifier: D0:65:6F:B9:27:C5:3E:D8:97:D3:4E:DA:2D:06:18:0B:0C:C3:99:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00932e972389ea7205865b22c4909bed7cdcbf7e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0a0b73b6-eaa0-4884-b426-78948e2e935d/aa7b0ed9aa7a5661e68f8039e7282d997ff8f98b.roa
Signing time:             Wed 24 Mar 2021 14:34:48 +0000
ROA not before:           Wed 24 Mar 2021 14:34:48 +0000
ROA not after:            Tue 24 Mar 2026 14:34:48 +0000
asID:                     61499
IP address blocks:        138.121.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0a0b73b6-eaa0-4884-b426-78948e2e935d/00932e972389ea7205865b22c4909bed7cdcbf7e.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0a0b73b6-eaa0-4884-b426-78948e2e935d/00932e972389ea7205865b22c4909bed7cdcbf7e.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00932e972389ea7205865b22c4909bed7cdcbf7e.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876945 (0xd6191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00932e972389ea7205865b22c4909bed7cdcbf7e
        Validity
            Not Before: Mar 24 14:34:48 2021 GMT
            Not After : Mar 24 14:34:48 2026 GMT
        Subject: CN=aa7b0ed9aa7a5661e68f8039e7282d997ff8f98b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0a:c1:a7:0c:1a:52:cc:af:22:3a:4c:17:56:
                    5b:86:da:5e:6b:0f:49:0c:02:12:43:b6:ad:9c:ed:
                    57:0f:5e:24:c1:00:de:27:6b:29:c6:ae:0d:a8:0d:
                    72:c3:5b:cb:37:20:e0:7f:e5:f6:9d:9d:23:30:15:
                    b7:c2:7d:a7:ef:44:9b:75:81:f4:19:24:19:f4:08:
                    b6:87:26:ab:1d:e3:cb:60:dd:db:b3:30:fc:0a:ed:
                    e7:74:11:45:60:bd:99:0a:e6:5d:43:78:8e:51:8f:
                    42:39:14:7c:a8:22:50:6b:0e:af:d4:61:12:37:de:
                    d0:fd:31:44:fc:9a:1f:e4:7d:53:24:b2:e1:d2:eb:
                    9f:81:8d:fe:33:23:bd:2e:96:bc:31:37:3e:61:f7:
                    63:25:54:5b:b2:97:22:ae:9c:e3:8d:d7:ba:4f:de:
                    6e:4e:5e:f1:d1:6d:ba:08:e4:98:c8:5c:4b:8c:1b:
                    2a:b0:ac:cc:a6:f8:8f:1c:66:7a:e6:7c:63:fc:bb:
                    fb:a5:91:42:61:88:ad:52:8e:10:64:e4:fe:14:b0:
                    ea:b1:89:c9:98:46:3f:14:a2:ff:85:88:0e:56:44:
                    31:dc:0c:39:d4:75:d3:6e:9d:21:c5:f6:bb:a8:70:
                    85:14:c6:57:1f:2e:b3:6e:51:89:30:91:d5:02:20:
                    28:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8E:35:71:E5:C8:EE:DF:E5:05:0D:6F:1A:09:B1:F1:C0:08:3B:F6
            X509v3 Authority Key Identifier:
                keyid:D0:65:6F:B9:27:C5:3E:D8:97:D3:4E:DA:2D:06:18:0B:0C:C3:99:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00932e972389ea7205865b22c4909bed7cdcbf7e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0a0b73b6-eaa0-4884-b426-78948e2e935d/aa7b0ed9aa7a5661e68f8039e7282d997ff8f98b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0a0b73b6-eaa0-4884-b426-78948e2e935d/00932e972389ea7205865b22c4909bed7cdcbf7e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:35:5d:55:ae:fb:a8:e0:38:21:48:bf:68:19:8a:fb:24:3c:
         55:ad:81:50:d0:e8:55:c8:51:dc:2a:81:48:08:f3:e2:dd:9e:
         eb:56:9d:8e:b9:c9:c9:39:76:d2:dc:67:4e:d3:7e:18:b6:c1:
         ec:0a:cc:a0:9c:3a:f7:f2:13:aa:de:07:82:32:88:24:08:0f:
         cf:96:8d:e8:94:89:22:2d:43:db:bc:22:30:3d:59:ed:0f:59:
         db:89:4d:97:83:86:75:1b:fd:4d:23:da:6a:01:1c:00:0d:c4:
         b0:0e:9d:c0:df:4e:81:05:75:6a:ee:15:43:38:68:cb:84:3d:
         4b:56:44:ba:d2:d8:4b:2c:98:a6:71:e3:ba:a4:43:ef:2c:31:
         d8:33:fe:f8:c4:61:a4:ca:f8:e4:23:ba:28:8b:22:51:89:d7:
         1c:a8:c5:61:1d:a5:c5:3d:1b:7a:b1:f0:aa:29:8f:33:09:04:
         05:17:8e:a0:0e:e0:02:e2:37:43:da:30:1a:97:90:8a:fb:25:
         13:92:df:76:9b:ca:24:59:f9:ac:0d:ec:52:02:c0:c1:ec:eb:
         95:2b:63:90:82:95:60:78:36:53:3b:95:28:e0:27:88:bf:bc:
         37:3f:48:54:a0:ed:b6:7d:e1:8a:e1:78:e7:50:75:2e:b0:ab:
         76:f8:12:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 14:01:08 2024 by rpki-client on console-fra.rpki-client.org