Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0e145a9a-058b-49d2-bac6-33621e9398e3/1c0acb47fdd251d0f0cb42c7c1223ba1a41f1d67.roa
File:                     1c0acb47fdd251d0f0cb42c7c1223ba1a41f1d67.roa (raw, json)
Hash identifier:          dTLSmTNQK1Pdd5ad4KLuB3OICu9ebHXJNINPhhf0EBk=
Subject key identifier:   6F:75:C2:FD:E8:A5:18:47:4E:8F:EF:9E:04:F0:03:BA:60:92:77:9D
Certificate issuer:       /CN=7bba824531e9ca479de15a44d5f7974cbb2531e9
Certificate serial:       0D25FC
Authority key identifier: E2:13:28:0E:3F:93:86:5D:F1:6D:24:C4:8B:89:DC:6F:77:86:AD:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7bba824531e9ca479de15a44d5f7974cbb2531e9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0e145a9a-058b-49d2-bac6-33621e9398e3/1c0acb47fdd251d0f0cb42c7c1223ba1a41f1d67.roa
Signing time:             Wed 24 Mar 2021 14:46:17 +0000
ROA not before:           Wed 24 Mar 2021 14:46:17 +0000
ROA not after:            Tue 24 Mar 2026 14:46:17 +0000
asID:                     266673
IP address blocks:        45.228.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0e145a9a-058b-49d2-bac6-33621e9398e3/7bba824531e9ca479de15a44d5f7974cbb2531e9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0e145a9a-058b-49d2-bac6-33621e9398e3/7bba824531e9ca479de15a44d5f7974cbb2531e9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7bba824531e9ca479de15a44d5f7974cbb2531e9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861692 (0xd25fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bba824531e9ca479de15a44d5f7974cbb2531e9
        Validity
            Not Before: Mar 24 14:46:17 2021 GMT
            Not After : Mar 24 14:46:17 2026 GMT
        Subject: CN=1c0acb47fdd251d0f0cb42c7c1223ba1a41f1d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:db:67:f6:b5:ea:e6:cd:9b:fe:01:ae:8f:b6:
                    e5:97:a0:ca:d4:43:4f:3b:00:90:ab:3c:94:e1:d2:
                    43:2e:6d:a1:19:26:05:bd:16:b6:17:00:b2:48:6e:
                    27:e4:73:8a:5b:e1:5b:7e:82:cf:ab:f6:89:e0:20:
                    df:31:0c:9f:35:a3:01:ab:57:c0:d8:8e:1f:0b:73:
                    41:5e:ad:e2:00:69:f6:54:79:58:ca:f4:8f:6f:05:
                    35:1c:86:e8:fb:f6:f4:87:40:2e:e8:67:31:c2:10:
                    01:b2:15:e5:49:1e:f4:14:a7:ca:f7:9d:0d:04:93:
                    f2:f0:6f:b6:68:1e:83:11:8a:c3:46:8b:0f:9e:44:
                    ef:66:f9:7c:3f:63:6d:5f:d3:0a:43:96:ee:4f:2a:
                    b0:5e:f5:3e:72:35:a3:39:03:a5:0e:78:05:b3:fd:
                    1d:6d:65:d7:7a:b7:5c:77:ca:5f:50:4f:a6:66:5c:
                    9c:35:e6:1b:fb:0a:ca:6c:62:5e:f5:5b:52:22:ed:
                    d0:24:67:04:b4:72:60:6e:0e:bd:0e:bb:e0:fc:8d:
                    56:dc:49:24:d1:95:8e:7f:df:61:03:67:d6:39:b4:
                    c0:9f:d4:fb:a3:53:41:b4:be:12:2d:12:cf:90:0a:
                    5e:6f:d7:3a:18:ee:5e:58:c2:48:65:71:58:f1:02:
                    37:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:75:C2:FD:E8:A5:18:47:4E:8F:EF:9E:04:F0:03:BA:60:92:77:9D
            X509v3 Authority Key Identifier:
                keyid:E2:13:28:0E:3F:93:86:5D:F1:6D:24:C4:8B:89:DC:6F:77:86:AD:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7bba824531e9ca479de15a44d5f7974cbb2531e9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0e145a9a-058b-49d2-bac6-33621e9398e3/1c0acb47fdd251d0f0cb42c7c1223ba1a41f1d67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0e145a9a-058b-49d2-bac6-33621e9398e3/7bba824531e9ca479de15a44d5f7974cbb2531e9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:ea:58:47:b1:61:6a:92:ab:1f:4a:66:10:dd:db:65:4a:6a:
         e4:c3:48:27:fb:ef:6c:cb:54:87:ce:a7:cc:a3:2c:3a:e8:f8:
         f3:36:6a:a9:26:12:bc:d5:67:13:4f:a8:d5:19:14:94:b8:26:
         ad:62:29:f9:bf:43:53:10:c7:67:8e:bb:fc:8c:fe:39:7d:25:
         cc:b9:49:ab:7f:52:ea:19:45:df:e4:06:9c:4b:1f:7d:18:1f:
         ab:3a:03:bc:35:c5:cb:63:38:ef:64:96:66:69:2a:45:79:c0:
         9f:67:06:61:1a:65:d9:23:61:dd:d2:80:3a:ef:a5:cc:d7:04:
         f8:62:8a:94:da:60:c9:1b:0a:38:b4:83:25:f3:40:1b:7b:21:
         38:62:e5:4d:d6:fd:bc:1c:e0:a0:15:32:e4:39:71:05:a5:2b:
         57:be:88:6e:e0:74:7a:67:b5:16:7e:0d:0f:f8:25:32:a6:8a:
         ce:a3:18:5a:c6:93:f8:ab:2c:d8:47:60:ac:e2:e0:96:5d:c9:
         7e:ce:8f:79:81:e1:42:d3:d8:51:a4:3f:cd:72:38:fd:1f:c1:
         ea:d1:50:a8:02:ac:da:5e:cf:1b:dd:bc:32:66:04:bd:b2:86:
         0f:ba:83:a0:f2:8b:01:ae:ec:98:68:14:bf:7a:16:ac:b0:e9:
         d1:08:fc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 13:01:05 2024 by rpki-client on console-fra.rpki-client.org