Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15a0b5de-bb3a-414d-9dff-8c3b7b19fe64/3a337cf92f20b17a29545e1860d9f9ebe0a2c09d.roa
File:                     3a337cf92f20b17a29545e1860d9f9ebe0a2c09d.roa (raw, json)
Hash identifier:          crwhYUmZd7T5AitBEj8fPu6q0chrvTAQ9IEfO3FySpA=
Subject key identifier:   A1:29:07:9D:BB:B3:3D:93:0C:B7:EF:E9:C7:30:75:EE:FF:DD:80:74
Certificate issuer:       /CN=e31962c7b69b60f9f76d1235172fc683230c33ef
Certificate serial:       0B8D0D
Authority key identifier: CA:AF:AA:A1:D8:DC:EC:E5:5D:0E:23:93:FB:69:AF:C6:C3:58:E1:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e31962c7b69b60f9f76d1235172fc683230c33ef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15a0b5de-bb3a-414d-9dff-8c3b7b19fe64/3a337cf92f20b17a29545e1860d9f9ebe0a2c09d.roa
Signing time:             Wed 24 Mar 2021 14:40:27 +0000
ROA not before:           Wed 24 Mar 2021 14:40:27 +0000
ROA not after:            Tue 24 Mar 2026 14:40:27 +0000
asID:                     269806
IP address blocks:        45.186.4.0/24 maxlen: 24
                          45.186.5.0/24 maxlen: 24
                          45.186.6.0/24 maxlen: 24
                          45.186.7.0/24 maxlen: 24
                          2803:6b60::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15a0b5de-bb3a-414d-9dff-8c3b7b19fe64/e31962c7b69b60f9f76d1235172fc683230c33ef.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15a0b5de-bb3a-414d-9dff-8c3b7b19fe64/e31962c7b69b60f9f76d1235172fc683230c33ef.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e31962c7b69b60f9f76d1235172fc683230c33ef.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 757005 (0xb8d0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e31962c7b69b60f9f76d1235172fc683230c33ef
        Validity
            Not Before: Mar 24 14:40:27 2021 GMT
            Not After : Mar 24 14:40:27 2026 GMT
        Subject: CN=3a337cf92f20b17a29545e1860d9f9ebe0a2c09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5f:6f:39:ad:4d:f8:81:39:64:a1:f3:4e:92:
                    f9:7c:86:b3:bd:5b:f4:ff:b4:7a:17:7d:15:89:13:
                    38:18:c4:dc:4e:05:42:fb:95:0c:e2:52:22:6b:76:
                    8f:d2:1e:5e:1a:84:1e:52:9c:b4:e4:03:3d:c5:e9:
                    f6:15:c7:43:8d:80:7f:14:95:d5:8b:7a:aa:58:17:
                    a1:3d:90:49:f8:a4:92:9c:21:53:dc:19:a0:d2:1d:
                    39:be:55:e7:16:56:d0:3d:16:1d:df:f9:3b:2f:f6:
                    fa:10:f2:98:d4:72:1b:85:a8:49:84:73:8e:ec:9a:
                    45:8d:ff:6a:6f:58:db:38:03:3a:97:83:ca:97:77:
                    d7:8f:52:cb:bd:42:42:19:a0:e2:6c:17:6a:48:b4:
                    bb:d0:e9:e0:ea:6e:df:a5:ad:22:6b:a1:46:29:fa:
                    b9:e7:a5:cd:13:f7:2b:07:dc:c7:41:44:c4:73:cd:
                    7c:b1:85:f9:35:b9:5c:b7:62:7f:66:47:5a:8e:19:
                    1f:56:27:9a:20:f8:dd:31:08:59:b3:a2:06:3e:11:
                    27:5a:b2:90:6b:d9:70:6d:06:88:b6:3b:75:55:46:
                    69:4b:71:71:a1:78:e9:6a:fc:ff:2e:3e:c5:15:14:
                    e3:a9:33:16:63:7a:ce:14:25:de:2d:e1:4e:80:48:
                    d3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:29:07:9D:BB:B3:3D:93:0C:B7:EF:E9:C7:30:75:EE:FF:DD:80:74
            X509v3 Authority Key Identifier:
                keyid:CA:AF:AA:A1:D8:DC:EC:E5:5D:0E:23:93:FB:69:AF:C6:C3:58:E1:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e31962c7b69b60f9f76d1235172fc683230c33ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15a0b5de-bb3a-414d-9dff-8c3b7b19fe64/3a337cf92f20b17a29545e1860d9f9ebe0a2c09d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15a0b5de-bb3a-414d-9dff-8c3b7b19fe64/e31962c7b69b60f9f76d1235172fc683230c33ef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.4.0/22
                IPv6:
                  2803:6b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:ed:61:e5:f6:d4:69:f8:e5:ea:83:df:3d:c3:0a:9f:89:c9:
         4f:04:a0:21:42:2c:5c:43:d8:ed:67:6d:b6:37:cc:e3:d2:a6:
         db:d6:b3:a1:ee:49:8e:26:aa:e1:2e:e7:9f:a1:51:5e:01:77:
         8d:fb:45:76:fa:8d:5a:33:6c:d8:e1:fa:24:be:f5:8c:7a:fb:
         b6:26:e4:67:6b:1e:8e:77:fa:a9:67:68:ea:e1:91:31:08:02:
         78:c4:97:10:bc:8e:f9:20:6e:c0:8c:1e:36:97:c2:ac:e3:96:
         5e:2c:ca:63:ad:cf:c2:c9:40:f4:25:fa:38:9d:7c:b2:3b:00:
         a6:0d:0c:50:5b:d9:52:2d:05:2e:03:f7:15:d8:64:f8:e8:c4:
         49:25:e6:a7:69:38:88:68:92:a2:90:62:0e:39:1d:ca:ed:7b:
         21:1a:ae:16:28:0e:6b:6e:c8:d0:c3:d2:b9:43:9c:f2:c2:f7:
         7b:4c:21:4b:ee:74:3f:bf:42:15:64:79:bf:db:35:35:ee:c1:
         73:0e:d2:f9:0f:b5:7c:a1:29:c2:c2:b7:24:c9:04:63:4d:cd:
         ed:36:95:96:81:68:0e:04:e7:fb:e2:ae:41:99:fd:cd:a5:0c:
         3e:21:1b:3a:e3:d4:74:7a:dc:17:4b:20:d2:57:02:c8:2e:48:
         85:27:b7:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDC40NMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGUz
MTk2MmM3YjY5YjYwZjlmNzZkMTIzNTE3MmZjNjgzMjMwYzMzZWYwHhcNMjEwMzI0
MTQ0MDI3WhcNMjYwMzI0MTQ0MDI3WjAzMTEwLwYDVQQDEygzYTMzN2NmOTJmMjBi
MTdhMjk1NDVlMTg2MGQ5ZjllYmUwYTJjMDlkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqF9vOa1N+IE5ZKHzTpL5fIazvVv0/7R6F30ViRM4GMTcTgVC
+5UM4lIia3aP0h5eGoQeUpy05AM9xen2FcdDjYB/FJXVi3qqWBehPZBJ+KSSnCFT
3Bmg0h05vlXnFlbQPRYd3/k7L/b6EPKY1HIbhahJhHOO7JpFjf9qb1jbOAM6l4PK
l3fXj1LLvUJCGaDibBdqSLS70Ong6m7fpa0ia6FGKfq556XNE/crB9zHQUTEc818
sYX5Nblct2J/ZkdajhkfVieaIPjdMQhZs6IGPhEnWrKQa9lwbQaItjt1VUZpS3Fx
oXjpavz/Lj7FFRTjqTMWY3rOFCXeLeFOgEjTyQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFKEpB527sz2TDLfv6ccwde7/3YB0MB8GA1UdIwQYMBaAFMqvqqHY3OzlXQ4j
k/tpr8bDWOH6MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTMxOTYy
YzdiNjliNjBmOWY3NmQxMjM1MTcyZmM2ODMyMzBjMzNlZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTVhMGI1ZGUtYmIzYS00MTRkLTlkZmYtOGMzYjdi
MTlmZTY0LzNhMzM3Y2Y5MmYyMGIxN2EyOTU0NWUxODYwZDlmOWViZTBhMmMwOWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xNWEwYjVkZS1iYjNhLTQxNGQtOWRmZi04YzNi
N2IxOWZlNjQvZTMxOTYyYzdiNjliNjBmOWY3NmQxMjM1MTcyZmM2ODMyMzBjMzNl
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi26BDANBAIAAjAHAwUAKANrYDANBgkqhkiG9w0BAQsFAAOC
AQEAUe1h5fbUafjl6oPfPcMKn4nJTwSgIUIsXEPY7WdttjfM49Km29azoe5Jjiaq
4S7nn6FRXgF3jftFdvqNWjNs2OH6JL71jHr7tibkZ2sejnf6qWdo6uGRMQgCeMSX
ELyO+SBuwIweNpfCrOOWXizKY63PwslA9CX6OJ18sjsApg0MUFvZUi0FLgP3Fdhk
+OjESSXmp2k4iGiSopBiDjkdyu17IRquFigOa27I0MPSuUOc8sL3e0whS+50P79C
FWR5v9s1Ne7Bcw7S+Q+1fKEpwsK3JMkEY03N7TaVloFoDgTn++KuQZn9zaUMPiEb
OuPUdHrcF0sg0lcCyC5IhSe3iQ==
-----END CERTIFICATE-----
Generated at Thu Mar 28 19:38:56 2024 by rpki-client on console-fra.rpki-client.org