Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/c66eb4458b298835f3c4eed24038c4be2fae00a1.roa
File:                     c66eb4458b298835f3c4eed24038c4be2fae00a1.roa (raw, json)
Hash identifier:          APJxbKEciGz5Mnmn1GUkD7XCyDeevmrYQ++VYEFMYZo=
Subject key identifier:   6D:B9:5F:91:43:DF:A5:BF:D2:DA:57:07:4F:21:73:D5:87:14:07:92
Certificate issuer:       /CN=6700d78d2e18243ea736c1288c50a9461ced8b3c
Certificate serial:       1FF3E9
Authority key identifier: 6D:16:7E:D1:DD:2E:65:DE:1D:97:BA:EC:8C:20:55:AD:DC:17:37:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6700d78d2e18243ea736c1288c50a9461ced8b3c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/c66eb4458b298835f3c4eed24038c4be2fae00a1.roa
Signing time:             Wed 01 Feb 2023 20:30:03 +0000
ROA not before:           Tue 31 Jan 2023 20:29:12 +0000
ROA not after:            Sat 01 Feb 2025 20:29:12 +0000
asID:                     262171
IP address blocks:        190.93.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/6700d78d2e18243ea736c1288c50a9461ced8b3c.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/6700d78d2e18243ea736c1288c50a9461ced8b3c.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6700d78d2e18243ea736c1288c50a9461ced8b3c.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2094057 (0x1ff3e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6700d78d2e18243ea736c1288c50a9461ced8b3c
        Validity
            Not Before: Jan 31 20:29:12 2023 GMT
            Not After : Feb  1 20:29:12 2025 GMT
        Subject: CN=c66eb4458b298835f3c4eed24038c4be2fae00a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3e:74:bc:6d:f3:d0:60:80:ca:21:13:29:32:
                    2f:0f:6f:59:98:38:a6:0e:96:7f:ff:e8:ed:f9:96:
                    62:06:6f:36:fe:0e:7e:ee:2d:2f:eb:bb:0c:f6:03:
                    8d:d7:ae:12:04:49:e7:41:f5:2c:c9:94:36:08:5e:
                    0d:61:82:f9:7d:05:9a:e8:5b:a6:eb:e9:a2:97:52:
                    af:77:3d:67:41:53:b5:4f:c7:ee:e4:01:a4:43:57:
                    98:06:ac:ec:7b:59:9a:59:35:8d:a6:64:22:37:07:
                    bf:0d:6c:bf:f5:5d:91:c7:0a:11:4c:9c:41:82:c8:
                    68:41:dc:14:3d:4c:7f:34:6c:e8:d8:d2:22:d7:10:
                    3a:14:9d:65:f9:f6:35:16:f0:a3:55:51:13:5b:89:
                    94:a0:39:65:02:f4:f5:d7:6d:f2:69:ad:4e:55:8c:
                    72:40:27:1c:b2:47:e8:b4:4b:ae:b9:57:d3:0f:3f:
                    18:a9:b7:3e:37:c6:21:04:68:a5:ef:36:c4:da:a5:
                    ed:3f:6e:d9:be:09:2f:06:26:4e:a5:cd:d7:4a:21:
                    7d:0c:71:9e:a3:1d:74:de:84:bd:30:f5:23:31:5f:
                    10:c8:e4:b9:f1:4e:55:87:40:f2:6f:89:da:40:f4:
                    71:04:85:57:0e:24:d9:5d:c1:b6:30:08:32:1a:cd:
                    55:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B9:5F:91:43:DF:A5:BF:D2:DA:57:07:4F:21:73:D5:87:14:07:92
            X509v3 Authority Key Identifier:
                keyid:6D:16:7E:D1:DD:2E:65:DE:1D:97:BA:EC:8C:20:55:AD:DC:17:37:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6700d78d2e18243ea736c1288c50a9461ced8b3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/c66eb4458b298835f3c4eed24038c4be2fae00a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/6700d78d2e18243ea736c1288c50a9461ced8b3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:c7:73:76:27:b6:5d:65:b1:d7:3d:ea:b7:54:13:92:c4:45:
         cb:f0:18:a4:1e:5d:fc:5e:96:dc:da:b5:3c:5f:0c:58:d3:12:
         8b:03:65:16:63:49:a1:90:0d:af:92:1d:4b:9f:3b:7f:95:39:
         b9:b8:91:44:42:ab:fb:99:5a:0a:fd:a2:45:70:a5:84:89:5c:
         6e:4d:2f:7e:e3:a5:f2:dd:10:0d:17:4c:12:4a:cb:c7:4d:17:
         35:f6:50:73:b0:24:47:aa:14:f5:52:ab:9f:e0:67:2b:60:c0:
         6f:a7:da:f8:a9:78:1e:d4:2c:37:d5:3a:03:a7:df:14:3b:47:
         11:fc:bf:d9:39:1c:fb:c6:54:41:ad:54:02:27:40:19:c1:bd:
         8d:50:6c:b6:cb:a6:f6:4f:98:74:b7:21:e4:d3:4c:2b:00:b9:
         73:e4:27:ed:69:1f:db:02:40:be:a1:42:4c:ac:6a:5f:3b:09:
         fe:fb:33:98:d0:39:09:44:b1:f3:ba:e0:7f:2e:97:e1:72:58:
         77:8a:41:dc:e1:c5:1f:81:26:6f:de:d7:13:8b:ac:30:a9:99:
         4a:1d:b9:87:39:9f:55:f2:85:62:5e:51:a7:1d:3f:9e:b8:71:
         ea:b8:d7:93:d4:03:1e:53:06:ff:6d:97:b8:0e:ba:e9:79:3f:
         b7:66:5b:e1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDH/PpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY3
MDBkNzhkMmUxODI0M2VhNzM2YzEyODhjNTBhOTQ2MWNlZDhiM2MwHhcNMjMwMTMx
MjAyOTEyWhcNMjUwMjAxMjAyOTEyWjAzMTEwLwYDVQQDEyhjNjZlYjQ0NThiMjk4
ODM1ZjNjNGVlZDI0MDM4YzRiZTJmYWUwMGExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApj50vG3z0GCAyiETKTIvD29ZmDimDpZ//+jt+ZZiBm82/g5+
7i0v67sM9gON164SBEnnQfUsyZQ2CF4NYYL5fQWa6Fum6+mil1Kvdz1nQVO1T8fu
5AGkQ1eYBqzse1maWTWNpmQiNwe/DWy/9V2RxwoRTJxBgshoQdwUPUx/NGzo2NIi
1xA6FJ1l+fY1FvCjVVETW4mUoDllAvT1123yaa1OVYxyQCccskfotEuuuVfTDz8Y
qbc+N8YhBGil7zbE2qXtP27ZvgkvBiZOpc3XSiF9DHGeox103oS9MPUjMV8QyOS5
8U5Vh0Dyb4naQPRxBIVXDiTZXcG2MAgyGs1V1QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFG25X5FD36W/0tpXB08hc9WHFAeSMB8GA1UdIwQYMBaAFG0WftHdLmXeHZe6
7IwgVa3cFzfIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjcwMGQ3
OGQyZTE4MjQzZWE3MzZjMTI4OGM1MGE5NDYxY2VkOGIzYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTg2NWEwNzQtYWMzMS00Y2Y3LTlhOTItNWZhOTM0
ZGJkNmVkL2M2NmViNDQ1OGIyOTg4MzVmM2M0ZWVkMjQwMzhjNGJlMmZhZTAwYTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xODY1YTA3NC1hYzMxLTRjZjctOWE5Mi01ZmE5
MzRkYmQ2ZWQvNjcwMGQ3OGQyZTE4MjQzZWE3MzZjMTI4OGM1MGE5NDYxY2VkOGIz
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5dqTANBgkqhkiG9w0BAQsFAAOCAQEAM8dzdie2XWWx1z3q
t1QTksRFy/AYpB5d/F6W3Nq1PF8MWNMSiwNlFmNJoZANr5IdS587f5U5ubiRREKr
+5laCv2iRXClhIlcbk0vfuOl8t0QDRdMEkrLx00XNfZQc7AkR6oU9VKrn+BnK2DA
b6fa+Kl4HtQsN9U6A6ffFDtHEfy/2Tkc+8ZUQa1UAidAGcG9jVBstsum9k+YdLch
5NNMKwC5c+Qn7Wkf2wJAvqFCTKxqXzsJ/vszmNA5CUSx87rgfy6X4XJYd4pB3OHF
H4Emb97XE4usMKmZSh25hzmfVfKFYl5Rpx0/nrhx6rjXk9QDHlMG/22XuA666Xk/
t2Zb4Q==
-----END CERTIFICATE-----
Generated at Fri Mar 29 08:39:16 2024 by rpki-client on console-ams.rpki-client.org