Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18ed776f-af66-42d5-8ace-177dfbf5a0f7/f8ae80b1ab69960d235aab764ded08d7c56398c1.roa
File:                     f8ae80b1ab69960d235aab764ded08d7c56398c1.roa (raw, json)
Hash identifier:          7AWNJjCKGjJjDWUlBPEsI3uXDxPN3hkCesQpsP/5Hf4=
Subject key identifier:   73:0F:49:7C:47:D0:A0:42:33:6D:93:4C:E6:84:55:9B:12:81:F3:F5
Certificate issuer:       /CN=47280d4393d44429f0453fca4d3354cf3fa27cf3
Certificate serial:       041F
Authority key identifier: F1:4C:25:81:3D:49:6A:5F:50:E0:ED:BF:DB:A0:E4:68:64:E1:E1:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47280d4393d44429f0453fca4d3354cf3fa27cf3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18ed776f-af66-42d5-8ace-177dfbf5a0f7/f8ae80b1ab69960d235aab764ded08d7c56398c1.roa
Signing time:             Mon 16 Jan 2023 18:39:21 +0000
ROA not before:           Sun 15 Jan 2023 18:32:01 +0000
ROA not after:            Thu 16 Jan 2025 18:32:01 +0000
asID:                     269832
IP address blocks:        190.93.44.0/22 maxlen: 22
                          190.93.44.0/24 maxlen: 24
                          190.93.45.0/24 maxlen: 24
                          190.93.46.0/24 maxlen: 24
                          190.93.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18ed776f-af66-42d5-8ace-177dfbf5a0f7/47280d4393d44429f0453fca4d3354cf3fa27cf3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18ed776f-af66-42d5-8ace-177dfbf5a0f7/47280d4393d44429f0453fca4d3354cf3fa27cf3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47280d4393d44429f0453fca4d3354cf3fa27cf3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 01 Mar 2024 15:12:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1055 (0x41f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47280d4393d44429f0453fca4d3354cf3fa27cf3
        Validity
            Not Before: Jan 15 18:32:01 2023 GMT
            Not After : Jan 16 18:32:01 2025 GMT
        Subject: CN=f8ae80b1ab69960d235aab764ded08d7c56398c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:65:69:0b:9e:cd:28:85:58:89:b4:79:dc:6c:
                    c8:bc:0c:b3:bd:f4:57:e8:c0:ee:1a:c4:19:1e:a1:
                    38:4a:b3:8d:42:59:c4:8a:04:45:4a:56:ef:d8:85:
                    f2:da:5e:71:7c:b5:0d:af:3c:4c:84:ab:0e:5c:da:
                    a1:71:43:e6:4e:6e:a5:ea:29:02:b1:26:e3:7c:37:
                    e4:9b:96:24:fb:47:08:40:f7:49:72:43:fd:35:8c:
                    0f:71:da:b4:fb:40:64:2c:30:a7:df:a1:a9:6e:8a:
                    c0:8f:63:e1:59:f7:67:f4:1a:3f:cb:32:b9:98:47:
                    75:c6:6a:5f:bf:a1:78:b2:a2:21:0f:00:be:3f:93:
                    5a:ff:ef:25:1b:87:89:38:19:da:2b:cb:10:5e:77:
                    a3:ef:ec:c7:20:9e:7d:38:0f:1b:50:f0:2a:91:fe:
                    ea:16:7c:de:fe:9e:57:f3:1b:be:2e:32:ba:07:15:
                    9b:1c:a4:7d:ea:79:f3:00:a8:55:53:ac:47:fc:55:
                    66:34:d9:f1:a7:9c:1f:02:8e:b8:b0:cd:2c:0a:77:
                    c5:cb:4e:82:0f:43:27:19:8e:2b:cd:6f:f4:74:ef:
                    3e:38:9f:86:d4:07:99:ee:c6:f4:cf:ec:35:cd:52:
                    7f:f0:45:5d:3e:d8:9d:bd:9b:bc:46:bd:f5:fe:3b:
                    2e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0F:49:7C:47:D0:A0:42:33:6D:93:4C:E6:84:55:9B:12:81:F3:F5
            X509v3 Authority Key Identifier:
                keyid:F1:4C:25:81:3D:49:6A:5F:50:E0:ED:BF:DB:A0:E4:68:64:E1:E1:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47280d4393d44429f0453fca4d3354cf3fa27cf3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18ed776f-af66-42d5-8ace-177dfbf5a0f7/f8ae80b1ab69960d235aab764ded08d7c56398c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18ed776f-af66-42d5-8ace-177dfbf5a0f7/47280d4393d44429f0453fca4d3354cf3fa27cf3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:cd:53:47:c2:c6:47:9d:bf:8f:18:18:cf:a2:03:27:20:df:
         45:dd:c4:f2:cd:78:0b:5a:dc:88:64:6b:43:af:de:89:8a:f0:
         73:b0:56:09:dc:ea:17:5d:a1:21:ff:e4:88:56:f2:28:03:c7:
         2c:4b:8a:b4:99:79:44:4b:a8:97:9a:3a:b2:a7:65:db:82:bd:
         a8:98:09:3a:d6:46:75:55:1a:46:7e:6c:82:59:1d:92:e8:29:
         b0:50:3d:69:db:30:f9:d5:78:42:bf:fd:f1:55:8d:0b:a8:07:
         cd:cd:cc:fe:af:79:04:cf:69:14:5b:60:97:be:68:32:af:bc:
         a9:cb:aa:02:41:37:8b:5d:3a:eb:02:67:cc:02:34:18:74:7e:
         f9:fc:5c:2f:c8:0f:84:a8:9e:ce:81:49:4c:d6:e5:7b:50:ce:
         6b:7b:e2:7e:89:68:f2:2d:4d:d4:4f:36:66:d5:2b:2a:75:c4:
         67:1e:7a:36:97:b0:0c:4d:ee:b6:b1:c2:6e:95:83:2e:e0:85:
         b5:04:70:7b:c6:db:73:6a:70:de:3f:44:13:a9:2d:55:5f:85:
         f1:b5:71:0b:82:ca:65:10:36:7e:72:55:11:66:8d:37:b4:ea:
         02:50:46:a2:53:be:3c:21:24:6a:fc:7e:ee:85:16:31:78:d5:
         2b:c6:2c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 16:10:11 2024 by rpki-client on console-fra.rpki-client.org