Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a4082bf-5f59-43f3-ae50-e18e580706cb/8a364b2f8bf94c72d49813deee732a3b8ef92df0.roa
File:                     8a364b2f8bf94c72d49813deee732a3b8ef92df0.roa (raw, json)
Hash identifier:          t/Ko4+D79i4gTtT+Sl2thjtZHhgJbqT8g4LyZ0oB8A4=
Subject key identifier:   61:57:53:C8:D0:66:1E:54:1D:83:92:6D:C2:58:2E:CE:10:EA:52:DB
Certificate issuer:       /CN=4ccd2caf1c1fdbfb4e89474c29259368c3a9736a
Certificate serial:       09A8
Authority key identifier: 5C:AC:AD:23:63:10:C3:A1:6F:81:F7:BB:51:F3:99:AA:62:6A:C1:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ccd2caf1c1fdbfb4e89474c29259368c3a9736a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a4082bf-5f59-43f3-ae50-e18e580706cb/8a364b2f8bf94c72d49813deee732a3b8ef92df0.roa
Signing time:             Fri 10 Jun 2022 16:03:24 +0000
ROA not before:           Fri 10 Jun 2022 03:00:00 +0000
ROA not after:            Mon 10 Jun 2024 03:00:00 +0000
asID:                     11514
IP address blocks:        190.111.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1a4082bf-5f59-43f3-ae50-e18e580706cb/4ccd2caf1c1fdbfb4e89474c29259368c3a9736a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1a4082bf-5f59-43f3-ae50-e18e580706cb/4ccd2caf1c1fdbfb4e89474c29259368c3a9736a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ccd2caf1c1fdbfb4e89474c29259368c3a9736a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2472 (0x9a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ccd2caf1c1fdbfb4e89474c29259368c3a9736a
        Validity
            Not Before: Jun 10 03:00:00 2022 GMT
            Not After : Jun 10 03:00:00 2024 GMT
        Subject: CN=8a364b2f8bf94c72d49813deee732a3b8ef92df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:49:01:f1:7f:0c:61:c5:13:bc:64:58:20:f2:
                    c2:a1:c7:07:68:05:27:34:b9:3e:99:83:a5:52:88:
                    93:85:b0:35:64:f0:04:cc:db:f3:4c:27:af:69:c9:
                    e4:1a:ac:a7:f7:91:58:7f:36:a5:20:1f:2d:3f:0a:
                    42:a4:52:96:c0:8f:90:47:c9:75:c3:88:ce:29:91:
                    ea:a7:c5:22:b5:e4:8b:df:82:3b:39:5a:99:6e:2a:
                    9d:45:a4:5d:aa:a8:2e:8b:17:23:5a:ce:5e:4d:47:
                    62:23:d0:b2:e7:89:4b:3e:d6:91:73:90:57:27:9f:
                    d6:81:4b:82:3d:ac:af:d7:12:08:86:b7:0d:f0:b9:
                    7d:b8:78:0a:3e:a3:e2:68:e0:df:a2:8a:c3:a5:5f:
                    47:f4:b1:65:92:8e:34:0e:d8:c3:3b:8d:ea:a2:79:
                    55:22:b1:9d:74:65:a1:e5:c8:01:58:1b:4a:3f:d0:
                    c2:e0:0c:b5:3d:be:84:49:74:45:0d:0d:79:af:a7:
                    bc:b1:63:f5:7f:7f:48:c6:5c:8a:4b:9d:6d:fc:77:
                    1e:eb:5c:30:75:df:be:08:00:fd:7d:45:f5:64:65:
                    e7:47:9d:54:eb:67:e2:60:40:45:47:29:6e:9a:d1:
                    c8:de:ab:d1:b0:23:79:db:84:87:9a:60:c6:b7:63:
                    93:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:57:53:C8:D0:66:1E:54:1D:83:92:6D:C2:58:2E:CE:10:EA:52:DB
            X509v3 Authority Key Identifier:
                keyid:5C:AC:AD:23:63:10:C3:A1:6F:81:F7:BB:51:F3:99:AA:62:6A:C1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ccd2caf1c1fdbfb4e89474c29259368c3a9736a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a4082bf-5f59-43f3-ae50-e18e580706cb/8a364b2f8bf94c72d49813deee732a3b8ef92df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a4082bf-5f59-43f3-ae50-e18e580706cb/4ccd2caf1c1fdbfb4e89474c29259368c3a9736a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a2:8a:ad:ff:98:43:9a:ca:f2:eb:4e:0a:a3:22:fd:6b:ad:3c:
         32:bf:9f:a3:3a:18:b2:8f:72:64:df:90:f1:4b:af:74:8b:df:
         e0:0d:1d:df:08:95:1a:1a:a5:e2:10:c0:a2:37:79:54:df:bf:
         7d:42:b7:05:ee:80:dc:25:e6:8d:30:e7:65:4d:3a:2c:d7:4f:
         19:6d:d5:52:12:37:35:1c:b9:49:c0:55:dc:c8:48:92:fb:f0:
         d7:1d:d9:46:71:b1:46:ea:9d:59:4e:e8:55:90:f7:9a:99:11:
         df:58:46:10:2d:b1:bc:8d:63:fe:07:03:a8:5d:df:38:29:07:
         05:4b:7e:13:77:82:00:ac:e5:34:ff:85:e6:bc:b2:a6:cd:0a:
         8b:f5:5b:fc:d7:97:f3:d2:0d:ca:6c:0d:1d:69:fb:33:4a:20:
         14:10:4b:08:2c:af:18:ad:2c:54:43:37:0b:96:49:b7:49:81:
         37:3c:19:62:65:61:ea:3e:c2:23:14:88:69:ff:7a:c8:8d:34:
         ff:d3:17:e0:5b:b6:ee:a7:12:e7:3a:d2:4f:0f:65:ae:39:10:
         49:9f:be:b8:f1:46:03:02:c1:bc:86:9b:10:6e:b4:2c:d9:a5:
         0d:50:e9:45:b2:f3:13:46:25:50:e7:c9:b6:81:7d:9a:cb:cb:
         9d:f5:98:6e
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICCagwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNGNj
ZDJjYWYxYzFmZGJmYjRlODk0NzRjMjkyNTkzNjhjM2E5NzM2YTAeFw0yMjA2MTAw
MzAwMDBaFw0yNDA2MTAwMzAwMDBaMDMxMTAvBgNVBAMTKDhhMzY0YjJmOGJmOTRj
NzJkNDk4MTNkZWVlNzMyYTNiOGVmOTJkZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCbSQHxfwxhxRO8ZFgg8sKhxwdoBSc0uT6Zg6VSiJOFsDVk8ATM
2/NMJ69pyeQarKf3kVh/NqUgHy0/CkKkUpbAj5BHyXXDiM4pkeqnxSK15Ivfgjs5
WpluKp1FpF2qqC6LFyNazl5NR2Ij0LLniUs+1pFzkFcnn9aBS4I9rK/XEgiGtw3w
uX24eAo+o+Jo4N+iisOlX0f0sWWSjjQO2MM7jeqieVUisZ10ZaHlyAFYG0o/0MLg
DLU9voRJdEUNDXmvp7yxY/V/f0jGXIpLnW38dx7rXDB1374IAP19RfVkZedHnVTr
Z+JgQEVHKW6a0cjeq9GwI3nbhIeaYMa3Y5NLAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUYVdTyNBmHlQdg5JtwlguzhDqUtswHwYDVR0jBBgwFoAUXKytI2MQw6Fvgfe7
UfOZqmJqwXQwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS80Y2NkMmNh
ZjFjMWZkYmZiNGU4OTQ3NGMyOTI1OTM2OGMzYTk3MzZhLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8xYTQwODJiZi01ZjU5LTQzZjMtYWU1MC1lMThlNTgw
NzA2Y2IvOGEzNjRiMmY4YmY5NGM3MmQ0OTgxM2RlZWU3MzJhM2I4ZWY5MmRmMC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzFhNDA4MmJmLTVmNTktNDNmMy1hZTUwLWUxOGU1
ODA3MDZjYi80Y2NkMmNhZjFjMWZkYmZiNGU4OTQ3NGMyOTI1OTM2OGMzYTk3MzZh
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQDvm9wMA0GCSqGSIb3DQEBCwUAA4IBAQCiiq3/mEOayvLrTgqj
Iv1rrTwyv5+jOhiyj3Jk35DxS690i9/gDR3fCJUaGqXiEMCiN3lU3799QrcF7oDc
JeaNMOdlTTos108ZbdVSEjc1HLlJwFXcyEiS+/DXHdlGcbFG6p1ZTuhVkPeamRHf
WEYQLbG8jWP+BwOoXd84KQcFS34Td4IArOU0/4XmvLKmzQqL9Vv815fz0g3KbA0d
afszSiAUEEsILK8YrSxUQzcLlkm3SYE3PBliZWHqPsIjFIhp/3rIjTT/0xfgW7bu
pxLnOtJPD2WuORBJn7648UYDAsG8hpsQbrQs2aUNUOlFsvMTRiVQ58m2gX2ay8ud
9Zhu
-----END CERTIFICATE-----
Generated at Thu Mar 28 21:28:40 2024 by rpki-client on console-ams.rpki-client.org