Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f1f1cc1-247d-4f2b-a1e9-d6910bc6b651/eb488466c34f56bc5816e08f53e9d347bf40011a.roa
File:                     eb488466c34f56bc5816e08f53e9d347bf40011a.roa (raw, json)
Hash identifier:          cF44uZ3rGRDUx0ZW5VKjxz6VKTDQGZ5p48tvk19keW4=
Subject key identifier:   8E:99:DE:A3:12:26:EF:97:1C:9B:75:58:DC:87:80:2C:F8:F3:F4:14
Certificate issuer:       /CN=8b212b3e5e4578c90e2826cd05317ea5fc56e905
Certificate serial:       0B7BD7
Authority key identifier: 4F:E8:6D:76:9C:07:98:95:E0:0C:CF:90:9A:79:7B:CA:0B:83:03:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b212b3e5e4578c90e2826cd05317ea5fc56e905.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1f1f1cc1-247d-4f2b-a1e9-d6910bc6b651/eb488466c34f56bc5816e08f53e9d347bf40011a.roa
Signing time:             Thu 25 Mar 2021 16:21:18 +0000
ROA not before:           Thu 25 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     52468
IP address blocks:        45.185.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1f1f1cc1-247d-4f2b-a1e9-d6910bc6b651/8b212b3e5e4578c90e2826cd05317ea5fc56e905.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1f1f1cc1-247d-4f2b-a1e9-d6910bc6b651/8b212b3e5e4578c90e2826cd05317ea5fc56e905.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b212b3e5e4578c90e2826cd05317ea5fc56e905.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 752599 (0xb7bd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b212b3e5e4578c90e2826cd05317ea5fc56e905
        Validity
            Not Before: Mar 25 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=eb488466c34f56bc5816e08f53e9d347bf40011a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:60:8a:4c:e4:b3:6f:66:3e:61:2f:55:cf:20:
                    07:77:78:85:0f:25:c4:8e:80:9b:db:8b:bd:5e:b7:
                    a1:fa:69:e5:4a:cd:7e:2a:ac:4f:27:d2:57:70:94:
                    f9:be:aa:38:10:70:eb:f7:2d:22:99:a2:13:9a:77:
                    1c:96:bd:3d:ea:2f:74:1f:29:37:76:c6:79:01:f4:
                    e1:95:96:d9:ef:6b:40:b7:aa:92:68:ce:65:58:9c:
                    0c:59:82:a6:88:5d:80:43:21:ca:68:49:35:79:f1:
                    88:15:cf:d3:9e:fa:03:f3:65:eb:53:db:5e:7c:b3:
                    59:c5:c9:9a:33:4b:67:3c:e3:7b:a8:f5:27:82:ec:
                    aa:61:70:99:06:6d:ef:ec:1e:f0:35:57:83:07:6a:
                    87:b2:b2:07:1d:b9:1d:fa:02:3f:6b:1b:b2:c3:92:
                    13:11:c6:02:1e:95:28:99:74:fe:65:f4:60:f7:70:
                    05:bb:d8:5b:c2:b7:f6:79:22:73:d0:f9:6d:7e:74:
                    54:92:e7:ef:90:f0:bd:8a:21:fb:95:03:d2:5f:c5:
                    e1:e7:a8:4e:6f:26:b4:0d:11:fb:63:c5:a2:1d:31:
                    26:b3:18:a8:44:3f:a6:24:cd:65:d2:d2:5e:1a:8c:
                    d7:45:54:4b:61:c6:73:8c:99:e9:81:41:81:05:cc:
                    32:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:99:DE:A3:12:26:EF:97:1C:9B:75:58:DC:87:80:2C:F8:F3:F4:14
            X509v3 Authority Key Identifier:
                keyid:4F:E8:6D:76:9C:07:98:95:E0:0C:CF:90:9A:79:7B:CA:0B:83:03:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b212b3e5e4578c90e2826cd05317ea5fc56e905.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f1f1cc1-247d-4f2b-a1e9-d6910bc6b651/eb488466c34f56bc5816e08f53e9d347bf40011a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1f1f1cc1-247d-4f2b-a1e9-d6910bc6b651/8b212b3e5e4578c90e2826cd05317ea5fc56e905.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:52:12:b0:38:71:b4:67:50:70:bf:ac:5f:d5:d6:29:53:6c:
         38:6c:39:30:68:9a:3f:3b:09:55:d1:f0:7c:55:7e:07:0e:19:
         15:78:d8:e8:e3:73:e3:8c:76:a5:9a:63:d0:3c:00:af:c3:c8:
         c1:6e:c9:6a:67:88:cf:75:55:9d:85:3c:06:62:04:28:e7:76:
         92:42:c0:5b:ce:ab:c9:07:b6:3f:7f:0f:e9:a4:aa:a9:0e:18:
         82:c6:95:ff:55:e0:f3:52:77:3e:77:85:9a:a0:ba:9b:81:63:
         de:27:a0:1e:29:6d:f4:3e:22:89:dc:e7:ca:af:ae:e5:71:0d:
         2b:1d:ab:71:9a:20:b4:fb:38:c5:89:c1:8c:9e:65:b0:d2:e6:
         98:2b:31:02:12:c9:1a:b9:d2:69:b3:c0:28:c3:3e:e7:a5:0e:
         6b:83:7d:6e:dc:21:71:25:2f:bf:ff:47:c0:46:c2:b8:fd:b1:
         e2:aa:01:27:d1:69:a8:a6:f5:0a:50:5b:eb:71:63:ce:71:1a:
         2e:1d:22:36:fc:86:a7:7b:b9:6e:c4:8a:ba:c0:87:1c:cd:67:
         d8:b2:68:c3:32:d1:e6:7c:70:e5:3b:d5:f0:80:52:61:34:e4:
         1d:6f:8d:bf:9c:55:42:a7:a1:3f:e7:59:5a:75:bb:c9:8a:94:
         8e:da:9c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 03:23:51 2024 by rpki-client on console-ams.rpki-client.org