Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/92130d5f9d1ed8499975bc31384543ce262363d0.roa
File:                     92130d5f9d1ed8499975bc31384543ce262363d0.roa (raw, json)
Hash identifier:          8jQPH5BStyuEfhQ45ZAwMA7pUEk/q50YJdlRvw3Tyuw=
Subject key identifier:   2B:F4:F4:ED:3B:0A:94:97:6B:D4:C1:BD:BA:45:BD:D2:19:4C:B5:9E
Certificate issuer:       /CN=9335683e4b18488db2c2495f3084999892751bfe
Certificate serial:       1BFAFC
Authority key identifier: F6:70:84:93:7A:11:D9:A6:92:CE:36:2D:A7:8A:AE:3A:9A:4F:12:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9335683e4b18488db2c2495f3084999892751bfe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/92130d5f9d1ed8499975bc31384543ce262363d0.roa
Signing time:             Tue 24 Jan 2023 17:57:02 +0000
ROA not before:           Mon 23 Jan 2023 17:32:18 +0000
ROA not after:            Fri 24 Jan 2025 17:32:18 +0000
asID:                     264738
IP address blocks:        167.249.54.0/23 maxlen: 23
                          167.249.54.0/24 maxlen: 24
                          167.249.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/9335683e4b18488db2c2495f3084999892751bfe.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/9335683e4b18488db2c2495f3084999892751bfe.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9335683e4b18488db2c2495f3084999892751bfe.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1833724 (0x1bfafc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9335683e4b18488db2c2495f3084999892751bfe
        Validity
            Not Before: Jan 23 17:32:18 2023 GMT
            Not After : Jan 24 17:32:18 2025 GMT
        Subject: CN=92130d5f9d1ed8499975bc31384543ce262363d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:db:20:3e:0d:1c:d3:ec:f8:ab:62:5b:75:df:
                    b7:22:35:f6:a1:bd:e2:dc:3c:d3:0d:21:9d:e7:90:
                    e9:69:e9:3e:5f:41:55:a0:82:36:40:bd:39:b2:08:
                    21:4f:73:15:59:9c:27:ba:29:62:f3:15:8e:f1:7a:
                    26:fb:e9:69:b1:eb:37:81:2f:0c:d1:aa:3d:4c:2f:
                    05:cd:c7:b1:61:7e:93:e6:c4:74:9d:8f:b6:24:b5:
                    83:60:93:27:a2:45:e7:0e:6b:86:11:5d:72:d8:af:
                    19:40:47:52:df:ca:83:da:24:e5:1b:da:51:7d:1d:
                    fc:08:65:c6:21:48:70:3a:00:f1:f6:55:72:fa:9c:
                    42:fd:fb:c5:50:9a:81:be:ae:20:69:cc:54:b7:3a:
                    cd:bb:29:47:73:70:f2:3d:57:c8:c7:53:c6:3b:95:
                    d1:42:20:79:6e:cc:29:29:d0:24:69:07:c5:4a:f1:
                    ca:1d:5c:17:b6:87:ac:3f:13:97:a4:c0:7b:00:33:
                    6d:63:f0:6a:a7:8c:c3:3f:8b:a7:82:78:28:f7:d0:
                    94:45:bf:cd:86:e7:d6:0f:da:ee:eb:b6:ac:ee:d5:
                    12:6c:46:0f:2e:2c:a4:71:88:f3:73:1e:20:26:04:
                    f1:d9:55:73:60:40:79:10:d4:56:d0:78:c2:5b:1e:
                    cf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F4:F4:ED:3B:0A:94:97:6B:D4:C1:BD:BA:45:BD:D2:19:4C:B5:9E
            X509v3 Authority Key Identifier:
                keyid:F6:70:84:93:7A:11:D9:A6:92:CE:36:2D:A7:8A:AE:3A:9A:4F:12:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9335683e4b18488db2c2495f3084999892751bfe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/92130d5f9d1ed8499975bc31384543ce262363d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/9335683e4b18488db2c2495f3084999892751bfe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:82:ba:a5:c7:a5:4e:36:1e:8b:b0:05:fd:be:47:54:89:44:
         77:57:73:f1:6a:c9:f3:34:32:fe:17:4f:5c:35:d0:e5:9a:27:
         60:74:92:41:62:ef:3b:ea:10:ed:ec:20:89:e1:71:3a:21:44:
         0f:df:9d:ae:45:d7:f2:9c:6f:4d:6b:8a:e7:d8:aa:94:cb:18:
         58:ba:80:88:05:cc:79:13:d3:90:5d:23:95:bc:82:c1:b1:0d:
         b7:26:28:0a:ba:c6:1b:05:59:06:5f:e8:74:77:d2:e7:ab:7e:
         1f:5d:94:de:f6:04:2e:51:06:66:cd:ae:49:d4:3f:42:75:54:
         91:7d:dd:8e:1f:54:b7:ff:ac:b2:ce:28:47:cb:0e:2c:d7:ff:
         10:ef:9a:94:55:51:de:92:e9:ee:45:c0:3c:3d:22:ac:e6:6c:
         0b:ec:ca:c8:63:5d:4e:fd:df:c6:1b:06:29:ed:a2:b7:be:69:
         6f:35:4f:65:cd:20:e3:50:25:a1:aa:91:7c:0c:80:21:04:36:
         9d:49:c0:ed:56:aa:03:3a:a4:8a:15:a9:a2:ae:39:4a:aa:e5:
         a1:b2:6e:af:bc:1d:80:41:ae:32:05:31:df:7b:57:3e:05:0b:
         b6:7b:97:d9:f8:05:85:d0:95:13:25:66:8d:79:8f:35:01:35:
         e1:29:c8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 08:55:25 2024 by rpki-client on console-fra.rpki-client.org