Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21fbe07b-352d-4dad-a763-e458524c159b/163c126f4a5e850ef009e34220a45de257be625e.roa
File:                     163c126f4a5e850ef009e34220a45de257be625e.roa (raw, json)
Hash identifier:          XrGTE7EuDoPs81j2ZFsqr/FR9uXTtHECIbeYqBR63Q0=
Subject key identifier:   8F:0D:3F:B6:07:15:F2:B2:75:A0:3F:65:18:73:55:26:DC:AE:EC:3B
Certificate issuer:       /CN=8e9cf41123ed6894a352817e4249195f52cfe85e
Certificate serial:       0F4234
Authority key identifier: B1:EB:E3:06:23:F7:F0:5D:51:4C:29:EA:72:46:CC:D0:F8:30:E7:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e9cf41123ed6894a352817e4249195f52cfe85e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21fbe07b-352d-4dad-a763-e458524c159b/163c126f4a5e850ef009e34220a45de257be625e.roa
Signing time:             Thu 01 Jun 2023 14:44:59 +0000
ROA not before:           Wed 31 May 2023 14:44:59 +0000
ROA not after:            Sun 01 Jun 2025 14:44:59 +0000
asID:                     266769
IP address blocks:        45.234.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/21fbe07b-352d-4dad-a763-e458524c159b/8e9cf41123ed6894a352817e4249195f52cfe85e.crl
                          rsync://repository.lacnic.net/rpki/lacnic/21fbe07b-352d-4dad-a763-e458524c159b/8e9cf41123ed6894a352817e4249195f52cfe85e.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e9cf41123ed6894a352817e4249195f52cfe85e.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Feb 2024 21:42:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 999988 (0xf4234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e9cf41123ed6894a352817e4249195f52cfe85e
        Validity
            Not Before: May 31 14:44:59 2023 GMT
            Not After : Jun  1 14:44:59 2025 GMT
        Subject: CN=163c126f4a5e850ef009e34220a45de257be625e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:88:ea:b3:56:dc:9f:96:9b:c2:7c:e2:d6:d1:
                    03:69:ac:cb:bf:4f:35:69:f3:46:09:39:90:2e:19:
                    03:31:2a:36:cf:19:a0:dd:cf:48:6e:c4:fb:c7:6a:
                    05:62:37:c6:56:6f:68:0b:32:6d:6d:56:ff:9a:fd:
                    81:b4:7f:42:de:f8:f1:e5:88:f0:ac:83:22:94:18:
                    96:fa:09:b9:a0:97:8b:56:68:38:08:b5:74:2b:41:
                    76:23:37:5a:92:c2:2e:94:b4:b6:d1:1f:c0:da:c7:
                    f0:d4:ec:3a:c0:6e:c3:c7:38:13:69:b3:58:ba:0c:
                    08:57:f4:35:86:d9:7c:40:6a:c3:7a:e2:8e:a3:65:
                    8a:50:c8:1a:ac:65:da:6f:ee:ed:8a:cc:fa:9d:8c:
                    f6:06:3f:70:b6:17:30:34:80:8c:e8:1a:79:78:22:
                    85:c5:5d:eb:27:42:50:b6:5e:ac:6d:33:62:4b:d5:
                    e7:aa:26:8e:9a:e7:ce:e7:5f:d8:3c:b1:ae:ce:79:
                    be:35:57:54:28:0c:62:79:3a:8e:35:8a:78:27:cf:
                    40:b7:02:2e:c0:cb:7f:da:bc:7c:14:15:34:ca:ed:
                    ad:4c:f9:c3:95:95:49:7b:75:87:61:ec:3e:ee:8a:
                    64:ec:2c:ad:8c:94:e0:e9:72:4d:dc:42:f4:00:81:
                    ad:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0D:3F:B6:07:15:F2:B2:75:A0:3F:65:18:73:55:26:DC:AE:EC:3B
            X509v3 Authority Key Identifier:
                keyid:B1:EB:E3:06:23:F7:F0:5D:51:4C:29:EA:72:46:CC:D0:F8:30:E7:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e9cf41123ed6894a352817e4249195f52cfe85e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21fbe07b-352d-4dad-a763-e458524c159b/163c126f4a5e850ef009e34220a45de257be625e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21fbe07b-352d-4dad-a763-e458524c159b/8e9cf41123ed6894a352817e4249195f52cfe85e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:55:7b:5e:0a:d3:56:6f:41:1a:47:eb:08:51:e7:ce:19:2c:
         3a:d1:3d:20:c9:ca:33:5c:e4:b0:fb:72:90:36:68:75:35:fd:
         64:de:20:51:3b:99:21:a2:9e:d3:57:d6:3c:d2:dd:23:ce:4f:
         54:1a:00:a2:48:b9:7a:0c:bd:72:5b:dc:d8:9e:97:01:66:36:
         a9:37:3a:98:40:b2:5f:ba:58:a1:f5:f2:24:34:17:42:8b:a8:
         9c:89:81:98:02:01:db:11:56:17:63:40:c7:8f:33:97:d7:93:
         eb:07:04:59:56:34:16:e5:cf:df:b2:32:93:2e:40:e6:50:2b:
         20:80:d6:06:3a:03:d1:5c:f5:be:96:a7:3f:03:d1:28:42:31:
         d1:c1:9c:7f:80:96:c3:eb:7c:00:ba:2e:01:7e:49:be:59:2c:
         29:39:87:5a:b4:d9:01:5c:e8:f2:c7:5a:b9:f7:df:79:c4:24:
         87:94:16:76:2c:54:e5:00:ef:94:09:09:42:f8:e5:6b:93:dd:
         38:c5:b7:31:64:14:c4:fd:2b:21:ff:0d:fd:9b:e5:df:e6:8e:
         97:a3:cd:d9:2f:b4:01:a1:ba:4c:31:5b:1f:ed:35:ee:b7:93:
         fa:64:4b:f5:f5:8a:4d:54:80:34:56:16:3c:e4:e0:c8:0b:21:
         8a:bc:82:85
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDD0I0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhl
OWNmNDExMjNlZDY4OTRhMzUyODE3ZTQyNDkxOTVmNTJjZmU4NWUwHhcNMjMwNTMx
MTQ0NDU5WhcNMjUwNjAxMTQ0NDU5WjAzMTEwLwYDVQQDEygxNjNjMTI2ZjRhNWU4
NTBlZjAwOWUzNDIyMGE0NWRlMjU3YmU2MjVlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApIjqs1bcn5abwnzi1tEDaazLv081afNGCTmQLhkDMSo2zxmg
3c9IbsT7x2oFYjfGVm9oCzJtbVb/mv2BtH9C3vjx5YjwrIMilBiW+gm5oJeLVmg4
CLV0K0F2IzdaksIulLS20R/A2sfw1Ow6wG7DxzgTabNYugwIV/Q1htl8QGrDeuKO
o2WKUMgarGXab+7tisz6nYz2Bj9wthcwNICM6Bp5eCKFxV3rJ0JQtl6sbTNiS9Xn
qiaOmufO51/YPLGuznm+NVdUKAxieTqONYp4J89AtwIuwMt/2rx8FBU0yu2tTPnD
lZVJe3WHYew+7opk7CytjJTg6XJN3EL0AIGtRwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFI8NP7YHFfKydaA/ZRhzVSbcruw7MB8GA1UdIwQYMBaAFLHr4wYj9/BdUUwp
6nJGzND4MOe6MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGU5Y2Y0
MTEyM2VkNjg5NGEzNTI4MTdlNDI0OTE5NWY1MmNmZTg1ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjFmYmUwN2ItMzUyZC00ZGFkLWE3NjMtZTQ1ODUy
NGMxNTliLzE2M2MxMjZmNGE1ZTg1MGVmMDA5ZTM0MjIwYTQ1ZGUyNTdiZTYyNWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yMWZiZTA3Yi0zNTJkLTRkYWQtYTc2My1lNDU4
NTI0YzE1OWIvOGU5Y2Y0MTEyM2VkNjg5NGEzNTI4MTdlNDI0OTE5NWY1MmNmZTg1
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3qIDANBgkqhkiG9w0BAQsFAAOCAQEAFVV7XgrTVm9BGkfr
CFHnzhksOtE9IMnKM1zksPtykDZodTX9ZN4gUTuZIaKe01fWPNLdI85PVBoAoki5
egy9clvc2J6XAWY2qTc6mECyX7pYofXyJDQXQouonImBmAIB2xFWF2NAx48zl9eT
6wcEWVY0FuXP37Iyky5A5lArIIDWBjoD0Vz1vpanPwPRKEIx0cGcf4CWw+t8ALou
AX5JvlksKTmHWrTZAVzo8sdaufffecQkh5QWdixU5QDvlAkJQvjla5PdOMW3MWQU
xP0rIf8N/Zvl3+aOl6PN2S+0AaG6TDFbH+017reT+mRL9fWKTVSANFYWPOTgyAsh
iryChQ==
-----END CERTIFICATE-----
Generated at Sat Feb 24 22:29:13 2024 by rpki-client on console-fra.rpki-client.org