Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/57b16c889072e068a2b255df25f311f0e6c819c1.roa
File:                     57b16c889072e068a2b255df25f311f0e6c819c1.roa (raw, json)
Hash identifier:          pa/aUgko3A1aI5XOPkQstE66HrvbVGjDaeaiZCPi5N8=
Subject key identifier:   9B:7C:EF:EF:49:25:FA:94:2D:B9:A4:12:FE:7C:27:69:3E:3A:99:EE
Certificate issuer:       /CN=4714a8fc89277634ae57cdaf4d814514cd61f656
Certificate serial:       163D32
Authority key identifier: 25:F3:6F:92:FF:31:91:9D:EA:9D:E8:18:EE:46:83:9A:1E:6E:17:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4714a8fc89277634ae57cdaf4d814514cd61f656.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/57b16c889072e068a2b255df25f311f0e6c819c1.roa
Signing time:             Sat 04 Jun 2022 13:57:15 +0000
ROA not before:           Tue 24 May 2022 03:00:00 +0000
ROA not after:            Mon 24 May 2027 03:00:00 +0000
asID:                     26619
IP address blocks:        179.50.88.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/4714a8fc89277634ae57cdaf4d814514cd61f656.crl
                          rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/4714a8fc89277634ae57cdaf4d814514cd61f656.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4714a8fc89277634ae57cdaf4d814514cd61f656.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1457458 (0x163d32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4714a8fc89277634ae57cdaf4d814514cd61f656
        Validity
            Not Before: May 24 03:00:00 2022 GMT
            Not After : May 24 03:00:00 2027 GMT
        Subject: CN=57b16c889072e068a2b255df25f311f0e6c819c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2c:da:3c:8a:8b:ff:b4:86:ea:39:7e:67:28:
                    8a:49:81:a1:f1:69:6d:41:42:ad:f7:72:76:bd:0b:
                    0e:1c:ac:2f:07:b8:c2:d7:63:30:ab:06:5a:49:1d:
                    6e:1a:a7:e8:f4:5c:af:d6:56:78:1e:47:0e:06:cf:
                    6b:79:98:ef:4d:fe:3e:96:1a:bd:42:73:74:b7:4e:
                    a2:2c:a6:6f:99:dd:3e:5c:fa:71:86:4a:0f:a6:a1:
                    d1:31:89:09:c4:1c:df:9d:f7:d5:0b:b4:42:df:e6:
                    7d:b9:92:7d:a3:24:3c:a3:bc:df:ea:77:8f:cd:27:
                    ae:74:c0:a0:8a:5a:58:52:1d:eb:6b:b5:0a:a3:5f:
                    55:f3:7e:a8:62:d8:3c:54:a0:98:c2:d0:9e:26:59:
                    86:f9:43:13:a6:0a:52:17:8f:a8:57:25:3e:97:8b:
                    90:e6:88:b9:d8:02:27:5d:71:f5:b4:cb:43:df:c2:
                    bd:49:cc:40:1c:b9:9d:4d:ff:fa:18:e7:cb:95:a0:
                    ea:de:cf:c0:a6:30:97:13:28:6a:11:07:d9:fd:a5:
                    d6:f2:cc:10:75:0e:51:8c:19:0a:a9:d7:8e:64:29:
                    49:0b:35:04:66:9b:ae:1a:48:78:d3:58:6c:b9:eb:
                    7d:ab:0b:99:66:81:bd:ee:e2:6a:6f:7c:57:6f:74:
                    9e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7C:EF:EF:49:25:FA:94:2D:B9:A4:12:FE:7C:27:69:3E:3A:99:EE
            X509v3 Authority Key Identifier:
                keyid:25:F3:6F:92:FF:31:91:9D:EA:9D:E8:18:EE:46:83:9A:1E:6E:17:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4714a8fc89277634ae57cdaf4d814514cd61f656.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/57b16c889072e068a2b255df25f311f0e6c819c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/4714a8fc89277634ae57cdaf4d814514cd61f656.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0e:03:bc:da:cd:d6:dd:84:d4:3a:da:7a:90:18:60:fa:0c:af:
         f6:32:4f:49:8c:5a:90:f3:92:fd:68:10:35:e2:2d:3f:ec:4b:
         bc:ac:d3:4d:8d:b0:12:b1:3d:e8:da:b5:0e:3e:9b:bb:76:86:
         f2:f5:48:da:b0:b9:da:d1:b6:d1:c3:d4:45:a4:11:55:52:c0:
         ab:81:56:10:0e:30:0b:6a:7a:30:af:cb:90:c6:a9:dd:ec:29:
         90:71:fb:3b:65:c3:2d:3b:91:c4:75:68:4d:d1:64:94:5d:04:
         47:17:ea:18:1d:c5:be:51:80:f5:78:ee:8b:bf:1a:dd:2c:8c:
         1c:40:78:00:2f:e8:c5:e6:18:41:f6:36:82:42:87:14:38:61:
         b6:23:6c:47:39:cb:a6:9d:7d:85:59:ec:5a:8b:34:22:ea:89:
         a1:50:0e:17:f7:c2:6e:44:04:e6:92:e4:ba:02:19:9a:ce:48:
         f5:80:af:f8:d6:0b:ba:f6:e7:6f:1d:e4:d1:54:83:f3:eb:54:
         28:fd:00:7f:38:1a:60:4b:7e:dc:d3:82:84:42:64:15:48:3d:
         ce:42:a7:84:09:af:57:f1:54:90:78:ef:66:da:7d:93:73:c1:
         a2:75:3f:1b:8d:a8:3a:af:2f:1b:c8:91:4a:6b:1c:bf:f3:ef:
         82:d4:37:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 13:01:06 2024 by rpki-client on console-fra.rpki-client.org