Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/b624d8b2ecee7dc61b3a96d12d2e656758e97b0a.roa
File:                     b624d8b2ecee7dc61b3a96d12d2e656758e97b0a.roa (raw, json)
Hash identifier:          7zsm5u9SuvT9eixRHaOSedc5Xpmmix+OfN3SIi7HGOQ=
Subject key identifier:   67:ED:25:56:46:18:99:D3:B2:B0:80:09:6D:2E:B6:FE:4F:51:5A:11
Certificate issuer:       /CN=4714a8fc89277634ae57cdaf4d814514cd61f656
Certificate serial:       15D258
Authority key identifier: 25:F3:6F:92:FF:31:91:9D:EA:9D:E8:18:EE:46:83:9A:1E:6E:17:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4714a8fc89277634ae57cdaf4d814514cd61f656.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/b624d8b2ecee7dc61b3a96d12d2e656758e97b0a.roa
Signing time:             Tue 24 May 2022 17:00:00 +0000
ROA not before:           Tue 24 May 2022 03:00:00 +0000
ROA not after:            Mon 24 May 2027 03:00:00 +0000
asID:                     26619
IP address blocks:        179.50.24.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/4714a8fc89277634ae57cdaf4d814514cd61f656.crl
                          rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/4714a8fc89277634ae57cdaf4d814514cd61f656.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4714a8fc89277634ae57cdaf4d814514cd61f656.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1430104 (0x15d258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4714a8fc89277634ae57cdaf4d814514cd61f656
        Validity
            Not Before: May 24 03:00:00 2022 GMT
            Not After : May 24 03:00:00 2027 GMT
        Subject: CN=b624d8b2ecee7dc61b3a96d12d2e656758e97b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a7:c1:b1:5e:94:f1:2f:f4:bb:55:59:90:7d:
                    da:75:c7:c3:82:cf:cd:c8:a4:49:f3:d7:f8:cc:8f:
                    6c:e4:a7:6a:cd:7e:6e:6f:74:94:ce:8a:8e:d0:98:
                    bc:73:6e:0a:36:df:c1:b9:4d:fe:c4:27:c6:43:18:
                    f4:b4:cd:f3:6c:a1:0e:e7:c5:bf:7e:9c:50:58:26:
                    68:ff:fa:39:a3:73:54:cf:72:84:f4:a3:f8:bb:c7:
                    47:07:a1:70:27:2e:a9:1c:85:4f:04:e1:40:ab:07:
                    04:bb:13:7c:7a:e5:5e:47:01:f1:f4:fc:e2:6c:00:
                    50:6b:30:d6:07:7b:df:7a:b5:4f:df:03:72:ff:ab:
                    bb:ee:84:6c:60:fc:b2:29:12:dc:ea:e0:f9:14:8d:
                    26:dc:97:35:36:cd:9e:94:ec:e7:58:a0:42:b9:71:
                    e6:e1:91:79:1c:1c:0f:6b:be:e5:06:c5:32:e0:36:
                    1a:b3:2b:4d:0d:37:19:54:1a:bd:47:ca:a2:26:e4:
                    9f:b7:eb:23:be:0a:0f:f8:19:a2:0c:05:7e:74:4c:
                    29:6c:5a:c8:dd:e4:ba:fb:5a:49:d2:b5:56:2a:43:
                    08:e4:f7:72:0e:a7:6d:86:d6:6f:7c:1c:75:74:e4:
                    40:70:76:5f:39:cb:c3:da:47:c5:73:3b:07:12:7f:
                    2e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:ED:25:56:46:18:99:D3:B2:B0:80:09:6D:2E:B6:FE:4F:51:5A:11
            X509v3 Authority Key Identifier:
                keyid:25:F3:6F:92:FF:31:91:9D:EA:9D:E8:18:EE:46:83:9A:1E:6E:17:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4714a8fc89277634ae57cdaf4d814514cd61f656.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/b624d8b2ecee7dc61b3a96d12d2e656758e97b0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/4714a8fc89277634ae57cdaf4d814514cd61f656.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0c:7e:e1:86:db:5d:9e:3b:1b:7d:cb:72:9b:81:11:81:f0:da:
         b4:c3:87:ab:1a:41:b7:c1:4d:68:83:a9:12:1d:fe:4a:30:c9:
         61:9c:2d:cf:49:65:f8:4f:cf:53:8c:84:7f:d8:1a:9b:fb:46:
         9c:b4:93:82:92:5f:ee:5f:a8:a8:f2:ce:e2:cf:e4:af:aa:5c:
         2e:29:57:6b:bb:8a:f7:05:04:43:c9:af:20:00:90:39:11:43:
         e6:4e:e0:f2:29:01:6f:71:5d:68:b2:27:bf:ee:a1:3a:ff:d0:
         92:db:8f:2c:89:20:c1:6f:b7:06:6a:3a:0f:9d:c6:c7:a1:3e:
         c8:54:0e:c5:52:e1:82:ba:90:5e:5a:95:14:d0:a6:dc:3b:fa:
         6a:37:62:1c:83:85:f0:09:be:ac:1c:db:4d:e7:90:7d:af:2d:
         2d:76:fe:59:7b:5e:90:a2:52:4a:e7:53:35:df:14:cd:e7:7f:
         db:d7:b0:6a:c7:e9:b5:0f:2c:c1:67:42:75:24:8b:8e:f7:85:
         9e:4c:32:09:38:0a:4e:95:b9:39:7c:b1:e8:71:95:ba:5d:d4:
         82:dc:33:57:10:84:ed:be:9e:58:4e:d1:8a:4e:9f:5d:5a:98:
         2b:f7:f8:1a:10:e4:64:db:56:1d:2b:91:7e:cb:2a:5c:b5:16:
         b0:31:c5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 03:23:51 2024 by rpki-client on console-ams.rpki-client.org