Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24cb0f22-0472-4633-9655-4fbb1fa88293/27b6a4434c94c1b9c8e11f7e87b27e7b57935432.roa
File:                     27b6a4434c94c1b9c8e11f7e87b27e7b57935432.roa (raw, json)
Hash identifier:          vw+iB5/bikcUH5rxaJtZkYUGoD8AFsH8cm7xmJbg6VY=
Subject key identifier:   F4:AA:4A:73:EA:2F:E5:EC:7C:50:3B:DD:11:31:39:65:A3:92:31:76
Certificate issuer:       /CN=a26049498000edd2a1eaab11f2d8c74df0027926
Certificate serial:       04D0
Authority key identifier: DB:B0:DE:4F:DF:7F:A3:D4:18:9E:AC:4E:8B:AD:A9:C4:4F:70:D9:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a26049498000edd2a1eaab11f2d8c74df0027926.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24cb0f22-0472-4633-9655-4fbb1fa88293/27b6a4434c94c1b9c8e11f7e87b27e7b57935432.roa
Signing time:             Wed 10 May 2023 15:29:16 +0000
ROA not before:           Tue 09 May 2023 15:29:16 +0000
ROA not after:            Sat 10 May 2025 15:29:16 +0000
asID:                     269878
IP address blocks:        45.190.92.0/22 maxlen: 24
                          2803:58e0::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/24cb0f22-0472-4633-9655-4fbb1fa88293/a26049498000edd2a1eaab11f2d8c74df0027926.crl
                          rsync://repository.lacnic.net/rpki/lacnic/24cb0f22-0472-4633-9655-4fbb1fa88293/a26049498000edd2a1eaab11f2d8c74df0027926.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a26049498000edd2a1eaab11f2d8c74df0027926.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Feb 2024 17:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1232 (0x4d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a26049498000edd2a1eaab11f2d8c74df0027926
        Validity
            Not Before: May  9 15:29:16 2023 GMT
            Not After : May 10 15:29:16 2025 GMT
        Subject: CN=27b6a4434c94c1b9c8e11f7e87b27e7b57935432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f1:10:ea:36:c2:0d:4e:cb:19:af:0d:b9:c6:
                    18:37:4e:d3:d1:4c:fe:28:91:11:e6:63:04:d6:9d:
                    87:1e:12:65:3a:40:6f:1a:a5:d6:f1:01:d4:4e:98:
                    ad:d8:2b:07:af:1c:1f:de:31:0e:58:f5:1f:73:bd:
                    5a:3a:2e:b7:ff:08:49:6a:90:73:f3:bb:e8:45:d6:
                    7a:72:6f:ea:02:b4:d8:e8:4a:77:37:c2:e0:3a:eb:
                    2d:f7:c2:43:ef:55:b2:1f:b5:81:4e:c0:9e:a7:07:
                    e7:c8:41:54:cf:e9:62:f8:41:42:a2:d5:1d:e8:18:
                    5e:02:6c:da:9a:98:c2:2d:26:30:4f:ee:84:a8:60:
                    52:d2:ae:49:9c:ae:6f:2a:3b:73:0a:b1:f6:18:2b:
                    d2:c2:6e:09:35:a8:34:a0:8b:f0:a9:02:ab:33:6c:
                    4a:84:c3:3e:06:82:65:a6:7f:d1:f8:45:c9:d7:84:
                    61:74:70:28:77:49:c8:b6:44:7b:2d:3e:09:a0:2c:
                    5a:7f:d8:ff:34:72:07:26:ed:76:f6:4f:7d:1f:e5:
                    af:b0:4b:d3:0e:80:2d:eb:29:f2:d4:3b:dd:6a:27:
                    ac:b3:28:0e:b9:81:ae:38:e6:12:53:d5:58:3b:45:
                    1d:36:28:75:83:08:0a:cf:ad:87:d6:16:32:80:bd:
                    fa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AA:4A:73:EA:2F:E5:EC:7C:50:3B:DD:11:31:39:65:A3:92:31:76
            X509v3 Authority Key Identifier:
                keyid:DB:B0:DE:4F:DF:7F:A3:D4:18:9E:AC:4E:8B:AD:A9:C4:4F:70:D9:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a26049498000edd2a1eaab11f2d8c74df0027926.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24cb0f22-0472-4633-9655-4fbb1fa88293/27b6a4434c94c1b9c8e11f7e87b27e7b57935432.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24cb0f22-0472-4633-9655-4fbb1fa88293/a26049498000edd2a1eaab11f2d8c74df0027926.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.92.0/22
                IPv6:
                  2803:58e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:23:9b:73:5e:9f:83:a8:98:fb:60:71:8f:d5:2a:2a:ef:a9:
         b3:4e:78:22:16:c4:e8:f9:9a:60:fa:f7:d5:a3:b6:cd:2a:20:
         ef:24:53:f8:d9:53:1b:9f:da:ea:c1:58:cf:7e:2a:36:10:2c:
         78:e5:86:03:2e:90:e3:bd:f7:c8:00:3d:f4:0e:84:de:9c:dd:
         81:d3:e2:ad:3a:a2:82:e6:08:e0:14:cf:77:20:67:db:1c:8b:
         d2:08:4d:ba:32:d7:cf:f8:4b:ce:b0:e8:de:62:5e:1f:04:95:
         be:d7:72:14:d3:15:af:5c:6a:89:e5:30:ff:0b:6f:29:5f:76:
         4a:18:fa:c2:05:9d:f5:50:9e:66:a6:18:bf:a0:4f:fb:30:b5:
         41:68:9f:11:7f:e6:17:b5:03:38:cb:a7:62:c8:06:70:0f:da:
         9f:bd:75:ef:b1:57:f7:78:79:c0:c2:b8:00:8c:51:74:01:e0:
         cc:63:c0:db:fe:1d:53:fb:c2:e4:88:e8:fc:ca:a5:ad:13:6e:
         04:63:6a:bf:fd:fe:86:a2:06:c2:9b:6a:ca:87:7a:b0:7a:50:
         0b:dd:3c:ea:3e:6e:d5:b0:c0:f5:d5:5b:60:a8:9e:ae:42:12:
         f7:19:06:29:ef:70:70:b0:c8:a5:35:41:02:a7:fe:5e:41:25:
         bb:85:fd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 21 22:41:34 2024 by rpki-client on console-ams.rpki-client.org