Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/05b234cbaf5d3ddcd384462747406ac1f3a3f657.roa
File:                     05b234cbaf5d3ddcd384462747406ac1f3a3f657.roa (raw, json)
Hash identifier:          o8kU2nTlb/KoxBF4fhz1/tk3jCVCVtc4/iuf7a3HUpE=
Subject key identifier:   9F:EF:22:05:D5:04:40:7C:E4:8F:5D:65:95:42:A8:08:89:3A:59:33
Certificate issuer:       /CN=a883c910f879603b967c0636c6f3e9125b3651b5
Certificate serial:       199046
Authority key identifier: 47:A6:7F:38:4E:50:5D:26:62:07:3D:AB:35:56:E6:EE:46:F6:2E:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/05b234cbaf5d3ddcd384462747406ac1f3a3f657.roa
Signing time:             Mon 18 Jul 2022 20:49:42 +0000
ROA not before:           Mon 18 Jul 2022 20:49:32 +0000
ROA not after:            Sun 18 Jul 2027 20:49:32 +0000
asID:                     52233
IP address blocks:        190.4.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1675334 (0x199046)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a883c910f879603b967c0636c6f3e9125b3651b5
        Validity
            Not Before: Jul 18 20:49:32 2022 GMT
            Not After : Jul 18 20:49:32 2027 GMT
        Subject: CN=05b234cbaf5d3ddcd384462747406ac1f3a3f657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5c:99:d5:64:fc:bf:41:72:33:56:1c:6a:16:
                    26:fc:f6:34:94:25:53:34:a3:53:c1:2c:13:3b:bb:
                    d5:3f:fc:9a:c1:20:5a:b9:26:ae:86:51:1a:a4:a0:
                    5f:8d:96:89:59:be:56:0a:70:25:ac:a2:4f:13:81:
                    ce:60:ce:eb:97:cb:14:4d:c5:b2:dc:3e:91:19:21:
                    a3:45:96:c6:f1:6c:f7:26:b1:5f:97:60:48:66:a2:
                    6b:1b:10:1e:e4:7e:13:9e:aa:4b:d6:d4:4f:7c:fa:
                    85:fa:90:88:38:57:0d:b9:b8:2f:24:eb:1c:d4:03:
                    03:6f:ef:63:94:81:e1:e0:a4:20:61:84:97:b5:17:
                    ca:66:fd:19:e9:02:cb:28:6f:24:2d:09:a3:c4:4c:
                    7d:16:1c:79:4f:29:f3:8b:55:5f:0c:44:91:f2:ce:
                    ca:b8:c9:1c:fc:b6:c5:10:61:00:fb:0d:68:82:0c:
                    c0:64:09:a8:eb:3b:b3:cc:6b:6b:9f:48:7a:dd:47:
                    6a:e3:57:a2:a3:d1:86:a9:c3:34:e4:7e:57:35:6b:
                    88:20:94:da:a2:73:47:3f:ed:f1:43:9a:ef:bb:e7:
                    11:42:a9:28:95:c5:c4:88:50:84:97:a6:c0:39:cb:
                    45:90:94:8d:a7:bd:c6:54:5c:05:e0:0b:05:94:71:
                    f6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EF:22:05:D5:04:40:7C:E4:8F:5D:65:95:42:A8:08:89:3A:59:33
            X509v3 Authority Key Identifier:
                keyid:47:A6:7F:38:4E:50:5D:26:62:07:3D:AB:35:56:E6:EE:46:F6:2E:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/05b234cbaf5d3ddcd384462747406ac1f3a3f657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:36:f6:a8:af:05:ed:1c:67:a8:83:32:57:99:3b:ef:ae:18:
         c3:86:fc:d0:69:5e:ae:93:1b:b6:0c:b2:29:c3:e9:c9:e2:2f:
         ba:58:bd:45:c4:b5:f5:c0:1b:b8:63:b4:6e:35:51:06:6a:2b:
         8e:03:ea:b1:2d:2d:10:ee:c9:5c:76:d9:cb:a9:4c:f0:8e:b0:
         2a:12:ba:02:8f:08:83:7d:20:23:43:51:a2:87:d9:df:1b:01:
         a1:26:8c:95:c3:af:cd:8e:c0:63:27:0a:ee:1f:99:54:b3:d1:
         56:07:de:90:df:b9:81:fd:5f:93:ca:53:7b:ea:2e:ca:7c:52:
         65:6d:5c:25:2c:74:ed:15:75:f5:96:a4:60:e7:d5:14:07:21:
         c3:28:cc:a8:77:68:fe:02:c0:e3:a8:42:58:ee:16:d8:58:6d:
         52:f0:39:4c:11:be:0f:2e:d6:f2:ae:eb:6d:cb:36:6a:59:32:
         72:37:88:45:24:15:43:20:1e:70:cc:8e:df:84:60:b6:9c:de:
         f5:1e:a7:06:53:76:84:e9:b9:f0:62:f8:ad:30:48:25:59:93:
         f8:0a:25:7f:e9:ec:9f:24:65:74:1f:30:2e:60:59:3c:38:38:
         24:e2:0d:0f:c9:e6:99:55:4e:ce:b2:33:83:2a:25:2d:47:37:
         ef:86:1a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 13:15:03 2024 by rpki-client on console-fra.rpki-client.org