Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/26b90979af23f7fa46d2be85283c02e11e50a80d.roa
File:                     26b90979af23f7fa46d2be85283c02e11e50a80d.roa (raw, json)
Hash identifier:          36QQiZrT5u2zH+Z/Dh7okIhbHfNUjR1CRlqeq8wopWY=
Subject key identifier:   10:2B:C2:6B:87:33:74:10:3B:7D:3D:F7:B9:AE:0C:3B:62:80:AC:EB
Certificate issuer:       /CN=a883c910f879603b967c0636c6f3e9125b3651b5
Certificate serial:       19857A
Authority key identifier: 47:A6:7F:38:4E:50:5D:26:62:07:3D:AB:35:56:E6:EE:46:F6:2E:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/26b90979af23f7fa46d2be85283c02e11e50a80d.roa
Signing time:             Mon 18 Jul 2022 20:49:35 +0000
ROA not before:           Mon 18 Jul 2022 20:49:32 +0000
ROA not after:            Sun 18 Jul 2027 20:49:32 +0000
asID:                     11081
IP address blocks:        200.26.208.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Apr 2024 19:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1672570 (0x19857a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a883c910f879603b967c0636c6f3e9125b3651b5
        Validity
            Not Before: Jul 18 20:49:32 2022 GMT
            Not After : Jul 18 20:49:32 2027 GMT
        Subject: CN=26b90979af23f7fa46d2be85283c02e11e50a80d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e6:9d:63:fa:55:d0:f1:7d:af:ff:9e:71:32:
                    51:a1:20:cc:4e:4b:ad:3b:0e:71:11:92:7e:0e:1b:
                    04:b9:8e:ca:a8:84:4b:68:cb:3e:05:69:30:c0:e3:
                    4b:ca:43:38:82:a8:27:9c:37:0c:6b:93:ad:4e:eb:
                    17:31:dc:68:9f:e4:de:15:fb:80:6a:5d:3e:44:57:
                    70:37:3d:f6:79:4f:21:e4:4a:a7:e2:41:0c:0b:57:
                    17:30:61:aa:ce:b1:4b:cc:1b:36:01:df:a7:ab:c5:
                    57:ba:6e:23:2f:27:80:c3:0a:6e:21:87:82:27:02:
                    0f:a8:80:82:d9:8f:bd:2f:82:2c:4d:93:4e:0b:6f:
                    12:c3:1b:9d:42:0a:a4:3d:d0:0e:55:53:e3:bb:ad:
                    4d:55:e5:df:85:e6:af:a4:72:8a:65:85:a8:b3:0f:
                    39:82:44:b8:3f:e1:46:d6:d3:81:e6:0a:82:4d:e3:
                    e2:97:65:88:ae:03:db:44:5a:02:08:c5:e9:e7:7a:
                    81:de:3a:4d:42:10:2d:98:b2:fb:00:7f:05:c5:58:
                    c2:62:92:49:13:4f:04:f7:da:95:88:32:6c:ba:d3:
                    f1:b3:3e:7d:7b:01:8e:06:1a:f8:5e:5f:23:91:dc:
                    89:84:d2:77:d0:68:38:8b:8f:0c:2f:6c:80:96:9b:
                    8d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2B:C2:6B:87:33:74:10:3B:7D:3D:F7:B9:AE:0C:3B:62:80:AC:EB
            X509v3 Authority Key Identifier:
                keyid:47:A6:7F:38:4E:50:5D:26:62:07:3D:AB:35:56:E6:EE:46:F6:2E:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/26b90979af23f7fa46d2be85283c02e11e50a80d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:63:3c:40:7f:10:ee:ec:b7:5e:5c:21:c9:90:ca:24:ad:0f:
         77:46:ae:db:8f:a4:3d:4b:70:27:09:69:b4:c4:9a:9d:df:43:
         a8:66:c3:ca:d5:5a:3b:d6:44:51:57:74:e7:45:68:1c:5b:1c:
         89:75:9a:08:7e:ea:16:37:b0:78:f2:23:fb:ae:ec:55:7a:ae:
         2a:5f:88:31:03:67:dc:e6:10:ae:0a:5f:a7:56:c9:1f:9c:98:
         c3:bd:eb:bb:89:29:4c:a6:58:d3:6b:82:f4:a8:af:35:e2:63:
         34:49:a5:81:2c:1d:4a:34:b0:52:fb:7f:05:81:eb:3e:be:b2:
         41:ff:db:9f:33:f9:9a:64:7a:0a:e2:90:29:3e:2d:9d:52:b5:
         ed:40:f6:04:ec:3a:60:79:f3:7f:26:e0:26:94:b6:98:69:1d:
         a2:67:10:ee:e4:76:5b:d7:71:55:84:c9:c9:ff:d9:2d:f0:3f:
         cb:ce:fc:c3:e1:77:fb:cb:14:1c:c7:1c:75:6a:65:a4:0f:48:
         0f:c4:3e:a8:d9:11:1a:19:ce:13:4e:24:a2:6a:45:5a:90:77:
         34:83:91:e4:c1:04:b9:b1:f4:65:48:c3:14:65:76:61:3e:9f:
         e6:97:0d:b2:ba:d5:a6:4c:08:0b:41:fe:24:20:dd:fd:a9:b2:
         97:2e:68:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 03:03:44 2024 by rpki-client on console-ams.rpki-client.org