Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/81cf48a48dd11ef8b32361db797e94c6dc933787.roa
File:                     81cf48a48dd11ef8b32361db797e94c6dc933787.roa (raw, json)
Hash identifier:          rDlmWAko9FntI1+T6if6dPsL65Y/6k1JZldstG+RtoA=
Subject key identifier:   C5:01:B0:24:09:C2:C7:0F:75:29:44:73:F1:48:19:B0:87:FD:00:31
Certificate issuer:       /CN=a883c910f879603b967c0636c6f3e9125b3651b5
Certificate serial:       19630F
Authority key identifier: 47:A6:7F:38:4E:50:5D:26:62:07:3D:AB:35:56:E6:EE:46:F6:2E:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/81cf48a48dd11ef8b32361db797e94c6dc933787.roa
Signing time:             Sun 17 Jul 2022 19:53:14 +0000
ROA not before:           Fri 09 Apr 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     52233
IP address blocks:        200.26.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Apr 2024 19:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1663759 (0x19630f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a883c910f879603b967c0636c6f3e9125b3651b5
        Validity
            Not Before: Apr  9 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=81cf48a48dd11ef8b32361db797e94c6dc933787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c2:cf:c8:48:9d:fc:51:f7:e8:0b:bc:36:f5:
                    67:3e:2b:b7:83:05:9b:06:e7:dc:24:76:22:65:96:
                    c7:4c:41:79:dc:45:e5:bc:26:9f:67:5f:81:3c:9a:
                    8f:65:2b:1a:9b:d4:4e:5d:e0:1b:7f:b3:2b:5f:e2:
                    f1:ea:4a:ea:f3:19:66:bd:64:1f:6e:7f:84:30:47:
                    7a:15:83:23:71:6b:81:0d:9c:4b:1b:1a:e0:cc:aa:
                    77:f3:b0:93:de:0c:b2:a2:88:86:e8:8b:68:84:a6:
                    79:b8:cf:75:76:f3:03:71:5e:04:26:28:47:d6:56:
                    0e:e4:62:a9:97:2b:21:78:d9:24:91:ea:16:c8:75:
                    62:10:2a:1b:75:59:3f:a7:0c:9f:17:8a:5f:91:3a:
                    55:6e:b4:0c:38:a2:b3:d7:6b:0b:ba:f5:ec:57:61:
                    7a:18:9d:d2:1c:9d:76:ec:e4:65:40:fe:b9:e7:46:
                    c0:c4:fb:3f:95:58:23:44:f1:96:d1:ec:de:09:d8:
                    24:ec:80:0f:25:8c:2c:8a:79:9e:6a:6a:88:a1:9e:
                    98:8f:d1:fd:b2:2b:4d:00:2c:82:0d:b3:5a:97:41:
                    85:3a:13:7c:15:00:14:60:7e:2e:1b:54:a6:61:5d:
                    b7:a1:29:b4:18:54:95:24:89:2a:87:db:cd:9d:f8:
                    fa:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:01:B0:24:09:C2:C7:0F:75:29:44:73:F1:48:19:B0:87:FD:00:31
            X509v3 Authority Key Identifier:
                keyid:47:A6:7F:38:4E:50:5D:26:62:07:3D:AB:35:56:E6:EE:46:F6:2E:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/81cf48a48dd11ef8b32361db797e94c6dc933787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:c8:cf:be:22:47:67:60:df:75:dc:2d:e5:51:c1:9d:a8:d1:
         f3:f4:09:7d:75:88:5e:61:00:1b:e2:d7:9f:28:4f:2b:f3:f3:
         20:b4:09:38:3e:72:96:af:c6:d3:57:c9:d2:65:b1:5b:e6:1f:
         55:e4:89:0d:de:c6:3d:2a:46:d3:6a:67:f3:5f:48:a2:ea:15:
         c4:6e:18:73:ef:15:e1:4f:25:a4:63:be:ba:4b:d4:69:2b:20:
         9f:53:66:ec:32:42:4f:0a:f7:a3:3d:4f:fb:de:9b:51:3e:e6:
         d8:c4:dc:f0:8e:af:9a:a7:0b:9f:6b:e6:8e:ca:7f:62:66:44:
         a0:b6:2c:06:61:7b:7a:f1:d0:4a:e9:d9:b6:0d:b9:10:bc:6e:
         b4:ef:5c:cb:c9:29:ce:22:dd:9c:65:4b:d6:d0:07:51:6a:fb:
         91:3d:69:75:83:fa:a8:60:33:7a:33:5f:50:a4:9f:50:f4:33:
         be:c0:d9:7e:80:b3:5b:57:e9:ab:d3:b7:10:43:ee:71:a0:55:
         9f:b0:19:ee:64:de:9b:36:1e:54:ad:64:fc:0b:80:d3:64:f7:
         f7:14:7e:23:11:96:66:64:d3:df:47:ab:9d:e7:5e:37:d0:a2:
         7b:6b:b3:8a:01:e1:bf:4c:21:83:3d:98:ed:fa:47:8f:b9:8e:
         1a:79:b5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 03:03:44 2024 by rpki-client on console-ams.rpki-client.org