Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/93bb35c5c8322b915c2b72ce99a6d8e2a5da4dba.roa
File:                     93bb35c5c8322b915c2b72ce99a6d8e2a5da4dba.roa (raw, json)
Hash identifier:          t0DpF2j4GNIhN4HAJD7fxTlVLKD6owfeP640hO2R7Zw=
Subject key identifier:   98:BE:FF:0E:3E:B2:F7:DE:20:18:5D:B4:70:90:73:88:ED:FB:A6:23
Certificate issuer:       /CN=a883c910f879603b967c0636c6f3e9125b3651b5
Certificate serial:       20CB3C
Authority key identifier: 47:A6:7F:38:4E:50:5D:26:62:07:3D:AB:35:56:E6:EE:46:F6:2E:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/93bb35c5c8322b915c2b72ce99a6d8e2a5da4dba.roa
Signing time:             Thu 20 Apr 2023 18:53:05 +0000
ROA not before:           Wed 19 Apr 2023 18:53:04 +0000
ROA not after:            Sun 20 Apr 2025 18:53:04 +0000
asID:                     52233
IP address blocks:        190.88.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Apr 2024 19:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2149180 (0x20cb3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a883c910f879603b967c0636c6f3e9125b3651b5
        Validity
            Not Before: Apr 19 18:53:04 2023 GMT
            Not After : Apr 20 18:53:04 2025 GMT
        Subject: CN=93bb35c5c8322b915c2b72ce99a6d8e2a5da4dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7d:55:d7:c1:dc:12:bf:ad:c7:23:59:82:b1:
                    6d:55:14:ff:03:3f:10:6f:db:72:9d:a5:24:90:64:
                    3d:2d:c3:71:26:c6:59:06:8a:5c:b8:20:80:73:ed:
                    6f:e5:21:ba:68:3b:c3:79:d8:12:01:b3:25:6f:7a:
                    85:32:a4:58:cc:dd:f0:05:91:22:71:ee:04:1a:ea:
                    ee:10:fe:93:ff:00:f4:95:bc:03:a0:6c:fe:b1:d9:
                    83:51:ff:aa:f2:56:dd:d4:a3:31:31:d5:7d:9c:fe:
                    32:31:d4:8c:20:08:48:83:f8:f3:e1:f3:39:9e:66:
                    ff:f4:17:1f:22:f5:d6:90:c2:d9:52:9f:ce:e4:51:
                    46:fa:52:53:d6:97:55:89:62:7e:b7:ca:05:16:29:
                    23:3a:30:4a:4c:8d:4b:93:e6:8d:ce:b4:b9:85:27:
                    da:a0:0d:8a:20:ca:a3:9e:63:c4:1c:21:51:6c:65:
                    a8:60:3e:2a:0e:5e:2b:89:09:5b:af:bc:b5:5d:8a:
                    fb:dc:6f:65:2d:71:60:0b:7c:4a:81:d2:fd:48:c1:
                    aa:ad:6f:f1:ca:ef:65:82:23:a5:f1:52:f7:72:28:
                    0c:37:c0:9d:d3:93:b8:f0:64:e3:0d:1b:54:db:e7:
                    9f:d6:bf:fa:f3:d8:3c:9f:f7:2f:ef:2c:29:ea:b9:
                    74:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BE:FF:0E:3E:B2:F7:DE:20:18:5D:B4:70:90:73:88:ED:FB:A6:23
            X509v3 Authority Key Identifier:
                keyid:47:A6:7F:38:4E:50:5D:26:62:07:3D:AB:35:56:E6:EE:46:F6:2E:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/93bb35c5c8322b915c2b72ce99a6d8e2a5da4dba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.88.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:cd:85:1a:7f:9e:da:18:2b:d7:2c:d1:a2:52:aa:07:78:dd:
         02:ae:9d:9d:ff:78:78:a6:1e:78:fd:e3:ce:1a:f1:a6:36:6b:
         bf:54:17:84:2d:06:43:0c:78:0c:8f:65:79:c0:c1:2c:b8:63:
         7a:99:97:05:19:31:4b:16:bc:4c:79:5d:0f:77:17:ca:0a:15:
         fa:3b:fd:0b:ca:0a:e4:3d:0c:5c:ff:d6:e1:69:bc:cd:78:ff:
         c1:21:b1:e9:74:63:d6:e2:ad:99:0d:d9:b5:db:16:c8:dd:47:
         cb:f1:69:a1:c6:10:4e:59:4c:ae:42:7d:43:e2:62:d5:29:cf:
         6c:4c:5f:07:3e:53:02:51:49:ca:b7:10:80:59:6b:2e:e0:44:
         59:3c:0b:58:9a:33:cf:03:18:10:ad:f9:0d:f1:c2:8e:d4:3f:
         81:c0:52:25:43:18:e9:67:af:53:15:db:9a:f7:3a:87:59:da:
         21:ad:58:2f:31:0d:e5:cd:8d:99:eb:cf:12:34:42:a7:3e:5c:
         0b:a0:fa:36:cb:70:31:91:5b:89:43:c2:c3:bf:6f:fc:fc:6f:
         83:1a:10:c1:ab:54:9c:b7:80:49:5d:b4:3d:06:a9:8c:cc:48:
         c6:47:78:52:77:50:d5:41:cf:00:44:1a:c9:77:1c:51:bf:e2:
         3f:a7:6d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 03:03:44 2024 by rpki-client on console-ams.rpki-client.org