Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/d165998b530876ffaff2a01ece76a877e52a4307.roa
File:                     d165998b530876ffaff2a01ece76a877e52a4307.roa (raw, json)
Hash identifier:          wDJ4J4IlzXoKCl+7Qds13sOoqfk7BQoyl4pXiqjD4Yk=
Subject key identifier:   16:BD:7E:DB:FA:70:3F:DA:2B:25:88:92:79:9A:1F:6E:A3:25:4B:3D
Certificate issuer:       /CN=a883c910f879603b967c0636c6f3e9125b3651b5
Certificate serial:       198917
Authority key identifier: 47:A6:7F:38:4E:50:5D:26:62:07:3D:AB:35:56:E6:EE:46:F6:2E:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/d165998b530876ffaff2a01ece76a877e52a4307.roa
Signing time:             Mon 18 Jul 2022 20:49:37 +0000
ROA not before:           Mon 18 Jul 2022 20:49:32 +0000
ROA not after:            Sun 18 Jul 2027 20:49:32 +0000
asID:                     11081
IP address blocks:        200.26.208.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1673495 (0x198917)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a883c910f879603b967c0636c6f3e9125b3651b5
        Validity
            Not Before: Jul 18 20:49:32 2022 GMT
            Not After : Jul 18 20:49:32 2027 GMT
        Subject: CN=d165998b530876ffaff2a01ece76a877e52a4307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c5:93:6d:d0:55:7d:7d:3d:51:4e:44:66:a0:
                    7d:64:f3:6c:3c:39:92:2f:73:5d:0e:9a:17:b8:f2:
                    a4:e4:87:06:61:fe:79:d4:d1:80:2f:57:5f:5d:5a:
                    b6:4d:b6:9d:3c:f0:06:92:bc:12:c3:0b:9f:da:af:
                    82:a5:79:b3:22:a5:a4:98:ac:28:50:d6:2c:41:41:
                    98:85:0c:9f:ba:42:c0:ec:0a:b9:1e:0e:0e:f6:f0:
                    55:26:ea:89:9b:b1:d4:0c:81:ec:f2:ab:e3:dd:14:
                    38:ae:eb:99:d1:3d:88:f7:a1:59:3a:f5:28:14:17:
                    e7:89:9f:b8:c9:bd:81:73:5e:d9:f0:e6:27:af:ff:
                    08:fe:22:67:7c:d0:91:9b:a6:e2:ef:be:32:62:4c:
                    e2:93:ad:de:21:66:b5:a5:b4:8c:e4:0c:9a:3b:28:
                    ff:a7:eb:19:e9:fc:75:91:35:5b:4a:97:9f:52:06:
                    dc:f5:da:79:ce:a5:e9:ff:2e:e4:3a:ed:a6:47:9b:
                    76:b5:13:3f:c5:e7:7e:5a:be:25:96:81:18:e5:e8:
                    34:d8:9b:84:bb:0b:b3:7d:7a:70:96:a9:67:51:9e:
                    e0:b7:92:cc:19:21:be:f4:19:04:f7:0a:0b:38:1f:
                    25:2a:7d:cd:72:1e:4c:2f:da:06:d9:33:b3:55:82:
                    1e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BD:7E:DB:FA:70:3F:DA:2B:25:88:92:79:9A:1F:6E:A3:25:4B:3D
            X509v3 Authority Key Identifier:
                keyid:47:A6:7F:38:4E:50:5D:26:62:07:3D:AB:35:56:E6:EE:46:F6:2E:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/d165998b530876ffaff2a01ece76a877e52a4307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a0:a1:08:eb:08:f2:ca:9a:a6:9f:90:55:1d:8c:20:ac:1d:a5:
         0b:5f:17:8f:4e:7d:df:05:8a:43:9f:69:23:0a:e4:c0:12:24:
         ea:48:78:f9:62:cf:7f:51:64:0a:f1:84:01:fe:3c:e1:87:6b:
         df:00:52:03:b5:56:a0:ec:03:ec:62:e2:91:90:14:e7:73:69:
         9c:0b:9c:7d:b1:cc:d0:6d:8d:2d:63:a9:33:ee:f1:42:80:16:
         29:c1:cf:d7:57:85:65:1a:b9:ea:9a:fa:81:f2:f4:66:df:a6:
         8c:49:ce:64:ec:5b:ed:61:f7:8a:3d:a2:14:bb:84:bb:c5:bd:
         f5:1a:1a:9f:90:9d:6c:0d:b4:d6:88:f8:68:da:b4:05:67:50:
         0a:27:ec:26:19:4f:01:1e:ef:7d:7a:52:14:19:01:57:6a:fa:
         5d:5e:06:d5:83:b5:da:3f:6b:da:05:a3:87:dc:ee:af:b4:cd:
         85:ee:22:bb:df:23:0f:64:b4:9c:cb:8d:a8:2f:3b:07:64:64:
         95:99:54:92:bc:33:67:49:fd:6e:f5:ca:70:cb:c9:63:74:c6:
         fb:22:6c:f2:e9:87:e6:86:47:79:6b:c2:0c:27:2f:b9:1c:6d:
         7f:78:c6:7b:a7:92:f4:89:b1:43:f0:c3:9f:e0:1a:d0:da:79:
         b6:0a:4e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 13:15:04 2024 by rpki-client on console-fra.rpki-client.org