Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/e5758df8bb379d9dc6769cc494b6ab14f6e90e97.roa
File:                     e5758df8bb379d9dc6769cc494b6ab14f6e90e97.roa (raw, json)
Hash identifier:          tQIsgweIyClGDa9T2m0yLAUImBRF+5IvMiq/0Ypmwks=
Subject key identifier:   E2:28:43:14:2B:3C:89:02:61:B3:AE:F8:E6:B3:9E:F6:EE:3E:A0:D3
Certificate issuer:       /CN=a883c910f879603b967c0636c6f3e9125b3651b5
Certificate serial:       19D951
Authority key identifier: 47:A6:7F:38:4E:50:5D:26:62:07:3D:AB:35:56:E6:EE:46:F6:2E:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/e5758df8bb379d9dc6769cc494b6ab14f6e90e97.roa
Signing time:             Thu 28 Jul 2022 15:33:35 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     52233
IP address blocks:        200.26.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1694033 (0x19d951)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a883c910f879603b967c0636c6f3e9125b3651b5
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=e5758df8bb379d9dc6769cc494b6ab14f6e90e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:81:0b:be:d3:a8:7c:e0:c5:63:09:40:7c:28:
                    a9:14:cc:5d:1e:c3:17:45:99:74:7a:49:80:d0:c9:
                    42:33:54:cc:15:11:68:cf:f3:e9:9f:d2:a3:8c:f1:
                    e6:d4:23:a5:21:5d:13:ad:b4:5a:95:46:3f:a6:ae:
                    ac:85:6b:53:2c:b3:fb:6a:6e:ab:51:3e:56:56:b6:
                    b9:e9:85:4f:ca:9e:ea:df:dc:a7:76:5c:92:52:aa:
                    66:02:94:1c:5a:6c:83:b7:88:d0:37:44:9d:85:c4:
                    f4:7b:cc:8e:bb:f4:85:4c:7b:d7:0e:e2:41:1e:34:
                    a9:ec:35:63:09:ae:2d:a1:55:33:73:29:0f:8f:6e:
                    cf:a1:07:19:5c:d9:e8:06:0f:33:f3:bf:89:be:04:
                    9f:23:5d:f7:5f:76:55:71:22:78:3c:80:d6:b9:52:
                    31:7d:92:1c:86:d0:dc:9a:b5:da:f9:a8:a2:f5:30:
                    ac:28:60:bd:68:fa:6c:9a:d6:0f:2d:db:63:0d:d9:
                    82:24:38:6b:7e:c1:fb:28:30:6b:f8:4c:75:6a:c4:
                    a7:98:72:02:0b:a2:1a:b7:33:d7:d7:a3:29:97:13:
                    e4:11:af:ca:8b:df:fc:aa:6b:20:65:95:c3:2a:cc:
                    a2:f9:72:e1:60:43:ee:db:22:d2:03:a6:89:2d:31:
                    84:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:28:43:14:2B:3C:89:02:61:B3:AE:F8:E6:B3:9E:F6:EE:3E:A0:D3
            X509v3 Authority Key Identifier:
                keyid:47:A6:7F:38:4E:50:5D:26:62:07:3D:AB:35:56:E6:EE:46:F6:2E:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/e5758df8bb379d9dc6769cc494b6ab14f6e90e97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:4c:5f:12:1f:73:59:8c:d0:3a:f1:ea:a3:d1:ff:6a:57:cc:
         c6:87:29:b8:bb:97:a8:dd:a7:9c:32:98:90:2a:77:41:0b:4e:
         8f:32:ac:29:6f:e1:3a:bd:65:f3:7f:8d:5e:2f:92:8b:e9:a5:
         2c:52:0e:1d:72:10:10:17:c1:37:51:a2:72:b4:7e:e2:5f:fb:
         33:e5:85:1c:43:47:35:3e:22:f9:ca:4f:8c:2d:ef:f2:16:3b:
         cb:f0:9e:87:b8:02:8d:3e:25:db:36:83:5e:fe:26:f4:89:c9:
         cc:c8:4e:9b:6b:6e:a8:ac:4e:3b:78:05:7b:8b:ec:4b:56:a0:
         b3:86:9f:d4:62:56:8c:ea:81:77:52:16:35:a2:d5:68:d3:48:
         48:7f:d8:71:47:a8:a3:80:92:31:08:17:2e:ad:4d:dc:84:32:
         e6:42:11:8f:cf:96:5c:74:ba:c1:17:29:9d:57:e8:86:5d:0a:
         d5:de:76:a9:57:82:c2:0a:17:ec:f2:51:cf:40:f7:5f:61:ed:
         01:8e:33:1f:9f:a6:f9:40:94:de:25:ce:46:b3:bc:65:e9:11:
         0d:f6:be:1d:31:31:0b:70:e0:33:08:85:c2:e2:67:10:7e:6b:
         53:66:7e:c4:40:0f:46:12:91:49:f3:c8:23:c4:a1:76:5e:26:
         85:81:b1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 13:15:04 2024 by rpki-client on console-fra.rpki-client.org