Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/f49094edcdde99542e6abc0508fb5f12d99d3290.roa
File:                     f49094edcdde99542e6abc0508fb5f12d99d3290.roa (raw, json)
Hash identifier:          K9Z+MKXvAR5oh52RoFDcu8PwPE15R1yqu0EzmZyypw0=
Subject key identifier:   4E:A4:9C:18:98:89:10:01:01:72:DC:F1:4B:0E:6C:29:E9:FE:0E:8B
Certificate issuer:       /CN=a883c910f879603b967c0636c6f3e9125b3651b5
Certificate serial:       0D734B
Authority key identifier: 47:A6:7F:38:4E:50:5D:26:62:07:3D:AB:35:56:E6:EE:46:F6:2E:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/f49094edcdde99542e6abc0508fb5f12d99d3290.roa
Signing time:             Wed 24 Mar 2021 14:38:08 +0000
ROA not before:           Wed 24 Mar 2021 14:38:07 +0000
ROA not after:            Tue 24 Mar 2026 14:38:07 +0000
asID:                     52301
IP address blocks:        200.26.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Apr 2024 19:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881483 (0xd734b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a883c910f879603b967c0636c6f3e9125b3651b5
        Validity
            Not Before: Mar 24 14:38:07 2021 GMT
            Not After : Mar 24 14:38:07 2026 GMT
        Subject: CN=f49094edcdde99542e6abc0508fb5f12d99d3290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a2:d3:93:b2:62:eb:12:97:57:97:fe:5b:63:
                    38:66:5b:79:c1:3a:09:53:07:de:c7:98:a2:06:b9:
                    56:ce:93:bb:a2:4f:e2:e2:a2:95:5d:5a:df:1b:4b:
                    59:02:4b:9a:11:ec:a1:be:1f:ed:7c:b1:41:ce:4e:
                    f0:44:4c:7f:85:2b:ae:93:a0:3b:84:9f:3a:63:5b:
                    4a:70:68:1b:10:99:98:09:de:ec:94:43:35:46:97:
                    46:be:80:c1:ee:8e:e2:81:d9:97:66:d5:99:10:f9:
                    42:f9:d6:eb:52:a5:be:21:6f:83:50:93:21:16:7b:
                    34:d3:f4:c3:58:95:b8:a7:94:b3:c7:c2:3e:19:b6:
                    ec:94:56:e5:37:32:4e:ad:a7:b3:a1:f7:44:4c:05:
                    53:42:cf:72:0e:72:6b:62:41:47:67:48:14:eb:70:
                    a9:c5:85:40:cf:7b:14:be:a1:17:47:fc:01:8a:03:
                    c1:92:60:80:d9:b8:29:a7:b4:03:a1:01:42:2b:50:
                    c6:2d:8d:bd:73:cf:68:34:c5:7d:62:b8:41:75:ce:
                    c6:c3:bc:cd:f3:ce:d3:85:dc:65:86:92:75:fb:d8:
                    20:23:ca:64:02:c0:5e:0f:80:b9:b2:e7:d6:11:88:
                    03:37:44:55:d5:ba:df:0e:b3:db:23:15:96:8a:36:
                    c2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A4:9C:18:98:89:10:01:01:72:DC:F1:4B:0E:6C:29:E9:FE:0E:8B
            X509v3 Authority Key Identifier:
                keyid:47:A6:7F:38:4E:50:5D:26:62:07:3D:AB:35:56:E6:EE:46:F6:2E:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a883c910f879603b967c0636c6f3e9125b3651b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/f49094edcdde99542e6abc0508fb5f12d99d3290.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2abd6b34-8953-4c72-a0a2-7ecb9de8aaba/a883c910f879603b967c0636c6f3e9125b3651b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:0c:ed:fc:fe:e1:53:fb:54:ff:86:99:90:c5:8d:3d:d3:90:
         9b:58:ce:85:ab:11:1b:aa:0d:dc:d2:5b:9e:cd:67:a0:e5:fc:
         85:fb:bb:e1:82:6d:0e:51:6d:8f:65:4b:8d:f4:5e:46:92:e1:
         a6:6e:b4:0b:c8:e6:9f:02:1c:fa:c7:ea:4a:aa:b7:09:94:05:
         a7:1c:07:b3:b8:ff:2f:28:12:33:3b:37:20:c3:ce:92:da:fc:
         4f:27:89:82:19:97:15:a6:48:b5:6f:d3:73:0f:21:e2:86:f4:
         2f:9c:c4:d5:03:d8:52:39:5e:6e:5a:df:bb:b7:3d:7a:96:35:
         18:79:7c:c9:53:57:4c:86:c6:49:92:7d:9e:63:6b:a1:32:55:
         d8:46:de:7c:ba:de:3a:70:55:d5:06:e0:ea:25:e5:d2:7f:e3:
         fe:d2:4f:09:a0:09:08:6e:f7:bb:b9:b6:76:38:33:7b:c4:d9:
         fa:72:7c:37:e2:04:16:80:39:72:63:7c:5b:54:30:53:60:67:
         cd:ad:9b:72:d0:6b:24:61:33:65:05:99:c4:40:e5:a3:e4:e2:
         a8:09:62:a6:bd:f6:34:d7:6c:42:43:de:7c:9e:4d:a0:e8:b9:
         e3:b6:56:0d:c8:9d:7b:2d:84:4d:5b:1e:25:15:40:aa:d7:93:
         c6:b4:4b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 03:03:44 2024 by rpki-client on console-ams.rpki-client.org