Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/8ecccc5849651f8ad8677573755bb71822874917.roa
File:                     8ecccc5849651f8ad8677573755bb71822874917.roa (raw, json)
Hash identifier:          UfoOsQ8A62hMmz5kLeM3cxRfETvTdnex4PSBPwzKwCc=
Subject key identifier:   D1:FE:1D:2B:77:45:47:BA:4A:FD:0B:BA:F0:76:2F:2A:0C:68:4B:C3
Certificate issuer:       /CN=a0ece5cb3349a401474499eb301920b68090f2ce
Certificate serial:       0D93D4
Authority key identifier: 94:52:6C:1C:EE:97:CC:0E:93:E7:50:7E:90:7F:EB:BE:B5:E2:99:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0ece5cb3349a401474499eb301920b68090f2ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/8ecccc5849651f8ad8677573755bb71822874917.roa
Signing time:             Wed 24 Mar 2021 14:38:27 +0000
ROA not before:           Wed 24 Mar 2021 14:38:27 +0000
ROA not after:            Tue 24 Mar 2026 14:38:27 +0000
asID:                     264836
IP address blocks:        192.141.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/a0ece5cb3349a401474499eb301920b68090f2ce.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/a0ece5cb3349a401474499eb301920b68090f2ce.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0ece5cb3349a401474499eb301920b68090f2ce.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889812 (0xd93d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0ece5cb3349a401474499eb301920b68090f2ce
        Validity
            Not Before: Mar 24 14:38:27 2021 GMT
            Not After : Mar 24 14:38:27 2026 GMT
        Subject: CN=8ecccc5849651f8ad8677573755bb71822874917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7a:46:0c:f7:74:f5:3f:5c:87:37:dc:7d:c5:
                    83:75:e0:f9:29:28:c8:9b:01:ad:29:f8:05:33:26:
                    f9:98:5f:3d:06:8a:28:60:4a:0b:44:17:69:80:d6:
                    97:36:b9:5e:58:02:22:ff:4d:21:69:15:54:0b:1e:
                    8a:0b:66:09:a3:f4:9f:5d:4b:a0:c7:ce:67:0b:4c:
                    a4:68:30:f5:d9:33:71:b4:2c:8a:3e:77:7b:f8:13:
                    ae:22:c5:a1:a4:31:ee:3f:29:a1:30:56:3a:62:db:
                    1f:80:34:e7:cc:e7:22:15:e0:d8:a6:0e:c1:ce:4e:
                    26:69:29:20:69:1d:d3:08:40:93:49:5b:67:1e:98:
                    d8:1f:c9:4c:9b:e8:ad:ca:1c:68:35:fd:6e:a9:9d:
                    cc:6d:65:e3:b9:b4:d3:b5:6f:1e:0b:8d:13:fd:fc:
                    d3:a0:f9:4d:13:29:22:34:3d:f6:56:a9:48:22:71:
                    b9:c1:c0:d0:22:8b:9e:6f:17:8d:ea:e3:3d:ff:db:
                    86:c5:60:3c:6d:b9:a0:06:61:13:79:9f:62:53:e4:
                    3d:04:c3:41:d0:76:71:fa:3d:2c:0f:65:14:f8:8a:
                    5a:7f:8b:81:ae:db:dc:1b:93:13:df:4f:1d:24:25:
                    3d:d9:85:7c:dc:03:2c:2d:ca:c9:27:72:9e:33:dc:
                    c8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FE:1D:2B:77:45:47:BA:4A:FD:0B:BA:F0:76:2F:2A:0C:68:4B:C3
            X509v3 Authority Key Identifier:
                keyid:94:52:6C:1C:EE:97:CC:0E:93:E7:50:7E:90:7F:EB:BE:B5:E2:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0ece5cb3349a401474499eb301920b68090f2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/8ecccc5849651f8ad8677573755bb71822874917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/a0ece5cb3349a401474499eb301920b68090f2ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:f3:c4:40:6f:7d:c3:6f:47:33:ca:a2:ab:1f:c2:55:e8:a9:
         bb:03:cc:f3:ca:4b:bc:c6:3f:70:64:3e:89:0a:99:bb:53:98:
         0d:06:c6:7e:c5:ff:4f:d3:46:ac:3f:e7:23:91:9a:f4:91:43:
         22:35:f0:1b:f1:0e:a7:bd:71:aa:44:9d:09:fb:01:e7:a6:21:
         bd:c0:3e:53:1e:ec:2e:6d:43:7f:2c:96:39:49:9e:d5:28:02:
         fa:4b:8c:09:ca:15:b8:5e:bd:d2:f0:fc:28:a4:0e:ce:f8:70:
         16:8d:06:2c:18:27:b0:9d:3b:16:9e:8d:6b:d3:f2:fc:8d:eb:
         5a:02:1f:f5:ce:d9:e2:4b:8f:e9:85:f1:e2:db:0f:31:85:f2:
         0b:7a:45:59:23:1c:4a:27:33:64:63:82:c1:1f:f0:12:9d:af:
         62:80:d5:7c:3a:fe:d6:d1:b7:50:25:05:6f:91:0a:51:af:41:
         28:8a:9e:65:72:ff:50:9b:ee:5a:73:9f:fe:f2:e5:b6:d1:ac:
         56:19:10:35:c5:f3:06:75:84:7a:5d:3c:bd:7c:b0:ab:9b:c3:
         3f:c2:1a:cc:7f:cf:17:ee:5d:69:43:49:d5:51:cb:45:f7:e7:
         c4:4f:86:3b:78:67:5f:12:89:d7:54:d5:98:85:4b:ee:38:48:
         a6:7f:d5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 14:01:13 2024 by rpki-client on console-fra.rpki-client.org