Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/ccca81243ee9e885bf01b4830fa2b9252a77b339.roa
File:                     ccca81243ee9e885bf01b4830fa2b9252a77b339.roa (raw, json)
Hash identifier:          OOjE/tM6H77VcvlwmPjcWehfi3keVkTiMtIUCZb83ec=
Subject key identifier:   3C:3D:2A:DE:6C:16:15:D0:CE:2B:68:8A:D0:7F:A3:E4:6A:EE:37:4F
Certificate issuer:       /CN=a0ece5cb3349a401474499eb301920b68090f2ce
Certificate serial:       2266AA
Authority key identifier: 94:52:6C:1C:EE:97:CC:0E:93:E7:50:7E:90:7F:EB:BE:B5:E2:99:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0ece5cb3349a401474499eb301920b68090f2ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/ccca81243ee9e885bf01b4830fa2b9252a77b339.roa
Signing time:             Thu 27 Jul 2023 08:30:00 +0000
ROA not before:           Wed 26 Jul 2023 08:30:00 +0000
ROA not after:            Fri 25 Jul 2025 08:30:00 +0000
asID:                     266664
IP address blocks:        192.141.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/a0ece5cb3349a401474499eb301920b68090f2ce.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/a0ece5cb3349a401474499eb301920b68090f2ce.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0ece5cb3349a401474499eb301920b68090f2ce.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2254506 (0x2266aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0ece5cb3349a401474499eb301920b68090f2ce
        Validity
            Not Before: Jul 26 08:30:00 2023 GMT
            Not After : Jul 25 08:30:00 2025 GMT
        Subject: CN=ccca81243ee9e885bf01b4830fa2b9252a77b339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b5:4f:dd:a0:77:8e:4a:93:29:58:d8:11:d2:
                    ba:2a:fa:b1:35:3e:68:80:6e:74:33:d1:60:c4:50:
                    f2:f1:b5:e2:31:11:ac:26:1d:71:c8:01:a8:c7:b7:
                    a8:aa:65:39:3f:4b:f0:f8:3a:06:80:2e:85:71:5e:
                    6d:0c:ae:1c:bf:45:e5:03:3a:33:67:76:b3:01:3f:
                    70:4d:54:be:45:80:b7:fb:f3:0f:35:fc:06:3e:84:
                    e1:f6:2a:8b:b8:03:9a:32:bf:e1:58:5d:6d:50:4a:
                    b1:45:21:f6:a6:4c:88:a6:31:6d:38:cd:fb:4e:f4:
                    a7:a6:1b:4b:cc:ea:be:64:e5:bb:85:29:76:98:36:
                    30:38:8f:68:c3:a6:9c:27:7f:52:c1:63:dd:41:9a:
                    e1:08:9a:38:fc:e2:c6:f8:bd:7c:68:9f:c0:08:7f:
                    f1:e7:73:15:d5:a3:f1:7d:af:4e:fd:83:a3:2a:38:
                    7d:75:fa:5c:62:62:e0:41:e7:03:f6:2c:a7:74:77:
                    98:be:55:74:50:b0:40:f4:ae:df:79:ca:e1:eb:87:
                    78:b7:0d:32:2f:dc:76:17:28:38:73:9f:46:5e:e0:
                    6a:c1:d8:a3:e3:58:fc:4c:98:dd:27:97:28:50:40:
                    25:95:d6:99:ce:27:50:cd:aa:21:22:24:eb:d7:c1:
                    20:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3D:2A:DE:6C:16:15:D0:CE:2B:68:8A:D0:7F:A3:E4:6A:EE:37:4F
            X509v3 Authority Key Identifier:
                keyid:94:52:6C:1C:EE:97:CC:0E:93:E7:50:7E:90:7F:EB:BE:B5:E2:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0ece5cb3349a401474499eb301920b68090f2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/ccca81243ee9e885bf01b4830fa2b9252a77b339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/a0ece5cb3349a401474499eb301920b68090f2ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:e5:72:9d:bb:c9:60:49:82:cd:2f:1c:e7:2e:75:16:c3:8b:
         dc:a2:78:94:6d:bc:a9:c0:45:2a:55:39:40:de:a4:4a:d6:8a:
         2f:fe:35:34:1c:7d:f8:4f:2b:79:89:e9:30:2c:3d:f2:57:34:
         e0:a8:5b:8f:7f:d8:9c:1d:f6:fa:d7:7a:aa:d2:58:53:fe:02:
         ff:da:e2:75:dd:c9:07:dc:3c:4c:44:21:b2:2f:a2:c9:ff:bc:
         3d:48:73:b8:0a:a1:51:45:e6:23:bd:88:10:d3:84:18:c5:1e:
         87:9f:38:f4:91:a9:16:3e:c1:19:b3:cd:d2:30:9d:a4:08:1c:
         77:7c:cf:64:90:d4:2d:aa:e0:a2:9b:c3:0b:c5:45:81:ab:7c:
         88:2f:60:d8:a7:43:ea:bb:1c:e8:6e:54:ae:46:80:ec:1b:d4:
         30:d7:ea:c1:16:7a:33:02:c3:03:ed:f4:36:c7:55:0c:2d:5e:
         08:28:d3:f4:67:67:77:08:3d:d6:fc:bd:fe:b8:fd:e7:39:b7:
         5e:50:a5:a6:8e:ea:3c:a5:ce:b1:8a:ca:39:32:78:11:68:1b:
         56:16:03:2f:96:cb:5c:bb:d0:92:ae:b9:7c:17:af:ce:db:73:
         cf:3c:63:ce:a1:18:46:2f:72:79:54:22:9c:a8:68:2c:7e:d2:
         e5:19:28:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 07:56:20 2024 by rpki-client on console-fra.rpki-client.org