Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35cd56e5-06e9-4af1-90d4-5164a6144f55/6fbe64768d0f1b0aec0b393e8bf34fc62a338b2d.roa
File:                     6fbe64768d0f1b0aec0b393e8bf34fc62a338b2d.roa (raw, json)
Hash identifier:          9Sc0f101cnjavHo6Yy2l7R9v1tU8rudGw9Q2PKFzazg=
Subject key identifier:   E1:65:B1:35:09:0E:18:5F:70:08:C2:21:B1:38:1A:EB:5D:D0:06:34
Certificate issuer:       /CN=0fd41aeb6fb8aebe0877d653310ce6d90a678fb9
Certificate serial:       033F
Authority key identifier: A6:58:88:B0:DB:2B:35:05:6A:2A:8C:70:B6:C0:14:BC:4E:66:9F:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0fd41aeb6fb8aebe0877d653310ce6d90a678fb9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35cd56e5-06e9-4af1-90d4-5164a6144f55/6fbe64768d0f1b0aec0b393e8bf34fc62a338b2d.roa
Signing time:             Tue 05 Jul 2022 22:11:32 +0000
ROA not before:           Tue 05 Jul 2022 03:00:00 +0000
ROA not after:            Fri 05 Jul 2024 03:00:00 +0000
asID:                     52341
IP address blocks:        201.219.232.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35cd56e5-06e9-4af1-90d4-5164a6144f55/0fd41aeb6fb8aebe0877d653310ce6d90a678fb9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35cd56e5-06e9-4af1-90d4-5164a6144f55/0fd41aeb6fb8aebe0877d653310ce6d90a678fb9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0fd41aeb6fb8aebe0877d653310ce6d90a678fb9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 831 (0x33f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fd41aeb6fb8aebe0877d653310ce6d90a678fb9
        Validity
            Not Before: Jul  5 03:00:00 2022 GMT
            Not After : Jul  5 03:00:00 2024 GMT
        Subject: CN=6fbe64768d0f1b0aec0b393e8bf34fc62a338b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:82:8e:ef:b0:f4:41:9e:2c:06:5b:da:56:55:
                    13:fa:13:a3:ec:b8:5c:b8:a7:37:37:15:45:d1:71:
                    00:c1:df:da:88:0e:d7:01:a3:8c:20:af:aa:5b:37:
                    e3:45:92:5c:12:74:35:ab:f1:02:bb:1e:5e:f7:7e:
                    04:f7:16:e6:9b:95:a4:03:24:e3:90:72:46:32:b2:
                    41:cd:66:c3:3f:10:fe:c2:59:96:b8:c6:c7:90:7a:
                    94:92:31:12:34:b0:85:ed:0c:1a:58:74:ba:1d:19:
                    36:94:5a:b2:a4:a5:5a:9b:0d:dd:45:31:e6:18:0a:
                    20:07:ad:4e:5c:6d:17:03:b0:be:b1:b7:31:62:ef:
                    d5:00:0e:92:ac:99:a8:d1:27:83:38:d6:af:84:02:
                    ba:6f:ec:ae:f1:4c:41:61:f0:db:66:bf:8e:49:da:
                    f4:3f:e2:55:5d:08:11:0f:e3:fc:86:62:f9:c6:56:
                    0e:a2:0b:c9:c5:05:d4:13:6e:15:86:77:4a:f3:ba:
                    02:08:42:ab:06:2f:16:e6:82:a8:6d:be:01:4c:69:
                    d1:25:15:1b:26:bb:3d:1e:e3:4e:e1:da:c5:8c:b9:
                    d0:a8:f5:ed:43:0a:a1:a8:11:02:db:b6:96:1b:c2:
                    b6:cf:29:c9:5b:9e:c7:2c:a7:43:50:95:4e:23:b3:
                    f8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:65:B1:35:09:0E:18:5F:70:08:C2:21:B1:38:1A:EB:5D:D0:06:34
            X509v3 Authority Key Identifier:
                keyid:A6:58:88:B0:DB:2B:35:05:6A:2A:8C:70:B6:C0:14:BC:4E:66:9F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0fd41aeb6fb8aebe0877d653310ce6d90a678fb9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35cd56e5-06e9-4af1-90d4-5164a6144f55/6fbe64768d0f1b0aec0b393e8bf34fc62a338b2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35cd56e5-06e9-4af1-90d4-5164a6144f55/0fd41aeb6fb8aebe0877d653310ce6d90a678fb9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:ab:43:f6:c9:63:b2:30:a9:93:f2:4e:34:74:c6:51:12:17:
         ae:3a:05:dc:1d:b0:9b:9b:9b:7f:95:7e:2b:25:3c:48:e6:db:
         da:e2:d7:a0:08:90:58:b9:b2:b4:6e:f6:6c:ef:09:46:ae:29:
         4d:98:59:47:d9:42:bc:fb:fd:c2:54:c2:26:b1:83:e3:46:aa:
         bb:4f:90:b8:a6:ed:19:c7:c8:37:b9:96:3f:40:e7:af:e7:eb:
         80:dd:8a:ea:c0:fd:50:16:72:07:4d:ae:a2:fa:3e:82:6f:64:
         4a:e5:a1:dc:0b:02:18:94:9f:23:1c:de:91:4e:f0:b0:04:b3:
         4b:d6:be:f7:dd:08:f4:cf:e0:57:37:5f:53:48:19:f5:ce:6f:
         66:34:8d:ae:d7:13:06:73:05:44:4e:9f:9f:5a:aa:9e:15:44:
         a7:44:b6:65:f4:5e:96:5d:3b:fa:16:79:ca:62:d3:18:1b:33:
         ba:dc:49:17:35:c5:68:c2:45:09:40:5b:dc:cb:a3:af:f6:b2:
         4d:26:0f:eb:b5:7f:19:2d:1f:25:22:b1:6b:55:97:13:35:dc:
         b5:b5:a0:a0:e4:b3:f9:a1:42:7c:32:7f:78:ac:8d:da:c6:96:
         b9:cb:97:a9:d4:21:ae:91:cf:7d:72:98:3f:86:6b:46:f1:fb:
         5b:3f:ce:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 05:44:29 2024 by rpki-client on console-ams.rpki-client.org