Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3b5b58ed-969a-40f9-b814-1f9e7ae8aa0c/d6d02dc1a7bafbfb2fb30b7e0bf4acb04d51e5ab.roa
File:                     d6d02dc1a7bafbfb2fb30b7e0bf4acb04d51e5ab.roa (raw, json)
Hash identifier:          1dEIKU5jS9UwQNCOJJEWTkkg4G+Vty24UUUsrRedDaY=
Subject key identifier:   E2:06:0F:E3:C0:B0:48:F3:5E:27:71:FA:84:9F:EE:73:5E:8C:82:E9
Certificate issuer:       /CN=a41461d6dfd488d8de0a70d45ae114eaacb32c16
Certificate serial:       054E00
Authority key identifier: 3F:C2:89:8A:AD:81:6B:C3:8B:05:5D:3B:D5:44:9D:77:B1:FF:5A:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a41461d6dfd488d8de0a70d45ae114eaacb32c16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3b5b58ed-969a-40f9-b814-1f9e7ae8aa0c/d6d02dc1a7bafbfb2fb30b7e0bf4acb04d51e5ab.roa
Signing time:             Wed 24 Mar 2021 14:29:09 +0000
ROA not before:           Wed 24 Mar 2021 14:29:09 +0000
ROA not after:            Tue 24 Mar 2026 14:29:09 +0000
asID:                     267930
IP address blocks:        45.177.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3b5b58ed-969a-40f9-b814-1f9e7ae8aa0c/a41461d6dfd488d8de0a70d45ae114eaacb32c16.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3b5b58ed-969a-40f9-b814-1f9e7ae8aa0c/a41461d6dfd488d8de0a70d45ae114eaacb32c16.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a41461d6dfd488d8de0a70d45ae114eaacb32c16.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347648 (0x54e00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a41461d6dfd488d8de0a70d45ae114eaacb32c16
        Validity
            Not Before: Mar 24 14:29:09 2021 GMT
            Not After : Mar 24 14:29:09 2026 GMT
        Subject: CN=d6d02dc1a7bafbfb2fb30b7e0bf4acb04d51e5ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ed:52:6e:58:ba:ae:20:a2:c4:9d:64:65:a1:
                    54:d0:e2:10:09:c9:0b:1e:ce:c8:c8:9c:63:ff:2c:
                    07:a5:6f:03:df:b4:13:fc:bc:0b:d2:a1:f0:a4:85:
                    b6:2f:ee:67:a1:34:3c:d1:98:31:f4:5a:8f:aa:0f:
                    1c:e1:ae:0f:a8:c3:67:1f:40:cb:43:c5:47:ce:4b:
                    0b:41:78:e2:8e:26:15:9b:02:80:6c:85:25:6b:42:
                    7c:27:8b:ae:98:c5:68:4e:2b:67:98:b2:f3:39:2c:
                    be:24:cc:14:12:59:50:2a:72:5c:b3:73:39:d1:12:
                    1b:ff:36:84:69:cb:d5:f8:26:3f:d8:5a:08:59:0e:
                    a3:b7:0a:e3:1c:3c:06:41:af:18:c5:b2:19:fc:f7:
                    eb:b0:8f:a5:6c:a1:57:cc:14:3f:0c:d1:3e:d4:46:
                    82:b2:98:0d:64:26:5b:1c:e6:b4:c5:e9:cc:4c:74:
                    76:b6:a7:10:56:95:13:3f:a4:8b:57:e7:6b:5b:ac:
                    dd:5e:56:27:72:d0:a8:9b:7d:e8:a2:90:b2:68:40:
                    e9:e7:8e:6d:c0:aa:a8:98:cf:78:c1:f1:97:2d:ba:
                    ac:5b:1a:54:ac:44:ba:a0:58:b4:2f:63:96:c6:58:
                    2a:7a:fc:07:ea:1a:eb:bf:fc:98:4c:38:6e:41:03:
                    45:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:06:0F:E3:C0:B0:48:F3:5E:27:71:FA:84:9F:EE:73:5E:8C:82:E9
            X509v3 Authority Key Identifier:
                keyid:3F:C2:89:8A:AD:81:6B:C3:8B:05:5D:3B:D5:44:9D:77:B1:FF:5A:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a41461d6dfd488d8de0a70d45ae114eaacb32c16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3b5b58ed-969a-40f9-b814-1f9e7ae8aa0c/d6d02dc1a7bafbfb2fb30b7e0bf4acb04d51e5ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3b5b58ed-969a-40f9-b814-1f9e7ae8aa0c/a41461d6dfd488d8de0a70d45ae114eaacb32c16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:13:0a:78:36:8c:db:57:33:7d:5d:6f:72:5b:11:8c:7a:24:
         7a:08:7c:c5:97:97:74:6a:3f:e0:ac:18:e0:3c:a0:97:37:68:
         84:51:b1:6f:c1:ea:e5:1a:2e:77:ec:40:39:00:a5:5e:b2:f0:
         33:4a:e4:59:70:9e:e0:7a:35:51:03:7b:1f:47:e3:d2:66:ac:
         e2:b1:a4:27:cd:b6:76:b4:23:f4:f7:e6:d8:28:ff:97:31:4d:
         c4:67:09:e0:20:98:41:c7:1d:cf:5e:33:bc:92:d5:0c:d3:05:
         8a:32:f8:8e:59:da:26:e7:8e:6e:55:3a:65:6f:65:f5:81:4e:
         1f:b5:88:21:b6:11:49:df:8c:bc:36:9f:e7:77:5b:3b:72:5c:
         7b:b0:b8:9f:0d:c2:c6:34:17:16:db:09:b2:2f:f5:6a:99:a6:
         ab:8f:84:b8:0b:cf:46:e0:c0:e0:e0:fc:65:9d:f5:1f:27:a5:
         af:7c:6a:e9:ea:5e:e3:11:61:b0:f3:e8:63:5b:b8:2c:42:1b:
         16:15:85:2d:4b:bd:ae:82:e0:84:ec:5c:37:13:c2:e2:22:f9:
         60:1a:09:39:02:3c:b1:19:c0:d8:2f:d3:7a:e6:6f:a4:1a:c2:
         14:e6:ee:03:06:0d:22:8b:77:77:fa:b2:3a:0c:89:b9:a5:49:
         2e:29:4f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 13:01:07 2024 by rpki-client on console-fra.rpki-client.org