Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/eae09291da1391c4b380ac60648879231bac4b76.roa
File:                     eae09291da1391c4b380ac60648879231bac4b76.roa (raw, json)
Hash identifier:          cQIITepbS13btZ66tOKqzLVt41+Sw/FxzXawezc1Uro=
Subject key identifier:   5D:99:4F:EC:1C:EE:DC:3C:56:7C:E5:A8:E0:36:91:ED:EA:DE:2D:0D
Certificate issuer:       /CN=7a0d3eafbdae2e52636e11aa20b9d745fdef44e7
Certificate serial:       0BC813
Authority key identifier: EF:AD:68:3D:4A:EA:AB:8A:C7:E2:70:5D:50:FD:72:AD:1B:CD:F2:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/eae09291da1391c4b380ac60648879231bac4b76.roa
Signing time:             Sun 02 Jul 2023 04:49:11 +0000
ROA not before:           Sat 01 Jul 2023 04:49:11 +0000
ROA not after:            Wed 02 Jul 2025 04:49:11 +0000
asID:                     270081
IP address blocks:        179.49.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 Mar 2024 08:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 772115 (0xbc813)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d3eafbdae2e52636e11aa20b9d745fdef44e7
        Validity
            Not Before: Jul  1 04:49:11 2023 GMT
            Not After : Jul  2 04:49:11 2025 GMT
        Subject: CN=eae09291da1391c4b380ac60648879231bac4b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6c:0d:35:32:f6:a9:24:0c:02:88:1b:c3:2f:
                    b6:84:97:a4:c7:9c:b1:c2:2b:ff:85:68:5d:27:20:
                    65:36:de:11:71:84:0d:67:77:bb:b5:bc:9e:b0:76:
                    30:0e:15:61:35:b3:9b:c7:70:a8:91:25:45:02:df:
                    61:79:a2:ec:6e:0c:00:e1:5c:e1:18:ae:8b:14:94:
                    07:ba:a3:10:01:01:6f:35:b0:f4:4b:c5:62:1b:4a:
                    79:42:06:ea:a4:3b:6e:87:db:77:07:30:39:47:d8:
                    35:7b:35:9b:82:c9:d7:4a:e3:dd:bb:74:1b:c8:cc:
                    22:3e:a6:2f:4b:87:60:01:55:53:fb:26:22:95:2a:
                    16:a5:6e:52:80:3f:0b:9f:e0:3a:a0:6a:52:98:36:
                    95:e1:58:a8:fd:40:4c:78:c8:fb:ef:0f:ff:db:3f:
                    1d:8c:d6:13:be:71:21:48:ec:60:1b:e3:22:40:07:
                    15:f4:5c:73:72:68:e2:7d:9f:4d:ac:84:bf:61:b0:
                    f3:43:a1:dc:5c:4f:bc:1c:f7:d2:10:3a:b5:fa:46:
                    8e:08:2f:f9:2e:6b:fe:8d:be:5a:63:25:f0:bb:23:
                    16:ea:b6:00:7e:6c:28:90:89:35:dd:23:9a:68:d1:
                    6e:e1:60:8b:86:aa:fc:53:18:fd:56:3c:79:19:83:
                    04:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:99:4F:EC:1C:EE:DC:3C:56:7C:E5:A8:E0:36:91:ED:EA:DE:2D:0D
            X509v3 Authority Key Identifier:
                keyid:EF:AD:68:3D:4A:EA:AB:8A:C7:E2:70:5D:50:FD:72:AD:1B:CD:F2:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/eae09291da1391c4b380ac60648879231bac4b76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:71:97:8d:e2:1c:57:2d:3f:a6:65:1a:56:b6:09:84:bb:d3:
         6f:fa:05:1d:f1:48:48:38:fe:e9:f3:da:12:72:ad:4b:c2:dc:
         6e:fc:57:ff:60:9f:2b:e7:ab:4e:6f:86:e0:cd:7d:64:2c:3d:
         81:ce:90:e3:ee:88:5d:db:8c:05:70:fe:e9:45:95:32:e9:36:
         cd:92:ea:ff:37:71:84:df:c1:1a:e7:04:5c:2a:1f:9c:82:97:
         44:19:af:e4:b4:63:97:bd:ca:1c:7a:fe:80:00:a2:44:fd:1e:
         88:94:73:e9:d8:33:76:91:c2:a3:65:6a:f5:6c:b3:1a:9c:b8:
         28:75:66:20:46:e9:e3:4b:94:b0:20:cd:8a:70:a3:5a:8b:20:
         ec:2a:02:8a:27:8c:eb:bd:0e:2e:d0:67:dd:35:11:c7:0a:89:
         23:6d:44:8b:a0:42:e5:4d:89:5a:bb:c1:15:68:22:71:62:8a:
         66:dd:36:8d:1b:40:e9:33:c8:c6:8b:bb:f1:ec:ea:27:a6:43:
         c9:74:3b:39:cc:91:16:fa:44:c9:3f:65:30:39:dd:ba:f7:38:
         16:46:a7:d2:8e:18:76:f4:89:e5:0a:2e:d0:06:ed:3b:93:05:
         17:f8:fc:bd:fe:d8:b8:f0:00:82:0a:7b:3b:c2:64:83:4c:b8:
         68:1a:1d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 09:25:35 2024 by rpki-client on console-ams.rpki-client.org