Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4711b587-d968-4583-a00a-7a779f4d68a1/186b1cbbe4b7d2793b7981b1cc00cbf22919e86f.roa
File:                     186b1cbbe4b7d2793b7981b1cc00cbf22919e86f.roa (raw, json)
Hash identifier:          ApkiZHEbNUJnJU0wm/+P4ZGxrzGpkQVKlAqO11o57WM=
Subject key identifier:   F8:26:97:E0:04:92:9C:E7:CC:01:ED:12:08:99:32:1E:E7:45:58:84
Certificate issuer:       /CN=dcb64d54343b10350dc7c0a73f06b0cec071b5be
Certificate serial:       01BB38
Authority key identifier: 7D:74:A8:F6:49:F6:C3:C2:C3:54:FF:29:7F:B6:B9:FE:A4:AF:E7:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dcb64d54343b10350dc7c0a73f06b0cec071b5be.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4711b587-d968-4583-a00a-7a779f4d68a1/186b1cbbe4b7d2793b7981b1cc00cbf22919e86f.roa
Signing time:             Wed 24 Mar 2021 14:43:04 +0000
ROA not before:           Wed 24 Mar 2021 14:43:04 +0000
ROA not after:            Tue 24 Mar 2026 14:43:04 +0000
asID:                     17090
IP address blocks:        192.100.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4711b587-d968-4583-a00a-7a779f4d68a1/dcb64d54343b10350dc7c0a73f06b0cec071b5be.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4711b587-d968-4583-a00a-7a779f4d68a1/dcb64d54343b10350dc7c0a73f06b0cec071b5be.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dcb64d54343b10350dc7c0a73f06b0cec071b5be.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Feb 2024 16:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113464 (0x1bb38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcb64d54343b10350dc7c0a73f06b0cec071b5be
        Validity
            Not Before: Mar 24 14:43:04 2021 GMT
            Not After : Mar 24 14:43:04 2026 GMT
        Subject: CN=186b1cbbe4b7d2793b7981b1cc00cbf22919e86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7c:a0:62:86:0c:19:d6:9e:fc:55:8a:0c:60:
                    d4:35:e3:1c:d0:4c:1d:c6:eb:e5:ce:ce:1d:7d:2e:
                    67:40:75:5b:65:40:30:cf:e9:ef:a8:29:6d:1f:60:
                    78:4b:39:f8:8b:e9:2c:1e:88:20:46:04:4b:7c:7b:
                    e9:23:86:18:85:1d:50:eb:ed:33:62:6a:5a:42:58:
                    48:bb:40:3d:9a:3d:a9:db:ae:a0:df:da:5f:5d:e9:
                    4b:03:c8:21:a7:d1:8a:74:25:40:39:6f:3b:9e:74:
                    a2:86:d3:15:4e:48:7a:0b:9d:d5:12:69:79:31:3e:
                    27:4b:ae:a8:79:5f:1e:c5:aa:2d:1f:31:78:ba:a5:
                    02:7b:76:99:34:56:47:ed:03:17:f2:8f:d2:35:8b:
                    35:e3:63:75:eb:ef:9f:46:27:86:fe:6f:83:78:3e:
                    4f:79:fd:5b:20:ab:17:ea:69:48:5b:50:4a:fc:89:
                    96:ad:f2:0f:0d:89:73:0e:05:98:c3:5a:39:50:7a:
                    08:b9:d8:b3:c6:d4:90:51:94:99:ce:a2:93:ea:f0:
                    8e:ff:63:8e:6c:b1:9a:ed:8d:e0:76:ad:e2:5c:e0:
                    4c:3d:36:e6:44:a3:f0:8c:03:5f:d1:bd:0c:9d:7d:
                    52:f1:d7:46:68:2d:c0:2b:1e:74:74:cb:42:82:b9:
                    c7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:26:97:E0:04:92:9C:E7:CC:01:ED:12:08:99:32:1E:E7:45:58:84
            X509v3 Authority Key Identifier:
                keyid:7D:74:A8:F6:49:F6:C3:C2:C3:54:FF:29:7F:B6:B9:FE:A4:AF:E7:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dcb64d54343b10350dc7c0a73f06b0cec071b5be.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4711b587-d968-4583-a00a-7a779f4d68a1/186b1cbbe4b7d2793b7981b1cc00cbf22919e86f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4711b587-d968-4583-a00a-7a779f4d68a1/dcb64d54343b10350dc7c0a73f06b0cec071b5be.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:b1:87:ab:cf:71:e1:36:52:42:26:0b:df:06:5c:83:36:24:
         8b:c6:30:d4:84:7b:10:66:ac:1c:68:ee:97:b3:b0:87:b4:51:
         be:82:fe:15:32:32:a7:28:e2:43:25:98:67:d9:53:f6:a3:95:
         44:61:dd:d3:1d:13:39:ae:b0:32:08:f3:a3:32:d4:b6:77:6e:
         82:60:50:de:8a:d5:21:94:79:57:24:bb:82:62:57:27:1d:10:
         30:f0:a2:1a:b6:c0:61:f8:be:7d:09:5f:1d:8f:6d:dc:d8:6d:
         2c:f3:b9:90:1d:cd:ea:f9:0c:ca:39:0d:19:c4:64:40:4b:76:
         65:1e:e7:83:24:08:23:3b:21:20:a3:9f:ab:78:a5:2e:f2:21:
         3c:a9:96:71:2a:c4:33:9a:dc:62:83:bd:5b:3a:76:20:3c:92:
         b4:ec:c6:de:0e:ca:f0:81:47:03:b0:4b:af:6a:ee:f7:3a:b0:
         c0:ba:59:23:be:04:38:b7:9d:33:14:60:ae:3e:ed:a4:c4:7b:
         c4:64:45:dd:f1:83:75:89:9c:b0:8c:fe:52:97:4b:76:8d:90:
         db:41:b1:d6:bd:79:02:19:7b:8c:66:15:50:6e:47:14:3d:c7:
         50:a3:6d:d2:8f:32:16:9d:6d:60:43:2a:8d:31:40:ab:09:10:
         63:ac:98:dc
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAbs4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRj
YjY0ZDU0MzQzYjEwMzUwZGM3YzBhNzNmMDZiMGNlYzA3MWI1YmUwHhcNMjEwMzI0
MTQ0MzA0WhcNMjYwMzI0MTQ0MzA0WjAzMTEwLwYDVQQDEygxODZiMWNiYmU0Yjdk
Mjc5M2I3OTgxYjFjYzAwY2JmMjI5MTllODZmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhXygYoYMGdae/FWKDGDUNeMc0Ewdxuvlzs4dfS5nQHVbZUAw
z+nvqCltH2B4Szn4i+ksHoggRgRLfHvpI4YYhR1Q6+0zYmpaQlhIu0A9mj2p266g
39pfXelLA8ghp9GKdCVAOW87nnSihtMVTkh6C53VEml5MT4nS66oeV8exaotHzF4
uqUCe3aZNFZH7QMX8o/SNYs142N16++fRieG/m+DeD5Pef1bIKsX6mlIW1BK/ImW
rfIPDYlzDgWYw1o5UHoIudizxtSQUZSZzqKT6vCO/2OObLGa7Y3gdq3iXOBMPTbm
RKPwjANf0b0MnX1S8ddGaC3AKx50dMtCgrnHqQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPgml+AEkpznzAHtEgiZMh7nRViEMB8GA1UdIwQYMBaAFH10qPZJ9sPCw1T/
KX+2uf6kr+e3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGNiNjRk
NTQzNDNiMTAzNTBkYzdjMGE3M2YwNmIwY2VjMDcxYjViZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDcxMWI1ODctZDk2OC00NTgzLWEwMGEtN2E3Nzlm
NGQ2OGExLzE4NmIxY2JiZTRiN2QyNzkzYjc5ODFiMWNjMDBjYmYyMjkxOWU4NmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80NzExYjU4Ny1kOTY4LTQ1ODMtYTAwYS03YTc3
OWY0ZDY4YTEvZGNiNjRkNTQzNDNiMTAzNTBkYzdjMGE3M2YwNmIwY2VjMDcxYjVi
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMBksjANBgkqhkiG9w0BAQsFAAOCAQEAWbGHq89x4TZSQiYL
3wZcgzYki8Yw1IR7EGasHGjul7Owh7RRvoL+FTIypyjiQyWYZ9lT9qOVRGHd0x0T
Oa6wMgjzozLUtndugmBQ3orVIZR5VyS7gmJXJx0QMPCiGrbAYfi+fQlfHY9t3Nht
LPO5kB3N6vkMyjkNGcRkQEt2ZR7ngyQIIzshIKOfq3ilLvIhPKmWcSrEM5rcYoO9
Wzp2IDyStOzG3g7K8IFHA7BLr2ru9zqwwLpZI74EOLedMxRgrj7tpMR7xGRF3fGD
dYmcsIz+UpdLdo2Q20Gx1r15Ahl7jGYVUG5HFD3HUKNt0o8yFp1tYEMqjTFAqwkQ
Y6yY3A==
-----END CERTIFICATE-----
Generated at Fri Feb 23 20:08:13 2024 by rpki-client on console-ams.rpki-client.org