Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/486aa283-9d76-4014-902e-a75cbbd00761/b53fbdf6a87f638776358a4285810b8cdec75516.roa
File:                     b53fbdf6a87f638776358a4285810b8cdec75516.roa (raw, json)
Hash identifier:          6LdyKL9eeFV4H8HsO2/Rn2lPIxyZ/RB1bSiMAxq4ZC4=
Subject key identifier:   8D:A2:36:17:29:0A:5A:7E:BE:66:8B:C4:23:FE:E5:2E:FD:92:55:30
Certificate issuer:       /CN=e4ca76e1f142510e55c0107f95de81dc2fc73164
Certificate serial:       0D11B3
Authority key identifier: 3A:82:65:DC:10:75:3F:CF:5D:19:7E:7B:6A:F4:C7:48:10:36:4C:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e4ca76e1f142510e55c0107f95de81dc2fc73164.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/486aa283-9d76-4014-902e-a75cbbd00761/b53fbdf6a87f638776358a4285810b8cdec75516.roa
Signing time:             Wed 24 Mar 2021 14:36:30 +0000
ROA not before:           Wed 24 Mar 2021 14:36:29 +0000
ROA not after:            Tue 24 Mar 2026 14:36:29 +0000
asID:                     26605
IP address blocks:        200.16.117.0/24 maxlen: 24
                          200.16.118.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/486aa283-9d76-4014-902e-a75cbbd00761/e4ca76e1f142510e55c0107f95de81dc2fc73164.crl
                          rsync://repository.lacnic.net/rpki/lacnic/486aa283-9d76-4014-902e-a75cbbd00761/e4ca76e1f142510e55c0107f95de81dc2fc73164.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e4ca76e1f142510e55c0107f95de81dc2fc73164.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856499 (0xd11b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4ca76e1f142510e55c0107f95de81dc2fc73164
        Validity
            Not Before: Mar 24 14:36:29 2021 GMT
            Not After : Mar 24 14:36:29 2026 GMT
        Subject: CN=b53fbdf6a87f638776358a4285810b8cdec75516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d3:97:5e:28:89:fb:ac:19:70:0a:95:7c:66:
                    f8:98:79:92:0b:8b:c0:e9:06:e2:89:9a:ae:93:a5:
                    ac:d9:23:7f:df:56:03:e6:0d:94:45:22:3c:8c:bc:
                    a5:80:49:25:08:1a:12:95:ec:9b:b1:25:f7:07:09:
                    36:d3:e3:e9:a2:d5:33:00:0d:5c:de:ba:f7:16:c0:
                    2f:7e:2f:02:c5:8a:f5:6a:31:69:e1:54:30:5e:88:
                    f3:30:04:ed:d5:4a:ee:1d:a9:c2:07:18:9c:fa:35:
                    a2:48:e5:e2:fc:f1:ed:d2:35:26:ca:aa:71:f1:02:
                    14:8b:56:75:08:e4:bd:ab:bc:17:5e:19:5d:86:21:
                    92:20:8f:1d:70:d7:5c:a7:48:24:65:a9:bc:9c:d1:
                    bd:82:97:7a:ac:17:1d:16:41:20:2c:fe:12:79:77:
                    19:36:6c:f4:7a:28:25:a6:d2:ca:ca:cb:f7:50:ed:
                    e2:cd:51:cd:da:41:35:b6:2d:99:a0:93:f6:4d:44:
                    ce:be:47:6b:86:b6:d9:ff:f1:c5:d5:ae:72:80:90:
                    a7:7b:d7:95:b0:77:a0:22:65:98:3b:89:91:83:bc:
                    22:3e:1a:ee:35:06:ba:c0:b1:1d:0d:aa:ba:0e:e2:
                    c5:4a:0e:19:53:ff:31:59:95:ed:12:05:8a:0a:c8:
                    36:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A2:36:17:29:0A:5A:7E:BE:66:8B:C4:23:FE:E5:2E:FD:92:55:30
            X509v3 Authority Key Identifier:
                keyid:3A:82:65:DC:10:75:3F:CF:5D:19:7E:7B:6A:F4:C7:48:10:36:4C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e4ca76e1f142510e55c0107f95de81dc2fc73164.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/486aa283-9d76-4014-902e-a75cbbd00761/b53fbdf6a87f638776358a4285810b8cdec75516.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/486aa283-9d76-4014-902e-a75cbbd00761/e4ca76e1f142510e55c0107f95de81dc2fc73164.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.117.0-200.16.119.255

    Signature Algorithm: sha256WithRSAEncryption
         66:3e:4a:53:d0:01:7e:d7:bf:7e:2a:1b:8e:4d:05:33:a9:18:
         9d:04:f6:b7:c8:d2:53:09:55:19:b7:71:f8:c1:db:e0:32:e7:
         43:d5:6e:3b:f8:6d:0f:e5:e8:d8:d9:39:fd:21:b0:2d:6a:50:
         70:e6:e6:c1:c0:50:45:6c:cb:0f:0a:84:37:52:a5:16:88:8e:
         f1:03:3a:f9:97:56:97:2c:82:24:8c:67:ef:fd:42:79:2d:b3:
         39:5e:b1:3e:6b:32:0a:8a:34:cd:26:cd:5b:2b:ac:d7:ff:37:
         87:ba:36:5a:d6:61:85:73:6f:8c:14:9c:f0:d3:5f:32:2f:d3:
         51:6b:23:3f:c9:0c:77:54:af:93:1f:e0:19:45:fe:c8:78:3e:
         77:99:0d:79:99:f0:69:23:24:9a:7a:ec:42:3e:cb:8e:b3:c3:
         69:85:d8:41:88:94:aa:40:82:77:e3:e7:70:41:b5:1b:17:52:
         4d:69:26:fb:37:29:9e:25:ac:c4:24:0c:27:35:1f:0a:84:95:
         9e:68:a3:70:e2:38:1f:57:c4:d3:ac:76:40:0b:10:97:08:c6:
         de:ad:2e:43:47:3c:05:db:52:10:88:6e:11:a1:83:a6:24:00:
         b8:d8:b4:4f:11:da:2c:93:47:fd:87:dc:44:80:b1:20:80:c4:
         18:e6:59:2d
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDDRGzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU0
Y2E3NmUxZjE0MjUxMGU1NWMwMTA3Zjk1ZGU4MWRjMmZjNzMxNjQwHhcNMjEwMzI0
MTQzNjI5WhcNMjYwMzI0MTQzNjI5WjAzMTEwLwYDVQQDEyhiNTNmYmRmNmE4N2Y2
Mzg3NzYzNThhNDI4NTgxMGI4Y2RlYzc1NTE2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm9OXXiiJ+6wZcAqVfGb4mHmSC4vA6QbiiZquk6Ws2SN/31YD
5g2URSI8jLylgEklCBoSleybsSX3Bwk20+PpotUzAA1c3rr3FsAvfi8CxYr1ajFp
4VQwXojzMATt1UruHanCBxic+jWiSOXi/PHt0jUmyqpx8QIUi1Z1COS9q7wXXhld
hiGSII8dcNdcp0gkZam8nNG9gpd6rBcdFkEgLP4SeXcZNmz0eiglptLKysv3UO3i
zVHN2kE1ti2ZoJP2TUTOvkdrhrbZ//HF1a5ygJCne9eVsHegImWYO4mRg7wiPhru
NQa6wLEdDaq6DuLFSg4ZU/8xWZXtEgWKCsg2PwIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFI2iNhcpClp+vmaLxCP+5S79klUwMB8GA1UdIwQYMBaAFDqCZdwQdT/PXRl+
e2r0x0gQNky8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTRjYTc2
ZTFmMTQyNTEwZTU1YzAxMDdmOTVkZTgxZGMyZmM3MzE2NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDg2YWEyODMtOWQ3Ni00MDE0LTkwMmUtYTc1Y2Ji
ZDAwNzYxL2I1M2ZiZGY2YTg3ZjYzODc3NjM1OGE0Mjg1ODEwYjhjZGVjNzU1MTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ODZhYTI4My05ZDc2LTQwMTQtOTAyZS1hNzVj
YmJkMDA3NjEvZTRjYTc2ZTFmMTQyNTEwZTU1YzAxMDdmOTVkZTgxZGMyZmM3MzE2
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQAyBB1AwQDyBBwMA0GCSqGSIb3DQEBCwUAA4IBAQBmPkpT
0AF+179+KhuOTQUzqRidBPa3yNJTCVUZt3H4wdvgMudD1W47+G0P5ejY2Tn9IbAt
alBw5ubBwFBFbMsPCoQ3UqUWiI7xAzr5l1aXLIIkjGfv/UJ5LbM5XrE+azIKijTN
Js1bK6zX/zeHujZa1mGFc2+MFJzw018yL9NRayM/yQx3VK+TH+AZRf7IeD53mQ15
mfBpIySaeuxCPsuOs8NphdhBiJSqQIJ34+dwQbUbF1JNaSb7NymeJazEJAwnNR8K
hJWeaKNw4jgfV8TTrHZACxCXCMberS5DRzwF21IQiG4RoYOmJAC42LRPEdosk0f9
h9xEgLEggMQY5lkt
-----END CERTIFICATE-----
Generated at Thu Mar 28 16:02:54 2024 by rpki-client on console-ams.rpki-client.org