Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/6d6f8a3f6df074362f64103ac561165fa5228f8f.roa
File:                     6d6f8a3f6df074362f64103ac561165fa5228f8f.roa (raw, json)
Hash identifier:          OeotrXtxj5WXa30AqMqVX1V2Il4GoOMfGrmldFMT+QQ=
Subject key identifier:   9F:FA:58:05:B5:25:8D:59:27:24:BC:82:65:C7:B3:C5:1A:41:9B:DF
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       0116B2
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/6d6f8a3f6df074362f64103ac561165fa5228f8f.roa
Signing time:             Wed 14 Sep 2022 14:13:03 +0000
ROA not before:           Fri 19 Aug 2022 16:18:28 +0000
ROA not after:            Mon 19 Aug 2024 16:18:28 +0000
asID:                     27823
IP address blocks:        168.197.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Mar 2024 16:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71346 (0x116b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:18:28 2022 GMT
            Not After : Aug 19 16:18:28 2024 GMT
        Subject: CN=6d6f8a3f6df074362f64103ac561165fa5228f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:67:63:e8:3b:9a:a6:32:1b:65:a1:8b:27:20:
                    2d:9e:85:65:33:f9:3e:a7:80:03:a9:2b:d4:ae:1b:
                    ec:f7:33:f8:47:99:59:82:46:dd:27:60:fc:7c:ff:
                    0d:94:86:91:2d:ad:40:6f:bc:ec:49:95:21:92:fd:
                    6f:80:59:d6:26:8d:ec:0f:23:b7:0e:73:a4:dc:11:
                    10:d1:1c:4b:43:f4:b2:34:cd:f8:23:9c:54:45:02:
                    b2:38:e0:ab:93:3f:1c:11:b7:64:9f:79:29:13:10:
                    6f:48:fd:20:a3:df:01:2a:9b:8c:c9:6f:1f:65:dd:
                    bc:1d:18:6d:f3:ac:f7:7f:3f:a0:a5:d8:36:d2:c5:
                    37:11:a3:dc:cf:61:73:c0:01:94:0b:9f:ed:da:51:
                    99:f6:32:6a:58:b1:b7:d9:01:a6:25:72:b0:c4:48:
                    64:a6:66:71:8f:6e:6c:bc:31:02:b4:c9:5b:8e:14:
                    80:37:8e:32:17:bf:4d:9d:1c:05:d5:25:28:d8:a4:
                    d7:14:1a:80:12:9c:a8:26:79:3d:34:e6:4a:9e:bd:
                    56:18:cd:6f:95:c7:47:1b:46:2e:b8:d8:a7:75:f8:
                    36:95:c3:52:d3:8b:86:38:4a:ed:0e:98:af:12:4a:
                    78:00:69:4b:aa:fe:b1:1c:e7:40:e4:8c:60:bc:52:
                    2e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FA:58:05:B5:25:8D:59:27:24:BC:82:65:C7:B3:C5:1A:41:9B:DF
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/6d6f8a3f6df074362f64103ac561165fa5228f8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:eb:e7:52:5a:bb:10:e6:9b:7f:9e:d8:a4:fd:0b:f8:5b:8f:
         55:ad:6d:c8:0b:38:19:bb:d6:c4:2e:11:eb:d9:cd:1f:0d:73:
         05:09:8a:4d:43:36:23:93:4b:7c:fa:2c:9b:ae:b4:e3:cd:f6:
         c7:83:26:a2:84:9a:30:48:c6:85:20:28:cf:1a:85:dc:3d:a0:
         9c:95:13:7b:e0:6d:2d:20:9b:0d:cc:70:bd:97:3c:15:3c:ad:
         9c:38:57:72:d7:4f:c5:15:dc:1e:b2:c4:de:fd:62:f9:0a:cb:
         85:21:81:8a:4a:a3:43:40:b7:44:af:e4:24:d7:79:5d:8f:e9:
         47:36:e6:e0:40:ee:21:59:c4:f6:c8:dd:5d:e2:0c:e1:37:ed:
         f4:9c:5a:91:5c:be:9a:c0:c5:8c:17:d9:eb:36:bc:23:54:db:
         bd:3b:1e:58:89:45:bf:80:39:7c:8e:9a:94:21:98:4c:93:84:
         f7:5e:5b:4a:e8:09:d2:bb:be:2f:9b:61:56:f1:e2:3a:ad:ec:
         c2:15:03:17:82:11:64:a3:88:8e:66:5e:4c:7e:fe:6a:38:e1:
         11:8d:e8:1d:46:c2:d9:31:13:4f:5d:9b:e3:78:a5:75:92:61:
         fa:b7:05:1a:8a:33:5e:d0:80:8a:73:54:16:49:12:61:54:2f:
         1a:92:78:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 00:11:50 2024 by rpki-client on console-fra.rpki-client.org