Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/9ab534c4997a2831d1b088d8eeadcdd5846b84d6.roa
File:                     9ab534c4997a2831d1b088d8eeadcdd5846b84d6.roa (raw, json)
Hash identifier:          mA41WdtqK8mkjEPbhYKNNTGEVQtJ1X/6CRAAxONpIpU=
Subject key identifier:   1D:12:20:82:60:DA:94:8F:C8:48:DF:67:30:06:08:C3:27:CB:71:96
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       015251
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/9ab534c4997a2831d1b088d8eeadcdd5846b84d6.roa
Signing time:             Wed 14 Sep 2022 14:27:25 +0000
ROA not before:           Fri 19 Aug 2022 16:19:05 +0000
ROA not after:            Mon 19 Aug 2024 16:19:05 +0000
asID:                     27823
IP address blocks:        179.43.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86609 (0x15251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:19:05 2022 GMT
            Not After : Aug 19 16:19:05 2024 GMT
        Subject: CN=9ab534c4997a2831d1b088d8eeadcdd5846b84d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5b:87:12:0b:ea:22:84:13:d1:f7:59:3f:2b:
                    27:8b:a9:da:09:64:82:0c:d4:dc:a4:bf:1f:5e:53:
                    82:00:b9:26:36:d8:9c:d8:90:ac:43:cc:b0:b6:1b:
                    8b:68:3b:38:d0:57:03:cd:ae:09:7a:fa:7f:b0:ea:
                    1d:33:f6:d4:0a:7c:3e:75:1f:4a:4b:d5:d5:00:70:
                    ce:ac:69:ef:9d:e8:41:cb:41:67:32:ec:ea:23:96:
                    02:b1:17:c8:39:4c:2f:81:d7:06:84:20:37:14:f2:
                    d3:f5:30:41:1d:f1:9b:20:73:79:20:a3:84:14:8a:
                    2e:3d:d4:e9:30:fd:ec:d1:38:d0:ec:6c:a1:9f:cf:
                    83:a3:0c:e6:15:79:fa:36:9f:30:10:17:e1:19:dd:
                    a5:7b:b5:5f:d1:7b:6f:94:21:21:95:02:f9:e2:af:
                    0d:08:48:d3:39:d6:41:69:e2:fa:24:f8:7c:2f:04:
                    53:93:92:18:39:d2:67:17:1b:3e:c8:97:48:c9:66:
                    d7:4a:fa:8d:8d:bf:f9:61:e4:17:15:35:76:7d:c3:
                    ad:05:ea:7f:79:a1:5a:41:da:40:28:a5:8d:cb:41:
                    1c:ca:86:a8:dd:13:57:4e:3e:b9:f0:1e:20:7e:55:
                    fb:02:68:09:89:16:b9:18:3f:6c:99:3c:59:41:ac:
                    7e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:12:20:82:60:DA:94:8F:C8:48:DF:67:30:06:08:C3:27:CB:71:96
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/9ab534c4997a2831d1b088d8eeadcdd5846b84d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:2e:29:14:23:d3:75:a7:70:f3:2e:1a:dc:06:f4:ab:3a:7f:
         ca:d0:2f:eb:8b:41:55:39:c8:e1:95:c1:e0:b5:9d:3c:93:5d:
         99:45:72:b8:aa:b5:4d:18:b5:a2:a7:9a:4a:66:63:c6:04:03:
         47:a8:d0:a4:1f:61:f8:40:d8:98:92:db:ba:cd:53:b9:f5:f9:
         62:a1:fe:68:34:1b:8c:07:28:47:fb:a6:d2:e1:d1:ce:d0:18:
         45:64:d2:85:90:cd:88:dd:04:1c:8f:73:b2:c5:a7:4a:0d:df:
         1a:b2:d6:83:4d:dc:86:45:05:91:5a:fd:73:1b:57:4f:f7:fb:
         cc:79:12:aa:f9:16:28:93:fd:bb:6f:d7:91:29:b6:20:4e:87:
         9e:39:76:0d:6f:ba:d0:4e:f5:ee:04:1f:9c:92:f8:b3:5b:2c:
         b3:34:39:1b:da:ea:e8:07:30:d4:94:98:d7:62:4a:e0:5c:79:
         66:09:7e:69:91:53:67:2d:66:32:d2:43:91:e2:cb:85:1d:d0:
         40:a9:60:bc:83:a8:41:66:2d:c6:47:5e:f1:9e:d3:e9:d6:59:
         ba:3c:8b:a5:9f:b6:5c:0e:24:e2:a4:23:12:c7:49:03:33:d2:
         2d:df:78:0c:40:32:d1:b7:93:97:41:41:08:00:ce:00:28:de:
         41:82:9a:5f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAVJRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI5
N2UxMTllYmU1MWEwMGQ2NTYwYWI3M2ZkNzljNTFhZGE0MDNmMTkwHhcNMjIwODE5
MTYxOTA1WhcNMjQwODE5MTYxOTA1WjAzMTEwLwYDVQQDEyg5YWI1MzRjNDk5N2Ey
ODMxZDFiMDg4ZDhlZWFkY2RkNTg0NmI4NGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlFuHEgvqIoQT0fdZPysni6naCWSCDNTcpL8fXlOCALkmNtic
2JCsQ8ywthuLaDs40FcDza4Jevp/sOodM/bUCnw+dR9KS9XVAHDOrGnvnehBy0Fn
MuzqI5YCsRfIOUwvgdcGhCA3FPLT9TBBHfGbIHN5IKOEFIouPdTpMP3s0TjQ7Gyh
n8+DowzmFXn6Np8wEBfhGd2le7Vf0XtvlCEhlQL54q8NCEjTOdZBaeL6JPh8LwRT
k5IYOdJnFxs+yJdIyWbXSvqNjb/5YeQXFTV2fcOtBep/eaFaQdpAKKWNy0Ecyoao
3RNXTj658B4gflX7AmgJiRa5GD9smTxZQax+zwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFB0SIIJg2pSPyEjfZzAGCMMny3GWMB8GA1UdIwQYMBaAFAcJN4jtSoDCDN7O
EKf/uzEhonKeMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjk3ZTEx
OWViZTUxYTAwZDY1NjBhYjczZmQ3OWM1MWFkYTQwM2YxOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGQ4ZGYwZjAtNDFjNC00MDFkLWFjMTUtZGUwZGI0
MGFjOWNiLzlhYjUzNGM0OTk3YTI4MzFkMWIwODhkOGVlYWRjZGQ1ODQ2Yjg0ZDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZDhkZjBmMC00MWM0LTQwMWQtYWMxNS1kZTBk
YjQwYWM5Y2IvMjk3ZTExOWViZTUxYTAwZDY1NjBhYjczZmQ3OWM1MWFkYTQwM2Yx
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALMrfDANBgkqhkiG9w0BAQsFAAOCAQEAiC4pFCPTdadw8y4a
3Ab0qzp/ytAv64tBVTnI4ZXB4LWdPJNdmUVyuKq1TRi1oqeaSmZjxgQDR6jQpB9h
+EDYmJLbus1TufX5YqH+aDQbjAcoR/um0uHRztAYRWTShZDNiN0EHI9zssWnSg3f
GrLWg03chkUFkVr9cxtXT/f7zHkSqvkWKJP9u2/XkSm2IE6Hnjl2DW+60E717gQf
nJL4s1ssszQ5G9rq6Acw1JSY12JK4Fx5Zgl+aZFTZy1mMtJDkeLLhR3QQKlgvIOo
QWYtxkde8Z7T6dZZujyLpZ+2XA4k4qQjEsdJAzPSLd94DEAy0beTl0FBCADOACje
QYKaXw==
-----END CERTIFICATE-----
Generated at Thu Mar 28 19:40:25 2024 by rpki-client on console-fra.rpki-client.org