Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/d558603aeee7aaa3aa4d3b1abd277ac0acc6d772.roa
File:                     d558603aeee7aaa3aa4d3b1abd277ac0acc6d772.roa (raw, json)
Hash identifier:          jYda9LljIlMWtMX09D9790PZ4Z7PK9lhEMC6WnitxZA=
Subject key identifier:   38:F2:BD:49:35:7C:7C:A7:13:71:24:7A:E3:84:B9:3B:4C:80:69:CF
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       014795
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/d558603aeee7aaa3aa4d3b1abd277ac0acc6d772.roa
Signing time:             Wed 14 Sep 2022 14:26:11 +0000
ROA not before:           Fri 19 Aug 2022 16:19:05 +0000
ROA not after:            Mon 19 Aug 2024 16:19:05 +0000
asID:                     27823
IP address blocks:        179.43.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83861 (0x14795)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:19:05 2022 GMT
            Not After : Aug 19 16:19:05 2024 GMT
        Subject: CN=d558603aeee7aaa3aa4d3b1abd277ac0acc6d772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:55:13:2b:58:c0:01:2f:34:bd:af:d7:f2:cd:
                    21:33:2f:b2:14:00:40:0b:1a:ca:83:21:d8:a9:d4:
                    d1:d0:91:62:4d:1e:ff:6a:98:e5:88:a2:c5:d5:a3:
                    dd:f2:0a:fe:70:ca:3e:bc:dd:71:10:d0:da:88:48:
                    03:a4:07:af:f4:71:0a:b5:48:e0:71:5f:68:aa:63:
                    fa:5d:f1:79:37:6c:55:5d:99:a6:43:25:c2:c3:ce:
                    e5:43:6d:1e:e7:f4:34:ca:ba:45:81:db:84:cb:6f:
                    7b:eb:ae:58:ad:5a:1f:68:e1:d1:9b:3c:9a:26:7f:
                    90:d4:62:dd:1b:bc:7c:db:96:18:81:0f:66:3c:58:
                    8e:24:cd:c6:10:2c:7f:ad:4b:be:d7:6b:0e:f3:dc:
                    d8:1a:a0:62:92:f0:22:1a:40:4b:4c:50:6b:24:6f:
                    8a:6d:9b:b1:78:c8:40:3f:2f:e0:e7:dc:18:4a:b6:
                    8d:7a:fb:59:01:42:cf:15:ee:e5:67:d4:80:51:af:
                    f5:7c:ed:5c:6f:a7:3f:fe:bc:32:c6:d4:a8:39:0b:
                    1e:dc:65:19:19:51:38:0a:78:dd:bd:99:c0:4b:b1:
                    4c:ff:a8:72:3e:16:78:53:f8:ee:c5:a9:59:c1:21:
                    74:81:fc:96:ac:08:bc:d8:a6:27:20:03:52:8a:c5:
                    01:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F2:BD:49:35:7C:7C:A7:13:71:24:7A:E3:84:B9:3B:4C:80:69:CF
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/d558603aeee7aaa3aa4d3b1abd277ac0acc6d772.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:35:ab:73:99:4c:36:f1:63:56:71:46:89:d4:61:c8:af:09:
         95:ac:e7:04:a9:fc:65:20:17:d8:02:c4:fc:22:c6:84:ce:20:
         91:b3:a2:ee:4d:f0:33:01:bb:6a:03:8c:7e:56:30:94:73:bf:
         82:48:5f:a5:1f:cc:fe:81:cb:43:8f:cd:5a:48:81:41:0a:3b:
         f3:86:72:a1:1a:d1:89:39:e2:8c:e4:05:b0:30:0e:c7:bd:f2:
         00:21:5a:0a:47:4b:96:38:1a:54:0b:a4:2e:9c:6c:71:04:de:
         35:ef:19:ec:61:0d:e7:bc:1f:bc:a0:03:18:5c:92:81:3d:43:
         75:53:ad:c7:c2:a3:9c:da:ee:db:f3:c4:d4:1e:68:61:c1:02:
         0a:de:e3:8f:d8:7d:63:f6:c6:40:65:ff:b8:26:c2:73:35:89:
         6d:45:01:56:d3:69:03:2b:3b:0f:b4:fe:f9:3c:e3:45:a6:7a:
         57:fc:c8:70:01:20:4d:ea:af:36:59:30:6d:74:c7:ac:7e:c4:
         f3:a8:b1:bb:2d:a6:dd:25:72:a2:3f:92:bf:fb:17:ae:19:22:
         1a:4d:4b:ed:0e:29:c7:4a:ef:d9:24:30:10:4d:f4:81:5a:53:
         90:c6:92:7e:ea:20:72:ad:cc:27:39:89:f4:03:d9:82:4b:39:
         00:9d:e9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 11:17:43 2024 by rpki-client on console-fra.rpki-client.org