Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/fcabb0f68fe33321c78c099a40f990615c3efe1c.roa
File:                     fcabb0f68fe33321c78c099a40f990615c3efe1c.roa (raw, json)
Hash identifier:          1D9YpIMKyPShkwkohlDIwAdLDQwKNl1FHN/PJhCTtR8=
Subject key identifier:   FE:FD:05:16:9B:C9:25:28:D9:40:44:C1:1F:9C:6D:67:03:59:70:DB
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       0108AB
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/fcabb0f68fe33321c78c099a40f990615c3efe1c.roa
Signing time:             Wed 14 Sep 2022 14:08:37 +0000
ROA not before:           Fri 19 Aug 2022 16:17:39 +0000
ROA not after:            Mon 19 Aug 2024 16:17:39 +0000
asID:                     27823
IP address blocks:        168.181.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Mar 2024 16:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67755 (0x108ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:17:39 2022 GMT
            Not After : Aug 19 16:17:39 2024 GMT
        Subject: CN=fcabb0f68fe33321c78c099a40f990615c3efe1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a5:fb:6e:4d:f7:fe:66:73:a9:cd:a3:8d:52:
                    99:b8:ff:6a:75:de:1e:0b:31:63:48:51:8c:1f:29:
                    b9:93:14:15:be:c8:b4:f3:f9:a7:04:6c:77:0b:29:
                    4e:09:9c:72:e1:90:e1:c9:1b:84:16:97:7e:09:ec:
                    cb:ea:35:72:38:9b:66:07:2b:59:dc:57:45:2c:d7:
                    62:5e:ac:d3:05:03:a7:64:7d:3b:55:18:dd:81:92:
                    8b:2b:ea:7f:7d:6c:dd:c5:85:26:bd:61:2d:cd:d2:
                    37:8f:44:ce:ff:a2:ef:04:3f:0e:5d:44:22:2c:c4:
                    8c:ac:08:49:d8:9a:dc:27:d3:3e:67:af:e1:35:cd:
                    9d:33:c1:e8:a6:f4:cf:93:1b:55:43:78:63:9e:59:
                    3b:c7:d8:e9:c0:9d:4a:88:0d:0e:da:c7:e7:a6:ee:
                    d2:19:ab:9b:61:2e:8b:dc:d7:bd:f0:08:56:77:71:
                    1a:7d:e3:67:e1:de:4d:b1:e3:53:a9:8a:6a:9d:8b:
                    25:18:ad:f8:21:81:47:3b:18:48:97:ff:8a:7c:3c:
                    47:3a:3b:45:0d:4a:1d:b6:62:e0:b1:69:4e:b6:f7:
                    67:f2:39:87:34:42:91:99:bf:ef:50:21:63:6f:48:
                    a0:3b:55:d3:86:4e:d2:7f:27:1a:c6:0b:43:f7:10:
                    f2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FD:05:16:9B:C9:25:28:D9:40:44:C1:1F:9C:6D:67:03:59:70:DB
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/fcabb0f68fe33321c78c099a40f990615c3efe1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:48:ec:4a:37:8c:0b:f8:1a:1d:ed:cd:6f:a0:7d:86:60:46:
         a6:e7:bd:17:4c:69:c7:ef:61:a5:d4:e1:3b:05:aa:d9:ad:59:
         a3:41:6d:51:6b:26:35:86:e5:88:16:b6:db:16:ef:1c:b2:da:
         9f:61:ed:65:ed:8d:a2:b2:de:4f:76:90:ae:54:fb:6e:dc:e2:
         1e:e9:c1:06:86:4c:96:17:ba:7d:ee:30:30:79:33:c3:04:eb:
         ef:a3:02:5d:5d:1f:ac:ee:04:9f:32:19:a2:2b:e9:16:f3:fd:
         6c:8b:b7:94:fa:82:d5:86:ce:11:3b:d0:5d:85:23:5b:0f:1e:
         ec:2c:89:4f:b3:a8:8e:97:0e:b1:5a:e0:25:97:6d:0d:c8:d7:
         27:d5:2c:2c:e0:12:7d:a2:16:ec:c8:f0:c6:46:0b:1c:5f:20:
         ef:38:0e:c9:b0:1a:fe:c1:ba:ba:47:70:2c:3e:55:55:1b:fd:
         54:6e:55:c6:9a:b8:ef:cd:86:3d:1f:d1:e2:f7:76:d9:fd:53:
         03:71:7b:53:6e:e8:d0:c6:fa:cb:3c:32:a4:9e:a4:ff:5c:da:
         a8:fd:df:c3:47:de:52:85:ad:d5:09:24:65:ef:dc:5b:c0:aa:
         47:78:db:98:b3:9c:be:a9:72:48:57:65:da:b8:18:66:bf:a5:
         66:b6:b1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 00:11:50 2024 by rpki-client on console-fra.rpki-client.org