Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4f2f36f6-36b9-4cca-8422-d63c900457fe/016e7f37a34fb64f7de7a25f2911fcb2cee5ba98.roa
File:                     016e7f37a34fb64f7de7a25f2911fcb2cee5ba98.roa (raw, json)
Hash identifier:          aSjolsa4SspYM+kVV+NZ/lXA/wP0WJFA9CKS8eU6wig=
Subject key identifier:   B4:DC:3C:B0:F2:06:50:64:D7:03:FE:9F:D4:A2:2F:78:B9:3E:67:4D
Certificate issuer:       /CN=bee92c51e9c67fe64edca7f74df96052de7a6d98
Certificate serial:       0D82EC
Authority key identifier: B7:A2:D8:12:B4:F3:C7:E9:D8:94:C9:59:BE:EB:B3:50:E3:39:90:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bee92c51e9c67fe64edca7f74df96052de7a6d98.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4f2f36f6-36b9-4cca-8422-d63c900457fe/016e7f37a34fb64f7de7a25f2911fcb2cee5ba98.roa
Signing time:             Wed 24 Mar 2021 14:36:16 +0000
ROA not before:           Wed 24 Mar 2021 14:36:16 +0000
ROA not after:            Tue 24 Mar 2026 14:36:16 +0000
asID:                     266816
IP address blocks:        45.233.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4f2f36f6-36b9-4cca-8422-d63c900457fe/bee92c51e9c67fe64edca7f74df96052de7a6d98.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4f2f36f6-36b9-4cca-8422-d63c900457fe/bee92c51e9c67fe64edca7f74df96052de7a6d98.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bee92c51e9c67fe64edca7f74df96052de7a6d98.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 19:29:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 885484 (0xd82ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bee92c51e9c67fe64edca7f74df96052de7a6d98
        Validity
            Not Before: Mar 24 14:36:16 2021 GMT
            Not After : Mar 24 14:36:16 2026 GMT
        Subject: CN=016e7f37a34fb64f7de7a25f2911fcb2cee5ba98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:79:bd:1b:9c:7e:da:aa:c0:ec:3d:23:06:86:
                    b3:67:86:8f:be:a9:13:03:df:c6:c6:52:7a:54:1f:
                    d8:66:5b:e6:89:4d:c9:ff:56:5e:5f:3f:df:c6:59:
                    00:73:d4:8b:04:89:f1:1d:96:a7:12:42:f3:11:bb:
                    97:7a:91:e5:7c:78:97:ad:3e:dd:d7:53:5e:67:77:
                    cf:c7:eb:1d:3f:db:1e:03:2c:40:d9:2b:c6:13:70:
                    d6:99:bc:b3:8e:91:b6:13:a2:2d:12:35:f0:43:dd:
                    c3:1e:94:41:e9:36:db:68:71:85:b5:bb:0c:79:3d:
                    7b:60:71:65:41:2a:48:95:34:6d:c7:06:de:36:db:
                    73:1f:74:a0:55:db:15:98:a6:4e:d5:e6:24:49:6b:
                    b1:91:53:20:1f:ae:3b:91:7c:f1:24:6d:64:08:1a:
                    54:0b:6d:5d:fa:8e:0e:48:2b:b1:d7:eb:df:91:50:
                    0d:10:7c:ff:90:ad:bd:90:fe:f8:ec:47:70:03:74:
                    d6:e3:a6:05:45:32:84:ac:fe:65:9e:bd:14:08:23:
                    40:1e:df:da:20:23:91:8e:bb:a1:84:af:42:88:00:
                    53:45:6f:8e:52:31:6a:20:86:a9:42:29:b4:5b:09:
                    b5:b7:ab:b3:d8:bd:2b:7a:3c:f3:fa:2d:a1:14:60:
                    ff:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DC:3C:B0:F2:06:50:64:D7:03:FE:9F:D4:A2:2F:78:B9:3E:67:4D
            X509v3 Authority Key Identifier:
                keyid:B7:A2:D8:12:B4:F3:C7:E9:D8:94:C9:59:BE:EB:B3:50:E3:39:90:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bee92c51e9c67fe64edca7f74df96052de7a6d98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4f2f36f6-36b9-4cca-8422-d63c900457fe/016e7f37a34fb64f7de7a25f2911fcb2cee5ba98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4f2f36f6-36b9-4cca-8422-d63c900457fe/bee92c51e9c67fe64edca7f74df96052de7a6d98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:00:1e:91:ef:2d:1f:14:fe:5b:32:af:ae:e0:44:f6:2f:ed:
         e3:74:b3:1c:c7:fa:7b:43:f1:d8:f1:14:9b:b7:78:0c:fd:09:
         e3:58:2c:8a:52:f5:e3:66:16:5f:c2:6e:22:26:6a:ce:0b:03:
         1f:b1:08:b1:5e:62:c2:2e:60:5e:07:de:3b:74:a7:a8:7b:02:
         45:cd:cb:0c:22:fc:84:3d:c3:c6:78:53:44:6e:a3:ae:ec:cf:
         e0:35:b1:58:26:cf:93:ca:93:bb:34:18:e9:b5:1b:a0:ab:dd:
         7e:71:3d:dc:f7:0f:6b:d6:cd:0c:e1:2f:13:01:a5:53:62:59:
         2c:07:2f:13:1e:95:a5:c7:f5:24:05:da:08:50:86:84:a1:6f:
         17:58:ff:5f:c9:d8:42:09:3e:31:04:de:34:b1:76:88:58:b4:
         df:33:92:6f:6a:00:73:6c:3c:43:95:dc:38:cb:a7:a8:5b:2d:
         1a:82:d8:9e:a6:35:7f:28:b0:5b:8a:0c:42:2e:dd:03:4d:7f:
         1a:6f:fc:30:fe:f2:94:04:f9:48:71:af:40:f7:8a:bd:c8:c6:
         21:cd:9c:fe:33:b8:dc:7b:c7:30:e0:0f:74:6a:c9:ec:36:41:
         7d:0e:85:f4:1e:ab:64:88:5c:32:eb:98:69:66:d4:0a:c8:cf:
         28:e8:e7:7d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDYLsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJl
ZTkyYzUxZTljNjdmZTY0ZWRjYTdmNzRkZjk2MDUyZGU3YTZkOTgwHhcNMjEwMzI0
MTQzNjE2WhcNMjYwMzI0MTQzNjE2WjAzMTEwLwYDVQQDEygwMTZlN2YzN2EzNGZi
NjRmN2RlN2EyNWYyOTExZmNiMmNlZTViYTk4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjXm9G5x+2qrA7D0jBoazZ4aPvqkTA9/GxlJ6VB/YZlvmiU3J
/1ZeXz/fxlkAc9SLBInxHZanEkLzEbuXepHlfHiXrT7d11NeZ3fPx+sdP9seAyxA
2SvGE3DWmbyzjpG2E6ItEjXwQ93DHpRB6TbbaHGFtbsMeT17YHFlQSpIlTRtxwbe
NttzH3SgVdsVmKZO1eYkSWuxkVMgH647kXzxJG1kCBpUC21d+o4OSCux1+vfkVAN
EHz/kK29kP747EdwA3TW46YFRTKErP5lnr0UCCNAHt/aICORjruhhK9CiABTRW+O
UjFqIIapQim0Wwm1t6uz2L0rejzz+i2hFGD/NwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLTcPLDyBlBk1wP+n9SiL3i5PmdNMB8GA1UdIwQYMBaAFLei2BK088fp2JTJ
Wb7rs1DjOZCWMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmVlOTJj
NTFlOWM2N2ZlNjRlZGNhN2Y3NGRmOTYwNTJkZTdhNmQ5OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGYyZjM2ZjYtMzZiOS00Y2NhLTg0MjItZDYzYzkw
MDQ1N2ZlLzAxNmU3ZjM3YTM0ZmI2NGY3ZGU3YTI1ZjI5MTFmY2IyY2VlNWJhOTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZjJmMzZmNi0zNmI5LTRjY2EtODQyMi1kNjNj
OTAwNDU3ZmUvYmVlOTJjNTFlOWM2N2ZlNjRlZGNhN2Y3NGRmOTYwNTJkZTdhNmQ5
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3pqDANBgkqhkiG9w0BAQsFAAOCAQEAkAAeke8tHxT+WzKv
ruBE9i/t43SzHMf6e0Px2PEUm7d4DP0J41gsilL142YWX8JuIiZqzgsDH7EIsV5i
wi5gXgfeO3SnqHsCRc3LDCL8hD3DxnhTRG6jruzP4DWxWCbPk8qTuzQY6bUboKvd
fnE93PcPa9bNDOEvEwGlU2JZLAcvEx6Vpcf1JAXaCFCGhKFvF1j/X8nYQgk+MQTe
NLF2iFi03zOSb2oAc2w8Q5XcOMunqFstGoLYnqY1fyiwW4oMQi7dA01/Gm/8MP7y
lAT5SHGvQPeKvcjGIc2c/jO43HvHMOAPdGrJ7DZBfQ6F9B6rZIhcMuuYaWbUCsjP
KOjnfQ==
-----END CERTIFICATE-----
Generated at Sat Apr 13 04:17:29 2024 by rpki-client on console-ams.rpki-client.org