Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4f727fd8-bab8-4e88-86dc-0e2e8ad48ebb/862b5d3c92a30467b61516b49b3ffd332dfed6b1.roa
File:                     862b5d3c92a30467b61516b49b3ffd332dfed6b1.roa (raw, json)
Hash identifier:          hAAWUjB/8RQZWl63a2nYq8a5pl/fTYcUdD2pi2+M1EM=
Subject key identifier:   01:BB:8D:5F:65:FE:B7:B0:DF:47:89:0D:ED:07:FE:E0:08:4F:ED:46
Certificate issuer:       /CN=e84f15bb8fc65ad58e3221ec58ae660440f51d9b
Certificate serial:       0D74EF
Authority key identifier: 47:A9:44:70:25:77:92:94:9E:17:93:CD:BC:31:49:8C:70:58:9E:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e84f15bb8fc65ad58e3221ec58ae660440f51d9b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4f727fd8-bab8-4e88-86dc-0e2e8ad48ebb/862b5d3c92a30467b61516b49b3ffd332dfed6b1.roa
Signing time:             Wed 24 Mar 2021 14:33:00 +0000
ROA not before:           Wed 24 Mar 2021 14:33:00 +0000
ROA not after:            Tue 24 Mar 2026 14:33:00 +0000
asID:                     263709
IP address blocks:        201.131.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4f727fd8-bab8-4e88-86dc-0e2e8ad48ebb/e84f15bb8fc65ad58e3221ec58ae660440f51d9b.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4f727fd8-bab8-4e88-86dc-0e2e8ad48ebb/e84f15bb8fc65ad58e3221ec58ae660440f51d9b.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e84f15bb8fc65ad58e3221ec58ae660440f51d9b.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Feb 2024 15:25:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881903 (0xd74ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84f15bb8fc65ad58e3221ec58ae660440f51d9b
        Validity
            Not Before: Mar 24 14:33:00 2021 GMT
            Not After : Mar 24 14:33:00 2026 GMT
        Subject: CN=862b5d3c92a30467b61516b49b3ffd332dfed6b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1b:51:69:b5:87:64:e4:83:27:18:b1:12:85:
                    c4:92:a5:95:f0:2a:20:60:67:28:81:49:0b:33:1e:
                    d6:59:2a:3d:80:ef:49:0b:8d:77:bb:2c:b6:4c:f2:
                    a8:88:2e:eb:b7:97:ae:59:8c:67:4e:b0:e3:16:4b:
                    63:ab:fd:23:a5:dc:26:2b:d3:d4:79:8e:96:96:5f:
                    a5:af:27:56:df:eb:75:f4:5a:78:e1:c7:40:56:c8:
                    23:34:40:98:9c:21:6c:11:21:f3:1c:f2:72:7f:e6:
                    77:8e:79:a1:8c:64:ce:16:0f:78:ea:30:59:16:db:
                    0b:4a:7c:4f:7b:27:90:f9:6c:45:09:5a:9e:fe:58:
                    43:aa:5c:dd:5e:29:d4:80:10:2b:de:bc:ae:6b:26:
                    63:9c:eb:6d:af:88:53:5b:c5:45:e8:79:b2:d8:c4:
                    09:b9:f1:06:8d:23:f5:d8:b3:b3:35:eb:d2:31:98:
                    9f:a5:82:62:dc:ac:c5:63:34:7d:51:a5:d3:13:b9:
                    4d:4f:11:05:8a:af:55:0c:51:8b:d5:76:74:c7:4b:
                    ac:29:1c:f9:10:ea:ac:83:ee:b6:55:ba:e8:05:27:
                    bb:1c:fa:13:9f:a4:20:30:1d:45:48:44:0d:35:6f:
                    45:bf:47:84:7e:1e:15:3e:07:20:bd:ac:9a:cd:02:
                    15:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BB:8D:5F:65:FE:B7:B0:DF:47:89:0D:ED:07:FE:E0:08:4F:ED:46
            X509v3 Authority Key Identifier:
                keyid:47:A9:44:70:25:77:92:94:9E:17:93:CD:BC:31:49:8C:70:58:9E:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e84f15bb8fc65ad58e3221ec58ae660440f51d9b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4f727fd8-bab8-4e88-86dc-0e2e8ad48ebb/862b5d3c92a30467b61516b49b3ffd332dfed6b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4f727fd8-bab8-4e88-86dc-0e2e8ad48ebb/e84f15bb8fc65ad58e3221ec58ae660440f51d9b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:b3:44:6b:19:47:56:b7:30:ec:5d:d2:74:eb:82:57:26:78:
         96:30:13:98:1c:41:46:a4:a0:87:f6:ad:07:3d:20:30:21:38:
         ce:43:b3:75:99:70:83:68:1b:40:2d:4a:19:d1:eb:97:7c:24:
         79:63:df:0a:76:78:70:64:71:7f:45:49:d0:71:12:c8:3c:23:
         96:ef:64:77:4e:91:7b:3e:56:4f:87:9b:4f:a0:77:a8:e3:5a:
         d8:da:87:35:45:72:8c:eb:ca:56:0d:53:df:d8:9b:58:cb:54:
         73:86:1d:d2:b9:17:c1:a9:2b:35:56:85:a0:78:ef:45:46:21:
         ff:58:24:da:d7:4a:96:46:02:08:92:34:e0:c5:d8:5b:d3:2b:
         5d:22:8e:24:9f:d8:d2:6b:cc:97:b5:04:64:26:86:8e:d1:21:
         59:3d:1b:05:a6:04:8a:75:24:7d:41:ca:0d:46:6f:2e:f4:10:
         16:b4:35:91:7f:de:73:e8:67:d7:09:c5:31:ce:33:39:b7:64:
         f6:05:72:9c:bd:73:47:8f:c3:57:05:1b:37:07:96:0b:16:5a:
         07:1d:d7:74:18:9a:0c:98:c0:cf:8e:e3:d4:ee:4f:14:ba:25:
         23:0c:da:3a:80:a6:8c:96:a4:b0:3b:a0:b6:ea:4c:75:02:a9:
         8f:11:d7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 17:08:50 2024 by rpki-client on console-ams.rpki-client.org