Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/f93cea4c165f70e3207ab41073f626179ceb3340.roa
File:                     f93cea4c165f70e3207ab41073f626179ceb3340.roa (raw, json)
Hash identifier:          TsI2KV52hI4CyVzM90onAu2vjmTpdPy5RWPVRtS6Z9U=
Subject key identifier:   FD:E6:E4:12:03:2A:8D:19:A5:8E:80:3F:79:B2:93:83:1C:03:9C:70
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       129935
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/f93cea4c165f70e3207ab41073f626179ceb3340.roa
Signing time:             Wed 29 Nov 2023 21:34:34 +0000
ROA not before:           Wed 29 Nov 2023 21:34:34 +0000
ROA not after:            Sat 29 Nov 2025 21:34:34 +0000
asID:                     22927
IP address blocks:        201.251.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Apr 2024 06:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1218869 (0x129935)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Nov 29 21:34:34 2023 GMT
            Not After : Nov 29 21:34:34 2025 GMT
        Subject: CN=f93cea4c165f70e3207ab41073f626179ceb3340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:78:92:05:df:42:4e:0c:94:ae:af:74:9d:6b:
                    f0:2c:5a:47:a8:40:10:f3:de:66:12:a2:4b:1a:c4:
                    d2:11:74:31:97:a2:a4:de:ad:55:3b:a8:42:79:e2:
                    de:7e:41:0b:31:cc:8e:5a:c1:cb:03:ab:4a:bd:ab:
                    b5:89:a1:6b:89:c2:25:4b:f1:4e:fa:96:71:c2:4e:
                    65:85:2e:d6:07:b0:74:95:c5:89:4e:b3:9b:25:4d:
                    f3:af:58:5e:04:c6:cb:85:39:cd:02:08:ae:1a:8f:
                    6f:6f:ef:e1:53:3e:7e:07:e6:74:a1:94:a4:b0:df:
                    04:52:e0:28:2c:11:8c:a5:ce:0e:cd:7a:3e:ec:43:
                    e7:87:ed:ac:a2:ad:45:a4:f2:e8:47:32:b8:2d:81:
                    45:75:f4:de:cf:d0:a6:6f:3e:2f:b3:72:a6:e1:b2:
                    2f:62:68:d2:d5:71:1d:79:26:4a:8e:53:1c:b1:34:
                    a7:3a:df:0c:36:d8:bc:77:67:96:ab:a7:63:1b:e8:
                    01:30:38:4e:4a:f6:5d:7f:b8:4e:10:da:4c:51:9a:
                    4c:d6:c8:26:32:d7:80:29:a5:4c:44:5f:64:b2:0a:
                    24:11:1c:07:b0:39:68:e0:38:76:2b:8a:e9:32:39:
                    1c:ba:80:76:6a:ed:5e:0f:2f:5f:b6:37:9e:44:da:
                    b5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E6:E4:12:03:2A:8D:19:A5:8E:80:3F:79:B2:93:83:1C:03:9C:70
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/f93cea4c165f70e3207ab41073f626179ceb3340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.251.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         23:f9:36:42:73:93:bb:ba:c2:01:1e:2d:e1:dd:e8:25:0e:8a:
         a5:dc:64:92:4c:b9:f1:12:d8:3e:bf:00:83:23:25:d1:1c:21:
         f2:04:db:37:97:82:ed:cd:64:bd:b9:76:6c:ab:33:24:d4:d6:
         3e:90:58:20:92:26:2a:2e:2e:e3:ce:08:ff:60:8e:9e:b1:1a:
         fc:e5:56:c1:ee:52:b6:47:64:80:2b:25:b8:e0:2d:af:52:89:
         85:87:93:45:0d:e5:ac:46:9c:e7:c1:08:ab:e4:56:e8:42:d7:
         36:6f:b5:0c:a6:c7:bb:9c:be:ef:e5:10:b1:fc:25:7e:e5:8f:
         8e:eb:39:af:48:1d:c2:8d:e6:43:24:f2:1c:7b:6a:c0:af:24:
         c9:fd:ab:16:2d:35:a2:ba:80:3f:df:bf:2d:84:46:90:28:71:
         47:81:e8:73:f6:27:66:5c:8d:b0:a3:bf:4a:67:c2:e2:72:b0:
         93:00:9c:c3:ba:0d:b4:60:8a:b9:6f:e6:e7:7b:18:61:c1:c2:
         b1:df:af:3c:c5:2a:eb:23:80:2f:2c:08:d6:af:3c:04:36:af:
         95:e7:e0:51:bf:d5:17:07:a1:74:20:05:76:a5:e7:79:d9:bb:
         e0:b3:3f:8f:cb:1c:7f:ef:55:80:21:ff:07:6b:e8:6f:dd:2f:
         19:00:14:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 10:07:20 2024 by rpki-client on console-fra.rpki-client.org