Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53c2672f-be63-4844-b22c-2f3ec7ebe019/93627afae94012723b61c5a502d60134e6b99e9b.roa
File:                     93627afae94012723b61c5a502d60134e6b99e9b.roa (raw, json)
Hash identifier:          kEMRzSC2cb9BudzfBwGcA1IOXGV6kX4/8vat48Ky7cM=
Subject key identifier:   48:F7:89:79:B7:7D:33:6B:A6:3F:FF:3E:CA:86:D5:E9:21:7A:42:D7
Certificate issuer:       /CN=106d55ca19c313f01d291eec87f7cd72f889010e
Certificate serial:       07549B
Authority key identifier: 24:01:7E:A5:9F:BB:C2:90:95:0D:4D:7A:F3:8C:86:4B:7D:43:CB:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/106d55ca19c313f01d291eec87f7cd72f889010e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53c2672f-be63-4844-b22c-2f3ec7ebe019/93627afae94012723b61c5a502d60134e6b99e9b.roa
Signing time:             Wed 24 Mar 2021 14:36:42 +0000
ROA not before:           Wed 24 Mar 2021 14:36:38 +0000
ROA not after:            Tue 24 Mar 2026 14:36:38 +0000
asID:                     19429
IP address blocks:        2801:18a::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/53c2672f-be63-4844-b22c-2f3ec7ebe019/106d55ca19c313f01d291eec87f7cd72f889010e.crl
                          rsync://repository.lacnic.net/rpki/lacnic/53c2672f-be63-4844-b22c-2f3ec7ebe019/106d55ca19c313f01d291eec87f7cd72f889010e.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/106d55ca19c313f01d291eec87f7cd72f889010e.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480411 (0x7549b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106d55ca19c313f01d291eec87f7cd72f889010e
        Validity
            Not Before: Mar 24 14:36:38 2021 GMT
            Not After : Mar 24 14:36:38 2026 GMT
        Subject: CN=93627afae94012723b61c5a502d60134e6b99e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6a:84:44:91:d4:b5:73:0f:2a:b8:e2:57:c1:
                    c4:07:ca:01:6f:a4:e3:92:a7:75:d1:43:e4:02:92:
                    a3:5c:f8:c9:99:85:e4:c9:b7:dd:c1:88:8b:a4:73:
                    93:c2:54:b3:c1:4a:0f:96:94:8f:a1:4b:0f:69:2e:
                    9c:c7:52:fd:a8:ae:fc:af:1c:e4:ce:b9:11:96:94:
                    50:5b:62:42:de:ed:08:f4:a8:99:ce:2e:ed:e5:21:
                    a7:9a:3a:65:80:d3:1e:dc:14:c3:8b:d0:91:27:50:
                    b7:ea:31:f9:51:95:1f:2b:4b:8c:9f:44:cc:ef:4d:
                    5f:76:1e:5d:f8:8e:cd:4e:98:9c:ad:81:7c:61:6a:
                    9b:d5:6f:6b:f8:98:d1:3f:c2:d5:31:32:4f:15:0c:
                    14:77:93:82:c4:fc:4e:4e:e2:2a:08:36:10:57:57:
                    aa:03:d2:d4:45:3b:77:bc:ca:c7:f2:de:46:b4:25:
                    55:28:c0:09:88:91:c5:5c:7f:a4:b0:17:db:5b:61:
                    a9:61:0f:47:e6:7f:c4:f3:ac:4b:47:1a:24:0b:85:
                    b6:6d:83:b6:29:76:f4:10:d4:cd:b4:de:c9:a1:92:
                    76:c8:89:eb:6f:63:18:86:31:1b:7a:3b:34:e9:66:
                    b4:d9:38:6c:b1:69:e6:ea:9b:97:70:d9:f8:70:60:
                    d9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F7:89:79:B7:7D:33:6B:A6:3F:FF:3E:CA:86:D5:E9:21:7A:42:D7
            X509v3 Authority Key Identifier:
                keyid:24:01:7E:A5:9F:BB:C2:90:95:0D:4D:7A:F3:8C:86:4B:7D:43:CB:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/106d55ca19c313f01d291eec87f7cd72f889010e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53c2672f-be63-4844-b22c-2f3ec7ebe019/93627afae94012723b61c5a502d60134e6b99e9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53c2672f-be63-4844-b22c-2f3ec7ebe019/106d55ca19c313f01d291eec87f7cd72f889010e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18a::/44

    Signature Algorithm: sha256WithRSAEncryption
         24:78:38:48:6f:7c:6c:eb:df:19:a2:c6:f8:1c:98:32:8b:02:
         d5:d5:ce:f5:4d:f1:d0:73:39:e7:07:65:79:9f:8d:e6:59:c2:
         e8:d1:75:69:da:ad:54:c9:d9:27:c5:67:09:97:18:d5:64:0a:
         43:39:5a:d8:b5:d6:45:d2:d4:a0:d0:29:74:7c:d4:ef:b5:7e:
         ee:79:b5:92:30:14:f3:04:21:af:fe:de:7c:93:8c:8b:8c:94:
         65:20:94:70:fa:11:fd:3a:0d:bb:38:8a:ce:22:ae:32:07:ab:
         f8:96:4c:3d:1f:f9:a8:31:fe:06:ae:cb:ea:a3:d4:4a:e5:a7:
         0a:e9:9c:cc:06:c5:2d:51:60:63:ca:3a:f7:0d:8c:d2:65:ec:
         64:d6:d3:33:6d:a6:78:19:e0:33:28:09:1e:be:aa:8a:d9:35:
         6a:ff:0c:0f:0f:6d:62:d9:99:ea:de:ec:28:a6:c2:e6:7d:41:
         47:b4:fa:54:80:10:d9:f3:ad:88:8f:92:5c:10:a1:0c:68:9c:
         40:4f:8b:aa:41:e8:14:a7:92:3c:a0:d2:45:89:5b:ea:b3:76:
         1b:cf:7b:37:05:92:e9:11:cc:5e:f7:1a:b7:17:1e:c4:1b:76:
         c3:5f:b4:d8:f2:bf:8b:3e:1a:9b:05:b7:4b:8c:d2:cb:2e:1f:
         3c:ee:9a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 11:05:05 2024 by rpki-client on console-ams.rpki-client.org