Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5dff71bb-2969-4454-b9d0-dde12fa6c765/ec1d410d43a9b7f498e9a28ed91e105ddbcb198c.roa
File:                     ec1d410d43a9b7f498e9a28ed91e105ddbcb198c.roa (raw, json)
Hash identifier:          m6OIo399FYWlXbhz+wWMQeDtR795/mIG1AIGIn1tFv0=
Subject key identifier:   88:BD:A2:4E:7D:75:3B:9D:BB:20:1D:39:24:F2:E9:14:DB:39:91:D8
Certificate issuer:       /CN=bcd70bfc3861eb7e019391a06760bc1fb909a8fe
Certificate serial:       0D3C9E
Authority key identifier: 1C:DB:01:BF:88:4C:7D:6F:F0:83:0E:BA:4E:1C:0C:DC:BF:7C:98:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcd70bfc3861eb7e019391a06760bc1fb909a8fe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5dff71bb-2969-4454-b9d0-dde12fa6c765/ec1d410d43a9b7f498e9a28ed91e105ddbcb198c.roa
Signing time:             Wed 24 Mar 2021 14:33:00 +0000
ROA not before:           Wed 24 Mar 2021 14:33:00 +0000
ROA not after:            Tue 24 Mar 2026 14:33:00 +0000
asID:                     11816
IP address blocks:        186.159.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5dff71bb-2969-4454-b9d0-dde12fa6c765/bcd70bfc3861eb7e019391a06760bc1fb909a8fe.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5dff71bb-2969-4454-b9d0-dde12fa6c765/bcd70bfc3861eb7e019391a06760bc1fb909a8fe.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcd70bfc3861eb7e019391a06760bc1fb909a8fe.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867486 (0xd3c9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcd70bfc3861eb7e019391a06760bc1fb909a8fe
        Validity
            Not Before: Mar 24 14:33:00 2021 GMT
            Not After : Mar 24 14:33:00 2026 GMT
        Subject: CN=ec1d410d43a9b7f498e9a28ed91e105ddbcb198c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6c:d4:9e:24:ac:05:48:3d:c8:53:20:49:cb:
                    79:7d:ee:df:1f:06:38:6d:2a:50:db:92:69:c7:8e:
                    5f:5a:7b:57:a7:7b:89:ff:c3:66:24:9c:6b:bf:60:
                    49:4e:7a:7d:6f:14:43:ee:4e:4b:f9:7c:f8:c7:9e:
                    73:03:02:c0:a8:4a:89:6e:c7:45:24:8f:d5:f0:7d:
                    bb:67:4e:70:33:bc:3f:57:3c:13:b5:73:64:5b:43:
                    cb:38:26:8a:7e:76:e8:25:84:ba:6e:83:4f:99:29:
                    4c:43:48:31:27:62:a8:1c:7b:e7:39:f8:39:2d:e7:
                    79:d8:67:9c:6e:c1:0d:41:24:d5:2b:ac:e3:d0:87:
                    ba:18:88:63:09:4b:c1:6c:f2:2d:c2:42:f5:e2:3b:
                    07:a5:ed:ff:d0:02:9a:b8:36:9d:17:9a:ba:ca:e3:
                    f8:b2:c7:18:52:2b:09:23:14:5c:f3:8f:70:43:96:
                    c8:5f:14:95:c7:ec:a5:43:da:ee:30:7b:e9:af:53:
                    d0:de:bc:1c:18:1a:c3:4e:85:52:4b:f4:25:4e:07:
                    02:e5:9d:fa:fb:b0:ec:00:f5:b8:48:47:7a:44:62:
                    e0:58:4c:3f:36:e8:f3:62:be:d0:31:fc:8e:cc:dd:
                    c0:5c:a3:47:bd:0d:a5:07:98:be:89:42:ab:2b:01:
                    7b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BD:A2:4E:7D:75:3B:9D:BB:20:1D:39:24:F2:E9:14:DB:39:91:D8
            X509v3 Authority Key Identifier:
                keyid:1C:DB:01:BF:88:4C:7D:6F:F0:83:0E:BA:4E:1C:0C:DC:BF:7C:98:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcd70bfc3861eb7e019391a06760bc1fb909a8fe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5dff71bb-2969-4454-b9d0-dde12fa6c765/ec1d410d43a9b7f498e9a28ed91e105ddbcb198c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5dff71bb-2969-4454-b9d0-dde12fa6c765/bcd70bfc3861eb7e019391a06760bc1fb909a8fe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:7a:34:d2:10:81:db:16:f4:79:fe:9a:ea:88:f1:da:67:d2:
         39:2c:53:71:a6:81:0a:42:68:68:d3:1e:a7:07:78:67:52:b3:
         e9:e2:64:bf:cd:af:db:f1:12:14:1e:78:f5:0b:13:89:9d:50:
         ef:ca:dd:08:6b:e7:ee:12:4e:bd:91:77:58:0a:4e:b1:1f:38:
         a2:09:4a:f0:f4:50:ca:82:6d:90:b1:70:1c:4e:e8:7a:1d:29:
         1a:07:e2:98:b0:4d:29:6c:0f:87:5d:56:7e:de:0e:ad:8a:3f:
         0c:ca:d4:78:8f:66:87:8c:48:92:35:10:74:d5:00:ae:bb:98:
         04:a5:57:c3:60:7f:f6:fc:f8:1b:79:27:ef:2c:a0:11:98:b5:
         20:31:4d:50:6b:26:e7:c4:18:4d:d3:27:c3:50:38:ef:6d:0f:
         f3:75:2b:ac:27:48:c0:0b:81:a4:be:77:9d:dd:f8:8a:d6:1c:
         7e:9b:b0:01:bc:87:c6:33:d9:28:3e:b7:fc:af:47:a0:18:d3:
         fa:af:63:01:9f:23:73:25:6c:05:91:7f:f6:d8:58:5e:53:7c:
         45:44:d3:09:77:8d:66:8b:c0:e9:5a:ba:7f:68:2d:0b:6e:04:
         d1:a7:d9:1c:34:ae:08:8d:fa:4b:91:a4:23:20:05:55:63:96:
         20:02:8b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 13:29:14 2024 by rpki-client on console-ams.rpki-client.org