Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6103c90c-3085-4095-84dd-e731f76564ef/5fbd035099a17451914e38b884c777c340b85b3f.roa
File:                     5fbd035099a17451914e38b884c777c340b85b3f.roa (raw, json)
Hash identifier:          ZjT5A6OakPh1eUdtM3wfupIfBZEodGVZnj34ObIRYmE=
Subject key identifier:   23:2E:C5:28:47:22:36:90:52:C1:DF:72:4F:B0:88:A6:32:B4:9C:0C
Certificate issuer:       /CN=229214e4977b44c102f28d27dc38d7cc1296d50f
Certificate serial:       12B572
Authority key identifier: D7:67:31:CF:5B:94:3C:8A:2B:91:F7:71:52:57:7A:57:C9:FA:31:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/229214e4977b44c102f28d27dc38d7cc1296d50f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6103c90c-3085-4095-84dd-e731f76564ef/5fbd035099a17451914e38b884c777c340b85b3f.roa
Signing time:             Wed 27 Oct 2021 18:30:38 +0000
ROA not before:           Wed 27 Oct 2021 03:00:00 +0000
ROA not after:            Tue 27 Oct 2026 03:00:00 +0000
asID:                     266749
IP address blocks:        45.4.164.0/22 maxlen: 24
                          2803:76c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6103c90c-3085-4095-84dd-e731f76564ef/229214e4977b44c102f28d27dc38d7cc1296d50f.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6103c90c-3085-4095-84dd-e731f76564ef/229214e4977b44c102f28d27dc38d7cc1296d50f.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/229214e4977b44c102f28d27dc38d7cc1296d50f.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 17:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1226098 (0x12b572)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229214e4977b44c102f28d27dc38d7cc1296d50f
        Validity
            Not Before: Oct 27 03:00:00 2021 GMT
            Not After : Oct 27 03:00:00 2026 GMT
        Subject: CN=5fbd035099a17451914e38b884c777c340b85b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5f:2f:a0:f9:51:a3:75:11:5e:0c:45:f2:a7:
                    40:af:5b:68:27:2e:d9:e8:a4:32:88:e2:ca:e2:61:
                    0f:f7:c1:b1:cc:8d:61:a0:8e:98:64:35:c2:11:9e:
                    e6:32:b5:15:bf:1d:39:18:6d:05:ca:36:ba:f0:e4:
                    35:ab:a7:43:75:7c:0b:cc:c9:11:13:fd:77:ce:6b:
                    ab:fa:27:c1:d2:64:ae:34:97:5e:2e:18:61:68:f8:
                    27:06:61:6c:cd:20:e7:a5:c3:ef:b3:be:13:42:b7:
                    6e:a1:30:c6:90:35:fd:44:cb:e9:fe:ac:af:cb:5e:
                    03:d9:1c:ae:ea:52:a5:02:c6:ae:be:55:47:68:dc:
                    b5:62:7c:0a:94:6b:f1:2d:b2:c0:f7:ba:de:fd:57:
                    d3:22:6f:2f:2c:ac:d7:ac:3f:3d:7f:4c:ec:dd:f1:
                    a8:df:f1:4f:5c:74:dc:f9:9f:16:4f:34:3d:32:80:
                    ac:46:30:52:88:a0:dd:e6:23:ed:c9:7f:5a:8e:c0:
                    42:e5:07:8b:b4:5e:54:a3:50:6f:84:3a:98:f2:8a:
                    0e:99:c5:75:61:21:f0:f6:e1:c2:65:4a:6b:be:71:
                    48:99:f0:39:77:da:cb:5e:60:09:29:15:6f:83:5e:
                    0a:db:e8:9b:59:7a:41:83:b1:e6:11:c5:88:37:6e:
                    78:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2E:C5:28:47:22:36:90:52:C1:DF:72:4F:B0:88:A6:32:B4:9C:0C
            X509v3 Authority Key Identifier:
                keyid:D7:67:31:CF:5B:94:3C:8A:2B:91:F7:71:52:57:7A:57:C9:FA:31:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/229214e4977b44c102f28d27dc38d7cc1296d50f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6103c90c-3085-4095-84dd-e731f76564ef/5fbd035099a17451914e38b884c777c340b85b3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6103c90c-3085-4095-84dd-e731f76564ef/229214e4977b44c102f28d27dc38d7cc1296d50f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.164.0/22
                IPv6:
                  2803:76c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:f8:63:5b:da:d2:5c:60:02:93:ee:ef:9b:d1:b2:62:5c:63:
         4b:25:8b:87:85:85:d3:34:cc:f1:c5:0c:46:95:40:63:be:b8:
         6b:42:7c:c8:3a:03:a1:ea:4a:1e:82:a6:14:b9:d8:21:77:45:
         7d:8b:eb:9f:22:13:03:30:5b:9f:4e:dd:c5:0a:05:46:c5:69:
         2c:e1:f5:ab:1a:52:9b:17:b8:15:48:01:ee:0f:ab:88:ac:10:
         d0:7d:5b:b3:21:fb:7c:40:7a:81:77:99:18:1c:a4:ad:07:47:
         f9:2e:26:00:55:81:3d:7b:c3:e4:6b:0b:fd:d3:e2:cc:9e:5d:
         79:78:1c:d6:52:d9:30:2b:94:19:7d:ee:cb:51:df:50:33:58:
         7f:b0:fb:95:fb:f0:37:a4:3b:70:d4:47:2d:77:04:9d:b4:d1:
         43:a6:b2:73:05:0d:a1:9c:8e:0a:6d:71:55:48:41:47:05:51:
         3b:54:b1:a2:63:e4:d7:9a:db:cb:9d:d5:91:c8:12:9d:16:c9:
         15:ea:da:83:b2:0f:1e:55:c9:d7:83:cc:85:8b:50:ee:eb:b7:
         aa:cf:2c:95:ac:6c:8f:84:80:09:9b:3b:df:2d:5e:44:51:a9:
         1b:09:33:0b:60:65:c3:73:ea:64:19:1c:d4:3c:cd:b6:6f:d3:
         95:e6:5e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 21:30:33 2024 by rpki-client on console-ams.rpki-client.org