Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61f10a77-bf40-4414-bd27-1137e5de28f6/93ff4f78212a8823eb8064f5674a522afdf89407.roa
File:                     93ff4f78212a8823eb8064f5674a522afdf89407.roa (raw, json)
Hash identifier:          0f992N0QCp/m58pcmQOSnSeLODLlizhiQ1RtSSMbSYM=
Subject key identifier:   51:20:3C:1C:2B:87:8C:74:BC:C2:89:C5:4E:A9:E9:4C:07:60:33:2B
Certificate issuer:       /CN=1a218671f562f7bf310bd8da78423d60e1395e66
Certificate serial:       0A90
Authority key identifier: 5F:84:68:E0:0B:3D:D5:A0:33:0B:6F:78:57:2A:6D:5D:05:B7:EA:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a218671f562f7bf310bd8da78423d60e1395e66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61f10a77-bf40-4414-bd27-1137e5de28f6/93ff4f78212a8823eb8064f5674a522afdf89407.roa
Signing time:             Fri 10 Jun 2022 20:57:03 +0000
ROA not before:           Fri 10 Jun 2022 03:00:00 +0000
ROA not after:            Wed 31 Dec 2025 03:00:00 +0000
asID:                     262191
IP address blocks:        2801:189::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61f10a77-bf40-4414-bd27-1137e5de28f6/1a218671f562f7bf310bd8da78423d60e1395e66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61f10a77-bf40-4414-bd27-1137e5de28f6/1a218671f562f7bf310bd8da78423d60e1395e66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a218671f562f7bf310bd8da78423d60e1395e66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Feb 2024 02:19:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2704 (0xa90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a218671f562f7bf310bd8da78423d60e1395e66
        Validity
            Not Before: Jun 10 03:00:00 2022 GMT
            Not After : Dec 31 03:00:00 2025 GMT
        Subject: CN=93ff4f78212a8823eb8064f5674a522afdf89407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f2:22:97:b7:a8:89:bf:c7:90:1b:9a:71:a7:
                    57:f2:93:16:e3:21:25:4a:89:2c:5c:f9:b4:3e:e7:
                    ca:2e:d1:45:01:10:f4:0b:dd:29:ab:22:70:5e:b4:
                    39:fe:86:dc:d5:1f:a0:16:a2:c4:57:2f:a4:a3:8c:
                    47:69:ae:51:9e:50:81:08:95:b0:1b:97:93:5d:3e:
                    3e:8a:fc:c7:8a:a8:26:87:46:11:a2:e5:90:10:4d:
                    c9:8d:c6:fc:85:ec:9a:66:e1:2d:66:02:42:da:d8:
                    db:2d:7a:b5:4a:53:92:62:ae:45:e2:9e:95:3f:76:
                    13:83:1e:e5:06:56:48:d7:ad:fb:64:0b:c3:54:f6:
                    74:6c:c3:73:7e:11:cd:77:4a:30:ea:44:3d:db:95:
                    a5:50:5a:f9:73:00:fe:2d:7a:c8:1b:91:3a:7a:9b:
                    13:ba:0c:fd:05:e3:55:68:8b:42:9b:ed:fe:e6:e1:
                    8c:65:0d:1c:de:17:14:85:eb:68:04:45:29:71:0a:
                    dd:46:08:8c:e9:89:94:0e:35:f8:68:99:8f:38:bd:
                    d5:3d:63:e2:77:40:e4:d9:06:ad:b9:64:16:77:36:
                    ba:4f:5a:4f:17:bb:bf:21:43:ad:ad:9c:bb:28:43:
                    5a:cf:10:ac:80:af:dc:f1:9c:1b:8b:9e:5a:65:6c:
                    3f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:20:3C:1C:2B:87:8C:74:BC:C2:89:C5:4E:A9:E9:4C:07:60:33:2B
            X509v3 Authority Key Identifier:
                keyid:5F:84:68:E0:0B:3D:D5:A0:33:0B:6F:78:57:2A:6D:5D:05:B7:EA:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a218671f562f7bf310bd8da78423d60e1395e66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61f10a77-bf40-4414-bd27-1137e5de28f6/93ff4f78212a8823eb8064f5674a522afdf89407.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61f10a77-bf40-4414-bd27-1137e5de28f6/1a218671f562f7bf310bd8da78423d60e1395e66.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:189::/44

    Signature Algorithm: sha256WithRSAEncryption
         75:eb:f7:43:f7:6f:3b:17:20:5f:e8:94:ba:49:6b:4c:55:ec:
         69:45:a6:6e:95:0c:99:f0:4d:8c:33:31:97:87:8f:f2:35:73:
         8a:de:5c:f2:94:a7:82:fd:65:10:42:4a:51:42:73:9d:93:f3:
         49:13:b1:e0:e9:05:7c:ee:90:89:c2:70:a9:9b:42:ca:7b:f8:
         81:d2:59:bf:4d:d4:92:c1:2c:60:c9:e7:20:6f:7a:f2:7f:2c:
         42:34:90:c2:0a:38:fe:cf:b9:44:03:0d:aa:86:d0:85:a3:58:
         f0:f4:1a:fd:06:32:32:31:5d:78:27:4e:d6:a2:d7:0a:05:37:
         76:39:9d:67:28:5f:86:b3:f1:64:0e:cc:b6:00:02:92:2a:33:
         e2:18:b1:ec:f2:5b:e7:a1:0b:4a:84:4b:e4:0f:9e:94:db:b9:
         98:b1:ec:48:f9:ab:71:8e:18:99:3b:8d:91:fb:9c:97:ea:0f:
         66:7b:bb:6a:b0:3e:be:1c:83:ea:14:9f:a7:e2:e8:af:55:43:
         60:71:27:ea:4d:60:f2:d6:44:e5:63:89:49:80:5a:61:6a:75:
         db:4b:c4:47:93:2c:4e:98:16:ad:a5:00:14:81:8b:a6:57:9c:
         e8:75:3a:b3:b5:d5:2c:f1:81:ae:70:58:e8:a5:69:9f:6d:25:
         9f:31:ad:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 10:17:37 2024 by rpki-client on console-ams.rpki-client.org