Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/60e2564bd7719a0aa104fe2ff6828c00cc2be16e.roa
File:                     60e2564bd7719a0aa104fe2ff6828c00cc2be16e.roa (raw, json)
Hash identifier:          yOeOnim8u0tlpUehCYGbOQ3WKnkzZvIUiKsLXVCG/RQ=
Subject key identifier:   10:68:A8:3B:BE:3A:0A:F8:D7:4E:D4:AF:78:8D:BA:43:16:75:E3:C0
Certificate issuer:       /CN=4165db8f57caba312629e89d611ea1f393351415
Certificate serial:       0710
Authority key identifier: 56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/60e2564bd7719a0aa104fe2ff6828c00cc2be16e.roa
Signing time:             Wed 16 Nov 2022 21:49:43 +0000
ROA not before:           Tue 15 Nov 2022 21:48:20 +0000
ROA not after:            Sat 16 Nov 2024 21:48:20 +0000
asID:                     262191
IP address blocks:        190.109.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/4165db8f57caba312629e89d611ea1f393351415.crl
                          rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/4165db8f57caba312629e89d611ea1f393351415.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 01:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1808 (0x710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4165db8f57caba312629e89d611ea1f393351415
        Validity
            Not Before: Nov 15 21:48:20 2022 GMT
            Not After : Nov 16 21:48:20 2024 GMT
        Subject: CN=60e2564bd7719a0aa104fe2ff6828c00cc2be16e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c3:22:81:c6:6d:7c:80:11:e8:56:f2:93:22:
                    e2:a2:31:31:76:5f:d1:41:7b:22:f6:8b:c6:5a:32:
                    e0:36:00:eb:82:45:92:ca:93:e1:94:44:7e:14:ec:
                    6d:bb:80:a1:61:59:20:4b:85:4d:ea:90:0c:04:10:
                    8c:20:20:05:43:fd:ec:45:f1:d2:81:58:8b:ca:45:
                    c5:30:87:3a:6e:55:c5:ed:c0:4f:aa:db:24:ad:a0:
                    71:b7:b1:af:32:cc:ed:a6:4c:22:b1:27:b2:0c:5c:
                    e4:72:1a:b9:ab:78:dd:8f:44:47:d3:25:01:df:fa:
                    b0:21:2a:14:3c:f6:8c:6f:12:e7:06:da:64:0a:6a:
                    63:65:24:b4:22:9d:9b:82:3a:9f:68:03:82:56:76:
                    aa:06:b8:76:b5:0e:a2:8f:9d:98:56:db:f1:1a:12:
                    1a:26:b4:e2:05:00:8b:e3:6b:ef:f8:66:79:f3:f2:
                    3f:fe:8f:00:3c:ce:ff:25:14:53:18:d3:80:20:13:
                    95:02:97:74:4f:10:f9:b2:6c:3d:0d:42:07:1e:bd:
                    e4:45:e5:bd:55:52:6c:d6:15:3d:b6:f2:4b:fd:0b:
                    22:00:af:9a:6c:61:5d:e8:18:f8:be:5a:43:15:53:
                    03:4b:65:f5:bd:71:1b:a4:3f:45:8a:b9:25:66:93:
                    c6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:68:A8:3B:BE:3A:0A:F8:D7:4E:D4:AF:78:8D:BA:43:16:75:E3:C0
            X509v3 Authority Key Identifier:
                keyid:56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/60e2564bd7719a0aa104fe2ff6828c00cc2be16e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/4165db8f57caba312629e89d611ea1f393351415.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:ea:65:4e:74:34:7d:88:c1:1b:fd:c1:d2:86:70:4c:ba:60:
         02:2a:7b:44:52:36:10:d4:75:96:42:1f:79:33:d1:a9:6e:70:
         cc:36:3c:5d:6c:2c:63:ac:20:3c:0f:a1:6e:16:a0:8f:ad:c4:
         25:2a:e7:ab:65:ee:28:a8:b7:38:6c:51:0b:c2:7a:b2:2b:6d:
         96:22:b8:d6:ea:99:ad:6f:ee:a8:e5:c6:01:41:39:2b:e0:ac:
         ca:12:bc:7d:e5:9f:8d:dc:f5:bf:b9:f1:54:62:78:d3:83:99:
         a1:ca:53:4a:87:6a:8d:01:2a:2c:03:bb:9c:d6:e9:40:76:d7:
         5f:f7:bc:4d:30:0a:a7:e7:32:91:eb:42:d4:8b:60:b5:fe:b2:
         d6:ce:89:3f:50:cb:97:b4:89:dc:36:29:c1:14:56:bf:84:45:
         f2:0f:c4:f2:b7:54:71:47:5c:69:dc:dc:ef:4a:d6:1d:ef:be:
         4a:b7:af:b9:f4:07:5e:33:93:b8:09:ea:66:ab:3d:eb:dd:17:
         c8:68:96:eb:8d:ab:d1:2a:e3:c4:f6:2b:df:66:00:4a:cc:66:
         55:dc:a0:5e:80:88:bf:da:29:ee:b5:f1:94:04:b4:f4:3c:5c:
         31:6c:b0:1c:6c:4b:b3:fb:7a:54:b4:bb:f0:55:b1:27:ee:40:
         1f:e7:0f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:04:20 2024 by rpki-client on console-ams.rpki-client.org