Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7e5504d7-1a40-43f8-b6bb-36c782f1a848/6eb4d3f2e46601a2c45436c6f80a8a30bc1fd21a.roa
File:                     6eb4d3f2e46601a2c45436c6f80a8a30bc1fd21a.roa (raw, json)
Hash identifier:          Z4Xt6Kpeos/+BOW7J15WdVmThYceeFY0neNgdWm6XCM=
Subject key identifier:   2E:14:DE:A7:4E:2C:2E:F3:CB:C4:2A:77:F8:7F:7A:42:EE:7F:5B:95
Certificate issuer:       /CN=3412449a934b8459db5d421617e014290aa33b9d
Certificate serial:       0CF061
Authority key identifier: 6D:47:6F:A3:09:CC:24:11:D6:D6:B2:6E:44:01:DE:4F:1F:E8:A6:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3412449a934b8459db5d421617e014290aa33b9d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7e5504d7-1a40-43f8-b6bb-36c782f1a848/6eb4d3f2e46601a2c45436c6f80a8a30bc1fd21a.roa
Signing time:             Wed 24 Mar 2021 14:45:21 +0000
ROA not before:           Wed 24 Mar 2021 14:45:21 +0000
ROA not after:            Tue 24 Mar 2026 14:45:21 +0000
asID:                     11556
IP address blocks:        168.77.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7e5504d7-1a40-43f8-b6bb-36c782f1a848/3412449a934b8459db5d421617e014290aa33b9d.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7e5504d7-1a40-43f8-b6bb-36c782f1a848/3412449a934b8459db5d421617e014290aa33b9d.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3412449a934b8459db5d421617e014290aa33b9d.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Feb 2024 16:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 847969 (0xcf061)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3412449a934b8459db5d421617e014290aa33b9d
        Validity
            Not Before: Mar 24 14:45:21 2021 GMT
            Not After : Mar 24 14:45:21 2026 GMT
        Subject: CN=6eb4d3f2e46601a2c45436c6f80a8a30bc1fd21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:07:a3:01:1d:24:e7:43:06:43:5f:bb:a1:54:
                    9b:03:da:2c:d0:d4:59:47:89:3b:61:5e:e4:f8:67:
                    82:36:bb:cb:c9:4c:35:5d:52:43:99:da:2b:95:1c:
                    32:aa:09:03:49:f8:5b:d2:59:98:0b:52:0c:81:d2:
                    bf:86:3d:56:df:1a:3b:41:b6:bb:ba:9b:cc:b4:1b:
                    78:46:29:96:66:6e:9b:c5:6f:c0:bf:fb:d0:6c:ef:
                    28:e7:33:10:4c:43:fa:b1:fb:a1:57:2b:e1:a8:14:
                    e5:c3:5d:70:0e:4c:e8:3c:4d:e3:54:3e:24:7e:bf:
                    bf:59:a6:9b:6b:8e:6a:68:38:7b:e9:d6:af:14:e1:
                    30:73:37:c5:3e:7c:03:19:1b:3b:1a:de:b8:fe:58:
                    f6:8a:81:da:4a:15:01:93:02:e4:93:fd:32:7d:94:
                    d6:7c:c8:56:57:34:a9:bc:ba:ca:32:df:c2:5b:a0:
                    f0:16:bb:71:30:34:4e:0f:8f:a0:ab:de:d8:b5:27:
                    8c:a4:38:73:1d:34:f8:ec:be:ec:11:84:21:fc:7f:
                    db:80:61:20:ff:dd:f1:c9:5e:d6:14:16:13:ec:86:
                    cc:11:71:35:d3:a5:bc:e7:c6:4c:06:43:18:5e:ef:
                    f9:a0:1f:27:9f:a8:68:61:5c:64:93:10:a9:b8:21:
                    8e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:14:DE:A7:4E:2C:2E:F3:CB:C4:2A:77:F8:7F:7A:42:EE:7F:5B:95
            X509v3 Authority Key Identifier:
                keyid:6D:47:6F:A3:09:CC:24:11:D6:D6:B2:6E:44:01:DE:4F:1F:E8:A6:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3412449a934b8459db5d421617e014290aa33b9d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7e5504d7-1a40-43f8-b6bb-36c782f1a848/6eb4d3f2e46601a2c45436c6f80a8a30bc1fd21a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7e5504d7-1a40-43f8-b6bb-36c782f1a848/3412449a934b8459db5d421617e014290aa33b9d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.77.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:4f:be:29:94:73:36:9d:5f:2b:7c:76:3b:d3:f2:b0:9f:ab:
         3e:13:b6:08:e4:6c:27:3f:c4:bb:9d:a7:2a:7b:a2:d5:a1:fb:
         0b:81:cf:aa:cc:54:54:88:88:f8:d6:eb:46:9c:ee:40:b2:43:
         a0:9b:99:3c:b2:74:12:a8:32:f5:b6:3c:e5:8a:44:06:ce:e9:
         b9:2a:38:0c:69:01:50:56:4e:f3:d4:b0:cb:ab:07:44:7d:9c:
         b2:6d:b7:3d:d6:d0:0c:68:c8:82:ea:5f:c4:f9:1d:c1:73:ae:
         ab:24:ab:bc:0e:3f:c7:ef:cf:e0:8b:ec:8c:88:77:5a:80:68:
         91:f1:34:09:68:2f:42:ef:ae:f5:d6:e7:04:a2:8e:37:40:73:
         4a:45:b0:d6:ff:0e:85:19:ec:42:01:2d:0b:1a:ee:a5:c6:cd:
         87:e2:38:5d:d6:43:57:e0:11:ce:7c:eb:46:05:26:87:ee:c9:
         74:9c:54:f4:ce:65:e7:e6:56:46:ae:d5:02:88:32:b6:24:ae:
         74:41:46:fe:5e:d7:08:19:04:ce:b0:ae:ca:41:ad:59:7c:89:
         83:18:2b:b8:31:cc:a6:cb:96:6e:80:3a:ba:38:49:fb:be:9f:
         73:bd:de:14:c9:68:76:74:34:c2:90:14:82:c0:ea:9f:cb:67:
         19:93:bf:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 01:53:03 2024 by rpki-client on console-ams.rpki-client.org