Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ef90c75-0e4b-4f52-94a8-4113255aac1f/705c5d1dd35cfc783ab8bb607564a17037464516.roa
File:                     705c5d1dd35cfc783ab8bb607564a17037464516.roa (raw, json)
Hash identifier:          i3fs8eS3WAPVuoBRcS3eLIaFfl6ksaoEsDhh9Y/n/hY=
Subject key identifier:   8C:72:B5:1A:9C:01:57:B6:CD:2B:7B:D6:F6:87:94:83:A1:5D:32:E0
Certificate issuer:       /CN=4789febdd964d87e5889a5b09898a4b17ff3c551
Certificate serial:       021D
Authority key identifier: 77:E4:49:2F:D0:8B:7A:AA:59:5D:FD:52:31:3F:94:12:15:00:FF:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4789febdd964d87e5889a5b09898a4b17ff3c551.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ef90c75-0e4b-4f52-94a8-4113255aac1f/705c5d1dd35cfc783ab8bb607564a17037464516.roa
Signing time:             Fri 01 Jul 2022 17:29:55 +0000
ROA not before:           Fri 01 Jul 2022 03:00:00 +0000
ROA not after:            Mon 01 Jul 2024 03:00:00 +0000
asID:                     262589
IP address blocks:        2801:1ae::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7ef90c75-0e4b-4f52-94a8-4113255aac1f/4789febdd964d87e5889a5b09898a4b17ff3c551.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7ef90c75-0e4b-4f52-94a8-4113255aac1f/4789febdd964d87e5889a5b09898a4b17ff3c551.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4789febdd964d87e5889a5b09898a4b17ff3c551.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4789febdd964d87e5889a5b09898a4b17ff3c551
        Validity
            Not Before: Jul  1 03:00:00 2022 GMT
            Not After : Jul  1 03:00:00 2024 GMT
        Subject: CN=705c5d1dd35cfc783ab8bb607564a17037464516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e9:96:7e:f2:ce:59:a7:14:a9:a6:4d:31:91:
                    dd:f5:e3:7f:31:d6:a7:e0:d7:11:80:d8:d5:88:d2:
                    37:3d:6b:96:bf:a1:5d:c7:ac:94:c1:90:5d:fd:e2:
                    19:02:ab:de:7b:ef:15:62:70:1f:ad:b0:a6:11:e6:
                    0e:1a:31:3d:71:2c:b2:86:0b:10:ec:b3:57:70:8e:
                    6a:fa:1b:7c:6f:df:03:dc:22:d9:4d:9a:d4:d0:04:
                    31:6d:50:fa:8b:2e:82:fa:33:53:ba:64:e9:e9:9a:
                    f3:21:bf:e1:03:48:d6:3a:29:20:e7:94:13:14:ea:
                    91:9f:eb:97:3d:ba:02:18:54:4b:18:be:ea:d5:09:
                    8b:69:d9:bd:28:bc:af:a9:e1:af:7d:38:9a:aa:a1:
                    5b:5c:f3:02:dd:52:af:5b:ba:83:e2:63:80:f4:12:
                    a2:01:e8:8f:6b:34:0d:4d:08:28:b5:52:0a:c9:b8:
                    99:8d:9c:8f:c6:73:2f:a1:ca:e8:76:31:bf:d4:db:
                    f8:42:7d:d6:03:5f:2b:76:67:08:89:93:24:45:43:
                    85:b6:39:50:ae:1e:a0:c1:42:ad:1f:0c:3a:83:36:
                    e5:75:0d:97:9b:c4:6e:17:b4:d4:e6:9e:c0:7d:f2:
                    85:e4:b5:10:e1:ea:b9:17:b7:a8:eb:27:75:43:a3:
                    dd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:72:B5:1A:9C:01:57:B6:CD:2B:7B:D6:F6:87:94:83:A1:5D:32:E0
            X509v3 Authority Key Identifier:
                keyid:77:E4:49:2F:D0:8B:7A:AA:59:5D:FD:52:31:3F:94:12:15:00:FF:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4789febdd964d87e5889a5b09898a4b17ff3c551.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ef90c75-0e4b-4f52-94a8-4113255aac1f/705c5d1dd35cfc783ab8bb607564a17037464516.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ef90c75-0e4b-4f52-94a8-4113255aac1f/4789febdd964d87e5889a5b09898a4b17ff3c551.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1ae::/44

    Signature Algorithm: sha256WithRSAEncryption
         1f:b3:79:38:9a:bf:aa:97:7f:47:05:95:d0:c3:a3:90:98:e0:
         2b:2e:2e:d0:15:0a:de:63:c6:b0:24:ac:96:bd:d8:28:48:a7:
         c9:6e:0b:71:8b:e9:6b:9d:b6:b8:93:02:28:51:c9:26:53:d9:
         e7:96:f7:61:39:53:62:4f:fd:00:2d:de:35:cc:5e:4f:d7:f1:
         00:56:d8:6e:39:14:65:b3:ab:e2:ff:04:de:21:a9:36:37:96:
         1e:4c:f6:b1:0d:75:63:50:3e:b7:19:d6:5c:c2:44:35:2d:0e:
         29:2e:90:1e:56:3f:a5:b7:07:f8:ae:1a:87:d5:4c:0e:4c:95:
         95:75:d5:c4:6a:81:e1:2c:b5:02:01:6b:89:ae:6a:e9:97:30:
         3d:74:2f:01:33:93:1e:3e:3d:25:77:d7:6e:2b:e9:e5:c9:de:
         98:50:63:a1:c3:7b:a3:49:19:46:72:36:9d:8c:9a:11:4b:ce:
         35:5e:ba:b5:29:73:31:9a:9a:9e:9a:f4:87:a6:b8:0e:a5:b6:
         33:f1:d0:0b:5e:08:18:e9:f0:e9:9e:0f:35:25:5b:fa:2c:83:
         96:5e:c4:d4:06:d5:eb:8f:8c:79:e3:ba:ff:6d:ed:cd:ce:ef:
         2d:ca:01:aa:74:ff:4f:58:e8:89:d0:26:6a:72:ff:4b:3b:f1:
         37:e7:7d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:33:38 2024 by rpki-client on console-fra.rpki-client.org