Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8efb168f-5952-4753-b007-230c9ce37456/a19e107835e8bb941d6d55362709b463220b6b60.roa
File:                     a19e107835e8bb941d6d55362709b463220b6b60.roa (raw, json)
Hash identifier:          T8QnLThQL36z77DNnQHfRdoHISM38oe6HJjrK9qF4po=
Subject key identifier:   F6:36:1D:C5:B3:B3:00:87:06:4C:91:58:36:C9:B5:A1:66:27:D4:CA
Certificate issuer:       /CN=dea73294c38a8bd7b832cad874cd72c2143f9bb2
Certificate serial:       0DA526
Authority key identifier: EA:1C:58:62:21:FF:50:72:CB:68:2F:79:E5:4E:A6:09:78:5D:CC:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dea73294c38a8bd7b832cad874cd72c2143f9bb2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8efb168f-5952-4753-b007-230c9ce37456/a19e107835e8bb941d6d55362709b463220b6b60.roa
Signing time:             Wed 24 Mar 2021 14:30:22 +0000
ROA not before:           Wed 24 Mar 2021 14:30:22 +0000
ROA not after:            Tue 24 Mar 2026 14:30:22 +0000
asID:                     28100
IP address blocks:        207.248.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8efb168f-5952-4753-b007-230c9ce37456/dea73294c38a8bd7b832cad874cd72c2143f9bb2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8efb168f-5952-4753-b007-230c9ce37456/dea73294c38a8bd7b832cad874cd72c2143f9bb2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dea73294c38a8bd7b832cad874cd72c2143f9bb2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:40:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 894246 (0xda526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dea73294c38a8bd7b832cad874cd72c2143f9bb2
        Validity
            Not Before: Mar 24 14:30:22 2021 GMT
            Not After : Mar 24 14:30:22 2026 GMT
        Subject: CN=a19e107835e8bb941d6d55362709b463220b6b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8f:12:44:12:88:63:9c:3a:19:21:9f:84:15:
                    ee:f8:c5:7a:a8:be:6a:f0:01:80:3c:33:2c:07:60:
                    ac:12:e2:20:1b:ca:22:4b:a3:3f:ea:3b:47:9f:02:
                    7c:ae:c5:3d:99:da:c6:82:27:77:98:1a:18:b5:7c:
                    c4:37:28:4d:53:2f:c4:86:07:9d:08:e0:a8:cd:72:
                    b1:0e:6b:1f:8f:0e:7d:48:69:7d:1f:75:39:2e:fb:
                    43:5a:bb:5c:ae:1a:e9:a9:2c:2c:cc:30:00:6d:e7:
                    1b:2e:53:68:d1:0c:77:f8:c5:2b:90:19:cc:af:e8:
                    eb:d0:23:e4:f5:07:5b:a4:3e:9f:ff:a8:7a:75:99:
                    59:b6:48:22:3c:50:9a:d5:b4:bb:56:07:5c:0d:ca:
                    01:0f:38:38:20:96:83:91:c0:83:08:01:6a:34:97:
                    97:60:ca:a4:55:f0:7f:4b:de:95:61:d6:7e:8e:97:
                    54:9c:0c:c0:50:44:80:94:b9:e0:a9:4c:dd:e6:f8:
                    9a:62:5e:45:1a:f2:de:09:9a:28:42:45:03:8f:83:
                    b2:b0:1f:cf:27:81:a5:f2:b6:22:a5:31:59:b1:ab:
                    2d:8b:10:96:87:ef:44:1a:57:01:db:fd:2f:c9:03:
                    17:b7:21:52:80:2d:78:e6:ea:bc:a6:96:06:91:a2:
                    c4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:36:1D:C5:B3:B3:00:87:06:4C:91:58:36:C9:B5:A1:66:27:D4:CA
            X509v3 Authority Key Identifier:
                keyid:EA:1C:58:62:21:FF:50:72:CB:68:2F:79:E5:4E:A6:09:78:5D:CC:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dea73294c38a8bd7b832cad874cd72c2143f9bb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8efb168f-5952-4753-b007-230c9ce37456/a19e107835e8bb941d6d55362709b463220b6b60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8efb168f-5952-4753-b007-230c9ce37456/dea73294c38a8bd7b832cad874cd72c2143f9bb2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:4c:fe:d9:06:6f:08:79:10:a8:11:ae:8e:3d:b7:5c:95:a3:
         93:c0:5c:de:ee:47:ae:2d:03:a8:22:57:9f:3d:20:1c:89:f1:
         c7:31:e5:49:6b:fc:5a:37:2c:6f:d0:31:99:1e:6a:1c:3c:8a:
         c2:29:ed:38:e9:35:95:b0:56:42:41:06:20:a1:6e:50:f9:0b:
         4b:4f:10:16:8c:8a:05:db:e3:2e:c6:ea:b6:3d:f1:a9:02:c3:
         93:e9:aa:10:bf:e8:f0:34:0e:c4:95:96:a3:fa:2c:e7:91:9a:
         a9:88:a1:b1:3a:68:6d:96:c7:94:53:e4:3d:bf:07:b9:4b:eb:
         82:b2:a6:ec:b5:a5:36:0f:a1:28:3d:51:26:6a:d5:67:27:3d:
         12:5a:e1:89:5c:43:cd:9b:5e:db:57:f8:b2:3e:17:5f:38:20:
         5a:5a:30:69:b5:9a:09:ae:30:2c:d9:28:17:b0:4d:39:4f:f9:
         08:2f:80:6f:e1:2a:c3:19:4c:6a:89:55:4e:c2:f8:00:8b:96:
         45:80:ea:23:b9:aa:2e:86:2c:a2:54:84:b6:91:cc:f3:67:26:
         13:67:40:4b:71:4d:37:91:f5:c7:c3:08:76:16:62:c9:80:38:
         39:46:a0:bc:47:52:75:af:0a:f6:80:f1:10:79:af:c0:79:8d:
         b7:f7:5a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:59:28 2024 by rpki-client on console-fra.rpki-client.org