Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/92830837-a46f-4687-b39b-eb652fffb5b4/8e083e215930d2e50f7b636c4719c43b119100c3.roa
File:                     8e083e215930d2e50f7b636c4719c43b119100c3.roa (raw, json)
Hash identifier:          3/OeXPTYb4BZD6Q6Cgd9Ak98xjkbyg+QEj1zQNJgMs0=
Subject key identifier:   B3:29:7F:C5:8F:B0:8F:70:C6:DC:B8:3E:AC:7F:1B:A6:02:34:C1:5C
Certificate issuer:       /CN=f049e720e5c1dc0bbd02e6644a2b4abcc3a04bfd
Certificate serial:       0C672C
Authority key identifier: 27:D1:B8:E3:58:66:46:3F:AD:CA:99:EC:1D:4D:E3:F0:4A:11:C8:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f049e720e5c1dc0bbd02e6644a2b4abcc3a04bfd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/92830837-a46f-4687-b39b-eb652fffb5b4/8e083e215930d2e50f7b636c4719c43b119100c3.roa
Signing time:             Wed 24 Mar 2021 14:38:12 +0000
ROA not before:           Wed 24 Mar 2021 14:38:12 +0000
ROA not after:            Tue 24 Mar 2026 14:38:12 +0000
asID:                     266815
IP address blocks:        45.237.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/92830837-a46f-4687-b39b-eb652fffb5b4/f049e720e5c1dc0bbd02e6644a2b4abcc3a04bfd.crl
                          rsync://repository.lacnic.net/rpki/lacnic/92830837-a46f-4687-b39b-eb652fffb5b4/f049e720e5c1dc0bbd02e6644a2b4abcc3a04bfd.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f049e720e5c1dc0bbd02e6644a2b4abcc3a04bfd.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Feb 2024 16:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 812844 (0xc672c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f049e720e5c1dc0bbd02e6644a2b4abcc3a04bfd
        Validity
            Not Before: Mar 24 14:38:12 2021 GMT
            Not After : Mar 24 14:38:12 2026 GMT
        Subject: CN=8e083e215930d2e50f7b636c4719c43b119100c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ff:e7:7d:ef:da:c1:ff:22:8b:d5:b9:5f:94:
                    f3:c3:c1:9a:a5:91:1f:83:8a:06:10:c0:04:75:83:
                    36:81:94:69:4f:85:9e:66:d6:cf:bb:5d:81:d4:03:
                    79:95:af:64:2c:fd:c6:86:88:71:6c:38:d4:08:83:
                    f7:b8:2c:c8:ac:23:f5:d3:49:c6:77:77:ad:20:b5:
                    1f:ee:1a:0d:73:ef:1d:bf:32:22:56:8d:32:f7:11:
                    7d:3a:1d:76:51:51:d6:bf:7d:3b:cd:6f:5d:b4:e5:
                    32:01:69:64:f8:25:3c:a9:4b:20:7d:cf:a6:39:ec:
                    ee:15:63:0d:fc:06:99:a5:34:d0:e4:d3:b0:fd:15:
                    05:9a:52:09:9f:89:42:c8:a0:c9:6f:e2:63:41:42:
                    d6:81:34:36:65:af:bb:85:f2:d5:cf:20:04:90:2c:
                    22:2c:43:8c:fd:9a:c5:b2:c0:7a:7d:be:7c:2b:52:
                    db:bb:64:f8:1a:0d:7a:ce:bc:0b:a4:c2:aa:39:a7:
                    8d:e6:fe:dd:83:fa:f0:f3:59:35:82:3b:9a:a0:3d:
                    f1:8e:c5:ad:37:cf:39:1c:69:d5:89:cb:e5:c3:41:
                    58:f6:45:ad:81:ed:8f:f5:ba:b7:80:d2:15:b4:78:
                    e3:91:fb:81:3c:c9:1d:33:a2:41:00:2f:ab:11:fe:
                    3c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:29:7F:C5:8F:B0:8F:70:C6:DC:B8:3E:AC:7F:1B:A6:02:34:C1:5C
            X509v3 Authority Key Identifier:
                keyid:27:D1:B8:E3:58:66:46:3F:AD:CA:99:EC:1D:4D:E3:F0:4A:11:C8:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f049e720e5c1dc0bbd02e6644a2b4abcc3a04bfd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/92830837-a46f-4687-b39b-eb652fffb5b4/8e083e215930d2e50f7b636c4719c43b119100c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/92830837-a46f-4687-b39b-eb652fffb5b4/f049e720e5c1dc0bbd02e6644a2b4abcc3a04bfd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:12:a0:e9:15:8b:9c:65:95:ec:fb:d8:a5:b4:28:37:07:3d:
         3c:8e:bd:0c:43:5b:0c:c7:8e:05:1e:51:89:b8:04:94:ba:79:
         a3:7a:60:ce:da:45:c2:28:e6:bc:89:37:f9:b0:9c:12:e5:64:
         9e:19:45:24:5f:0a:d4:fa:38:56:40:b6:dc:26:81:c2:71:2f:
         52:70:df:84:45:8e:0b:ea:35:b4:eb:0a:89:01:72:56:c7:53:
         00:f2:c9:d2:20:b8:b3:d4:cc:1e:8f:6f:c5:da:19:87:7c:de:
         d1:84:43:68:1a:08:9f:cc:4c:3f:c2:18:16:95:7d:fc:6c:7a:
         a2:49:3b:d3:4a:da:ce:09:93:01:fe:1d:d7:32:1d:ed:4f:d8:
         86:b4:09:04:1f:14:f9:15:70:0c:cb:c9:b9:45:1b:a3:3d:07:
         a8:c2:c7:05:14:c3:32:bd:ea:3f:0d:6d:b7:6e:38:5c:fe:b7:
         68:9c:6e:d4:c2:ba:ec:1c:4c:7c:0b:05:96:62:ce:3d:77:56:
         e2:4a:ab:86:26:0b:8c:3b:ce:2e:3e:d8:de:ff:b7:7e:e5:7f:
         e4:c1:7f:ce:5d:e6:7f:93:6b:d9:56:59:ca:0a:8a:14:61:be:
         81:8d:b2:eb:ea:16:dd:12:47:9b:6b:61:34:03:e5:59:27:5a:
         3f:4f:a9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 23:04:10 2024 by rpki-client on console-ams.rpki-client.org