Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/963b7598-1c18-49ff-ae5a-280ba34cb486/9f74d09d7e3d5c210f8f48b72991bb0c299a201f.roa
File:                     9f74d09d7e3d5c210f8f48b72991bb0c299a201f.roa (raw, json)
Hash identifier:          E4tDopF0I10Z/d90VQxhiKmM9QeZvJCYRK7cjF1SDUY=
Subject key identifier:   7E:B8:28:23:23:7F:19:DD:1C:78:52:48:DC:53:B0:2F:9E:EE:70:A3
Certificate issuer:       /CN=7cd476f73c9fe24cad71bb31f59adc910154e2ec
Certificate serial:       0B7B5C
Authority key identifier: FF:69:7A:E2:15:EB:BB:89:68:BA:02:03:B8:F2:87:25:9D:F3:EE:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd476f73c9fe24cad71bb31f59adc910154e2ec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/963b7598-1c18-49ff-ae5a-280ba34cb486/9f74d09d7e3d5c210f8f48b72991bb0c299a201f.roa
Signing time:             Wed 24 Mar 2021 14:39:05 +0000
ROA not before:           Wed 24 Mar 2021 14:39:05 +0000
ROA not after:            Tue 24 Mar 2026 14:39:05 +0000
asID:                     269761
IP address blocks:        45.183.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/963b7598-1c18-49ff-ae5a-280ba34cb486/7cd476f73c9fe24cad71bb31f59adc910154e2ec.crl
                          rsync://repository.lacnic.net/rpki/lacnic/963b7598-1c18-49ff-ae5a-280ba34cb486/7cd476f73c9fe24cad71bb31f59adc910154e2ec.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd476f73c9fe24cad71bb31f59adc910154e2ec.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 752476 (0xb7b5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cd476f73c9fe24cad71bb31f59adc910154e2ec
        Validity
            Not Before: Mar 24 14:39:05 2021 GMT
            Not After : Mar 24 14:39:05 2026 GMT
        Subject: CN=9f74d09d7e3d5c210f8f48b72991bb0c299a201f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ac:25:31:37:79:46:9b:7a:22:46:06:0e:01:
                    84:5f:c3:21:5c:45:94:ec:62:00:f1:18:3d:b4:18:
                    fa:30:42:36:9b:d9:b1:08:9c:77:16:89:d3:f5:56:
                    89:bc:3d:9a:66:d0:a4:19:69:e7:9e:02:db:35:80:
                    f0:60:5d:2c:3b:22:9e:e1:2d:b8:b4:c8:ae:e1:9a:
                    69:66:49:eb:21:a0:00:fc:b2:69:15:18:10:0b:90:
                    5c:2c:19:78:88:06:26:ee:a8:2b:7a:88:bd:c6:83:
                    56:92:79:86:02:a3:b3:44:2e:f1:cd:5f:41:3f:de:
                    8f:a6:8c:f7:d9:be:e4:1b:2e:84:07:01:f4:54:31:
                    13:f8:61:3d:bf:2f:58:f6:dd:51:b2:e8:46:d5:e2:
                    10:90:8c:20:be:e4:cb:2b:f9:ef:6b:2c:2b:86:25:
                    87:fa:ab:53:52:21:d3:37:79:92:dd:76:0c:61:b3:
                    e3:41:63:a6:2c:30:00:28:8b:b3:80:eb:0a:ba:69:
                    6a:89:67:0a:8a:d6:3c:73:fa:d8:c7:35:ce:a1:fd:
                    b7:92:53:87:77:4b:58:c4:00:12:cc:80:24:11:bf:
                    f4:56:55:a1:eb:3f:36:f3:e1:1f:af:91:6e:f9:b4:
                    ba:ad:b6:a1:ac:53:94:85:26:81:e6:6e:47:32:4c:
                    ac:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B8:28:23:23:7F:19:DD:1C:78:52:48:DC:53:B0:2F:9E:EE:70:A3
            X509v3 Authority Key Identifier:
                keyid:FF:69:7A:E2:15:EB:BB:89:68:BA:02:03:B8:F2:87:25:9D:F3:EE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd476f73c9fe24cad71bb31f59adc910154e2ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/963b7598-1c18-49ff-ae5a-280ba34cb486/9f74d09d7e3d5c210f8f48b72991bb0c299a201f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/963b7598-1c18-49ff-ae5a-280ba34cb486/7cd476f73c9fe24cad71bb31f59adc910154e2ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:72:b9:7e:de:c0:e1:56:49:b4:b9:d9:e7:de:e4:ca:d7:8a:
         74:ee:a7:d8:a8:b7:ca:aa:e1:e4:ca:a0:06:3f:18:97:85:3b:
         96:fe:e0:de:75:fe:2a:fe:97:e1:ed:ce:08:fb:d9:2b:b2:47:
         20:5a:4b:ab:b5:bd:84:24:9a:81:29:00:ab:d3:ce:33:0c:72:
         1b:b2:84:52:c8:18:91:66:f2:21:46:ba:1a:08:d1:b9:4b:fe:
         16:ed:ac:f3:b4:56:98:96:77:23:e8:7d:c7:b8:7f:f6:d4:cf:
         8e:07:c1:66:5a:b9:79:59:14:1c:12:37:d7:f9:d3:3d:53:6e:
         85:05:6e:24:27:79:e4:c1:33:cd:aa:fd:a1:d8:c2:d2:79:d0:
         08:c1:ba:2d:d1:76:b0:d7:fc:be:aa:c2:1f:56:b4:a1:b6:96:
         08:68:b6:49:f6:73:53:14:a7:82:9f:51:d2:1f:45:09:51:15:
         23:c1:13:41:99:88:f8:b1:6e:77:c0:f3:f9:da:d5:08:c6:81:
         00:4d:d7:af:81:2c:b1:eb:73:48:b1:8d:02:be:97:ee:00:a8:
         1e:2f:92:9f:ea:2e:fc:d7:f9:72:25:3d:c9:04:75:84:49:79:
         a8:91:2e:13:5c:2a:bd:d3:a2:c3:f6:d6:4f:5e:2f:6a:32:2b:
         41:ff:8a:c9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC3tcMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdj
ZDQ3NmY3M2M5ZmUyNGNhZDcxYmIzMWY1OWFkYzkxMDE1NGUyZWMwHhcNMjEwMzI0
MTQzOTA1WhcNMjYwMzI0MTQzOTA1WjAzMTEwLwYDVQQDEyg5Zjc0ZDA5ZDdlM2Q1
YzIxMGY4ZjQ4YjcyOTkxYmIwYzI5OWEyMDFmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgawlMTd5Rpt6IkYGDgGEX8MhXEWU7GIA8Rg9tBj6MEI2m9mx
CJx3FonT9VaJvD2aZtCkGWnnngLbNYDwYF0sOyKe4S24tMiu4ZppZknrIaAA/LJp
FRgQC5BcLBl4iAYm7qgreoi9xoNWknmGAqOzRC7xzV9BP96Ppoz32b7kGy6EBwH0
VDET+GE9vy9Y9t1RsuhG1eIQkIwgvuTLK/nvaywrhiWH+qtTUiHTN3mS3XYMYbPj
QWOmLDAAKIuzgOsKumlqiWcKitY8c/rYxzXOof23klOHd0tYxAASzIAkEb/0VlWh
6z828+Efr5Fu+bS6rbahrFOUhSaB5m5HMkysywIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFH64KCMjfxndHHhSSNxTsC+e7nCjMB8GA1UdIwQYMBaAFP9peuIV67uJaLoC
A7jyhyWd8+4RMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2NkNDc2
ZjczYzlmZTI0Y2FkNzFiYjMxZjU5YWRjOTEwMTU0ZTJlYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTYzYjc1OTgtMWMxOC00OWZmLWFlNWEtMjgwYmEz
NGNiNDg2LzlmNzRkMDlkN2UzZDVjMjEwZjhmNDhiNzI5OTFiYjBjMjk5YTIwMWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjNiNzU5OC0xYzE4LTQ5ZmYtYWU1YS0yODBi
YTM0Y2I0ODYvN2NkNDc2ZjczYzlmZTI0Y2FkNzFiYjMxZjU5YWRjOTEwMTU0ZTJl
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi23ZDANBgkqhkiG9w0BAQsFAAOCAQEAFHK5ft7A4VZJtLnZ
597kyteKdO6n2Ki3yqrh5MqgBj8Yl4U7lv7g3nX+Kv6X4e3OCPvZK7JHIFpLq7W9
hCSagSkAq9POMwxyG7KEUsgYkWbyIUa6GgjRuUv+Fu2s87RWmJZ3I+h9x7h/9tTP
jgfBZlq5eVkUHBI31/nTPVNuhQVuJCd55MEzzar9odjC0nnQCMG6LdF2sNf8vqrC
H1a0obaWCGi2SfZzUxSngp9R0h9FCVEVI8ETQZmI+LFud8Dz+drVCMaBAE3Xr4Es
setzSLGNAr6X7gCoHi+Sn+ou/Nf5ciU9yQR1hEl5qJEuE1wqvdOiw/bWT14vajIr
Qf+KyQ==
-----END CERTIFICATE-----
Generated at Thu Mar 28 03:11:36 2024 by rpki-client on console-fra.rpki-client.org