Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96e2334f-bcf8-44eb-a7cb-907d2f4a3087/6fb518a6e2558a093419926e23a81add790e0433.roa
File:                     6fb518a6e2558a093419926e23a81add790e0433.roa (raw, json)
Hash identifier:          ZIO7IOUTvyw+BbXW847iXY7kxye0ETAjHFBB8MQH7ks=
Subject key identifier:   1A:10:18:3D:BE:4B:C9:27:B0:59:43:CC:B9:AF:5F:13:64:44:B1:FD
Certificate issuer:       /CN=ecc11edee32c9394c905ec3bca5e788e0606fe35
Certificate serial:       0D46A7
Authority key identifier: C2:7C:EC:53:F1:E2:19:DE:89:6F:05:D3:3F:0F:33:CB:6E:39:55:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ecc11edee32c9394c905ec3bca5e788e0606fe35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/96e2334f-bcf8-44eb-a7cb-907d2f4a3087/6fb518a6e2558a093419926e23a81add790e0433.roa
Signing time:             Wed 24 Mar 2021 14:37:33 +0000
ROA not before:           Wed 24 Mar 2021 14:37:33 +0000
ROA not after:            Tue 24 Mar 2026 14:37:33 +0000
asID:                     262242
IP address blocks:        170.83.10.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/96e2334f-bcf8-44eb-a7cb-907d2f4a3087/ecc11edee32c9394c905ec3bca5e788e0606fe35.crl
                          rsync://repository.lacnic.net/rpki/lacnic/96e2334f-bcf8-44eb-a7cb-907d2f4a3087/ecc11edee32c9394c905ec3bca5e788e0606fe35.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ecc11edee32c9394c905ec3bca5e788e0606fe35.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Mar 2024 16:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870055 (0xd46a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecc11edee32c9394c905ec3bca5e788e0606fe35
        Validity
            Not Before: Mar 24 14:37:33 2021 GMT
            Not After : Mar 24 14:37:33 2026 GMT
        Subject: CN=6fb518a6e2558a093419926e23a81add790e0433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:72:e9:d7:a2:c5:b4:a1:b3:2a:92:30:4c:45:
                    ea:9b:22:44:03:2b:98:e8:d0:ca:eb:fa:a4:e3:6f:
                    85:8e:c5:d9:c8:39:b8:de:1f:fb:a3:d5:e0:6b:03:
                    0d:64:06:44:eb:51:f5:a1:af:ab:fd:6e:c5:ed:6b:
                    9e:c6:74:39:5e:f0:52:c9:b1:1e:98:87:95:4c:8c:
                    fa:81:5e:85:58:02:59:64:c7:2b:5f:8b:cd:a1:0c:
                    6b:ea:08:78:e0:b7:0a:fc:cf:0e:28:f6:09:38:59:
                    cb:cd:2c:bf:f6:2b:7a:01:eb:ba:d7:41:bf:13:fc:
                    6f:12:0e:0e:05:5d:ff:20:fd:27:1d:c3:68:66:63:
                    0c:03:1f:e1:f5:7c:94:55:b3:69:4b:84:ef:44:0b:
                    8b:a4:55:00:57:68:6c:8d:76:ca:48:9a:c5:95:a0:
                    ff:80:b0:18:7f:15:81:0e:a8:28:55:42:9a:c1:8e:
                    02:bb:4d:34:7a:fa:11:c0:d5:f1:aa:3f:b1:d3:c7:
                    89:67:23:4a:fb:9c:c4:b9:3b:1d:04:38:49:5f:6c:
                    9c:0b:fb:21:8f:42:fc:20:d1:84:3c:b3:c6:66:d9:
                    35:e9:9e:e5:97:e9:f7:a9:43:ef:00:ee:c8:ee:21:
                    cb:7f:d7:c7:5a:cc:ae:14:e2:19:0a:3c:98:d2:96:
                    96:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:10:18:3D:BE:4B:C9:27:B0:59:43:CC:B9:AF:5F:13:64:44:B1:FD
            X509v3 Authority Key Identifier:
                keyid:C2:7C:EC:53:F1:E2:19:DE:89:6F:05:D3:3F:0F:33:CB:6E:39:55:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ecc11edee32c9394c905ec3bca5e788e0606fe35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96e2334f-bcf8-44eb-a7cb-907d2f4a3087/6fb518a6e2558a093419926e23a81add790e0433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/96e2334f-bcf8-44eb-a7cb-907d2f4a3087/ecc11edee32c9394c905ec3bca5e788e0606fe35.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:50:db:a0:dd:71:eb:7b:46:28:91:9b:cd:38:20:65:00:14:
         dd:a9:a5:42:4b:5e:bc:30:28:4d:2a:1a:1c:72:8b:3a:8d:ca:
         db:4b:ad:ee:05:70:3c:3f:90:f7:9b:ff:44:2e:37:61:fb:4a:
         4f:59:e6:a8:e4:88:9e:38:58:59:33:f2:5a:7e:0e:6a:cf:dd:
         08:b1:89:6b:c4:a9:94:9f:12:6e:b0:69:5a:eb:1b:2c:7f:52:
         b8:9e:4b:ec:1d:36:5c:fd:d4:0b:67:ca:55:84:b4:34:d1:8d:
         fc:b6:67:62:d9:de:4f:26:92:b6:16:c8:bc:4a:d7:b1:94:9e:
         3f:fa:a4:e9:d6:a1:39:ef:2c:12:5a:49:17:05:36:30:52:b1:
         71:30:d2:1b:41:fa:04:27:4f:28:7b:a5:e2:b9:a4:52:e5:67:
         ee:fe:7f:66:12:44:32:2a:bc:f6:b2:38:c2:2f:8a:e0:9e:01:
         79:dd:ba:eb:33:2c:86:df:dd:b8:18:80:38:0b:19:5a:f2:cd:
         50:ee:e1:32:8e:b5:93:f4:7b:63:77:96:3d:a8:ce:77:5a:88:
         ff:f2:5d:ba:ce:c9:37:d2:8f:74:36:ac:85:a9:29:43:f7:c7:
         d2:19:94:b9:f8:4c:11:c3:a6:7c:89:b5:3b:72:9a:e8:fa:36:
         a5:b9:6b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 00:12:00 2024 by rpki-client on console-fra.rpki-client.org