Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/985c1550-6da1-4adc-830d-6267cacd5f4b/c1fa0f6317ef6f379ee62829622647e7ff73d3e3.roa
File:                     c1fa0f6317ef6f379ee62829622647e7ff73d3e3.roa (raw, json)
Hash identifier:          eD8YdL1u3mgG6GJrWMgmY34Z281GrJW1CS8PDIZ1koU=
Subject key identifier:   F6:5D:23:E3:30:35:52:D0:17:17:4F:1E:4E:80:25:B5:69:00:6E:74
Certificate issuer:       /CN=fd4c114c1b8bf7133cf870558849bd65d2fcfdb0
Certificate serial:       0DB0C5
Authority key identifier: 81:8E:3F:2A:F4:FC:E0:FD:4A:8F:F6:A3:A1:8E:BD:5D:C1:95:36:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd4c114c1b8bf7133cf870558849bd65d2fcfdb0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/985c1550-6da1-4adc-830d-6267cacd5f4b/c1fa0f6317ef6f379ee62829622647e7ff73d3e3.roa
Signing time:             Wed 24 Mar 2021 14:48:07 +0000
ROA not before:           Wed 24 Mar 2021 14:48:07 +0000
ROA not after:            Tue 24 Mar 2026 14:48:07 +0000
asID:                     263701
IP address blocks:        143.0.96.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/985c1550-6da1-4adc-830d-6267cacd5f4b/fd4c114c1b8bf7133cf870558849bd65d2fcfdb0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/985c1550-6da1-4adc-830d-6267cacd5f4b/fd4c114c1b8bf7133cf870558849bd65d2fcfdb0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd4c114c1b8bf7133cf870558849bd65d2fcfdb0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Feb 2024 12:23:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897221 (0xdb0c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd4c114c1b8bf7133cf870558849bd65d2fcfdb0
        Validity
            Not Before: Mar 24 14:48:07 2021 GMT
            Not After : Mar 24 14:48:07 2026 GMT
        Subject: CN=c1fa0f6317ef6f379ee62829622647e7ff73d3e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fb:b7:c8:ed:11:34:4d:1e:b7:8f:d4:96:a8:
                    c9:ca:cb:f3:6f:f5:d4:c2:44:72:cf:4f:70:08:73:
                    10:25:42:ea:02:d7:11:17:62:f4:35:d3:63:91:00:
                    a4:9a:67:e8:1e:ba:2c:70:a0:40:bd:0e:0b:49:ac:
                    1c:d9:59:6d:c1:0c:31:f8:96:80:8f:50:0c:39:45:
                    bb:37:7c:d5:d4:40:b5:a3:4d:d4:95:59:b3:55:a8:
                    59:2a:f9:7c:98:d5:21:b7:31:34:b4:c8:fa:2d:16:
                    bd:fe:4b:80:f5:3a:e0:87:98:48:f0:1e:fc:61:04:
                    b8:7f:38:b8:3b:43:70:6a:27:a8:59:1e:fd:2c:54:
                    56:bb:27:52:87:d2:09:f0:f1:ae:47:40:0a:98:2f:
                    af:40:84:dd:d1:ca:75:b7:60:96:04:f1:47:5e:8e:
                    9f:98:22:95:71:6b:86:19:9e:fc:60:25:08:96:b3:
                    66:d4:17:ec:62:ba:0d:7d:54:28:c8:db:32:0a:d6:
                    e5:13:f7:2e:39:59:b0:da:90:e0:f9:ac:d2:22:d1:
                    74:01:0e:5d:52:7c:ff:1d:47:8c:1e:12:ff:c6:12:
                    08:9f:4b:dc:70:c5:ed:86:62:da:52:3a:d5:d0:ca:
                    3d:b9:ed:3b:4a:87:03:30:ca:4b:fd:18:b0:8e:d8:
                    aa:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5D:23:E3:30:35:52:D0:17:17:4F:1E:4E:80:25:B5:69:00:6E:74
            X509v3 Authority Key Identifier:
                keyid:81:8E:3F:2A:F4:FC:E0:FD:4A:8F:F6:A3:A1:8E:BD:5D:C1:95:36:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd4c114c1b8bf7133cf870558849bd65d2fcfdb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/985c1550-6da1-4adc-830d-6267cacd5f4b/c1fa0f6317ef6f379ee62829622647e7ff73d3e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/985c1550-6da1-4adc-830d-6267cacd5f4b/fd4c114c1b8bf7133cf870558849bd65d2fcfdb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:48:0f:c6:91:3b:4e:09:2b:78:fe:e5:d0:55:5d:86:82:69:
         90:11:71:c1:e6:53:8c:34:2b:e1:b5:b2:78:06:33:f5:62:14:
         79:03:c5:5b:e3:88:d2:a3:4f:57:97:3f:82:71:be:f2:e9:e8:
         6d:92:fd:af:15:0f:e7:9c:d8:30:30:98:e7:52:15:52:c9:51:
         15:2f:4c:a4:4c:c6:70:6a:74:7e:cd:9b:47:0e:e6:58:0c:46:
         b8:8a:ac:6f:51:76:26:a4:3e:4b:7c:6e:3c:cb:24:97:a0:9e:
         0f:37:2d:a1:9c:2b:62:5c:c1:b6:86:63:d8:2a:37:7e:4d:ef:
         9f:08:31:0c:bf:46:5b:fd:4c:30:b9:4d:23:b9:d7:6c:ce:46:
         d5:90:27:93:cb:e4:ec:43:70:35:71:97:9e:22:59:8d:a9:a1:
         03:c7:b7:c9:22:6c:e3:30:06:12:19:78:97:e3:2f:58:d8:e8:
         24:b0:9c:1a:61:65:5f:55:03:44:7a:63:d3:38:6d:ce:37:3a:
         f0:ed:ff:5a:9d:6a:ae:54:05:b0:94:95:f0:b4:a8:da:73:62:
         de:3f:57:13:9b:15:7d:3d:fe:ed:b9:2a:25:16:d4:5a:bc:29:
         b5:a1:b4:af:23:1e:05:10:61:c4:ad:89:60:11:a2:2d:77:71:
         89:b4:3e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 14:25:14 2024 by rpki-client on console-ams.rpki-client.org