Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/986f5766-bbb3-468f-9be5-751335c8b86e/fb4c5f1d15f335dde7e79ffaccafd6330570a5c5.roa
File:                     fb4c5f1d15f335dde7e79ffaccafd6330570a5c5.roa (raw, json)
Hash identifier:          f49EixBAuPuOsNLedES4jcdcZFx1t/+UOe4ganR/Zic=
Subject key identifier:   88:AB:1A:DC:F3:54:89:7C:76:4A:43:E2:F0:EA:40:6C:9B:56:8D:82
Certificate issuer:       /CN=695208cdb689241829fe22129267576a303ec708
Certificate serial:       0DA398
Authority key identifier: 41:52:A2:CF:04:9C:93:F3:9A:FD:44:B0:BF:B5:0F:BE:F8:B6:09:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/695208cdb689241829fe22129267576a303ec708.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/986f5766-bbb3-468f-9be5-751335c8b86e/fb4c5f1d15f335dde7e79ffaccafd6330570a5c5.roa
Signing time:             Wed 24 Mar 2021 14:32:33 +0000
ROA not before:           Wed 24 Mar 2021 14:32:33 +0000
ROA not after:            Tue 24 Mar 2026 14:32:33 +0000
asID:                     27993
IP address blocks:        190.122.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/986f5766-bbb3-468f-9be5-751335c8b86e/695208cdb689241829fe22129267576a303ec708.crl
                          rsync://repository.lacnic.net/rpki/lacnic/986f5766-bbb3-468f-9be5-751335c8b86e/695208cdb689241829fe22129267576a303ec708.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/695208cdb689241829fe22129267576a303ec708.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 893848 (0xda398)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695208cdb689241829fe22129267576a303ec708
        Validity
            Not Before: Mar 24 14:32:33 2021 GMT
            Not After : Mar 24 14:32:33 2026 GMT
        Subject: CN=fb4c5f1d15f335dde7e79ffaccafd6330570a5c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1e:15:d9:46:3f:94:c7:4c:13:07:1c:6c:89:
                    f5:40:64:ae:b5:b8:87:92:cb:4b:93:69:8d:c7:8e:
                    21:ad:6f:62:be:60:f1:ac:6b:8b:fd:17:4b:a8:e3:
                    df:82:5f:32:fa:10:21:97:e5:a5:36:70:de:b9:70:
                    3b:b8:9b:eb:06:1e:63:00:43:0d:bc:6a:98:b6:ab:
                    50:0f:dc:bb:ab:7d:0c:fc:93:c8:dd:ff:aa:67:50:
                    42:a5:5f:21:72:5f:f6:6f:d2:21:81:5f:3d:19:6c:
                    c7:04:08:ea:c0:50:b4:57:de:fc:72:98:32:43:55:
                    69:0d:9c:ed:52:12:fb:5d:aa:dd:89:d2:18:df:9c:
                    4b:48:66:63:a0:85:4d:93:c9:3e:17:50:16:a9:8d:
                    62:cb:10:32:67:82:90:fa:12:13:e4:84:4c:8d:54:
                    04:68:fb:6a:ca:7e:3f:a8:db:b6:59:1c:e0:08:33:
                    b9:d0:ac:98:18:9a:a9:a9:6b:9b:84:6c:a6:f9:57:
                    79:1b:d9:7f:38:19:3d:6e:a1:6a:dc:14:99:aa:be:
                    1d:15:1c:9a:ea:63:af:aa:92:18:94:f6:56:3d:89:
                    7a:73:ed:b4:46:e5:ee:ca:93:ce:dd:b3:35:09:12:
                    25:d7:43:9d:e1:ac:b5:86:3e:d4:79:2f:a5:5f:93:
                    ff:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AB:1A:DC:F3:54:89:7C:76:4A:43:E2:F0:EA:40:6C:9B:56:8D:82
            X509v3 Authority Key Identifier:
                keyid:41:52:A2:CF:04:9C:93:F3:9A:FD:44:B0:BF:B5:0F:BE:F8:B6:09:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/695208cdb689241829fe22129267576a303ec708.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/986f5766-bbb3-468f-9be5-751335c8b86e/fb4c5f1d15f335dde7e79ffaccafd6330570a5c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/986f5766-bbb3-468f-9be5-751335c8b86e/695208cdb689241829fe22129267576a303ec708.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7e:4d:7f:54:e8:be:7c:8a:e7:e4:21:af:82:df:d4:1f:bb:61:
         de:13:a1:41:50:a5:59:5b:de:70:f9:43:38:71:40:de:1f:1e:
         57:d4:46:6a:92:c0:05:44:e4:78:2b:82:cb:c7:2f:d0:b5:16:
         9f:bf:e4:dd:f4:48:84:c9:77:d7:0c:66:7b:c5:69:d9:b8:eb:
         58:56:74:5b:97:24:2d:fd:c0:bd:b4:a2:48:00:c3:fc:8c:75:
         d7:63:81:f2:39:b6:61:a7:df:6e:9f:51:8f:49:dd:8f:fd:93:
         2d:0c:8a:d9:84:f9:f8:12:99:63:76:c7:ef:d7:39:e2:52:14:
         61:63:3b:a4:da:f1:13:16:94:a7:ec:8f:29:41:71:eb:54:41:
         13:54:56:73:1e:5c:12:c9:8f:cd:40:e2:26:df:4e:65:51:32:
         60:e6:0b:03:e1:c9:7d:13:7e:36:1a:0e:ba:ac:d8:6e:ac:01:
         24:52:9b:2f:f2:13:4a:ff:68:0d:25:95:70:7b:1c:5c:4f:2a:
         80:86:00:dc:a4:d3:d4:98:90:3b:3c:e5:5f:ce:b5:f0:cf:6d:
         ae:0c:b2:b0:b3:9d:98:ae:e0:75:ff:3a:42:7f:e9:7f:18:3c:
         b8:a0:8c:fa:e5:cb:ac:ce:d9:ed:7b:cf:62:3c:95:b2:02:f5:
         ff:d0:a8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 06:25:34 2024 by rpki-client on console-ams.rpki-client.org