Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9fdd7d63-afb3-4e00-a33a-7b77828872f7/f7f211737e94f831c40098a9aa1b47edbd1cd4ad.roa
File:                     f7f211737e94f831c40098a9aa1b47edbd1cd4ad.roa (raw, json)
Hash identifier:          PSiB14HZwMkZ5ecOGnySujkPblk/93JeZtNgu7ap4dQ=
Subject key identifier:   FE:E5:FB:B3:33:B9:B4:47:1A:5D:9C:9E:EA:A9:7F:C3:4C:E2:B9:EA
Certificate issuer:       /CN=7955196f919ee9639a3eefb43580c1411b377e84
Certificate serial:       0D4B28
Authority key identifier: 5B:4D:B8:BC:E6:14:91:33:A0:2D:C4:DE:B3:31:D0:E2:69:30:33:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7955196f919ee9639a3eefb43580c1411b377e84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9fdd7d63-afb3-4e00-a33a-7b77828872f7/f7f211737e94f831c40098a9aa1b47edbd1cd4ad.roa
Signing time:             Wed 24 Mar 2021 14:41:19 +0000
ROA not before:           Wed 24 Mar 2021 14:41:19 +0000
ROA not after:            Tue 24 Mar 2026 14:41:19 +0000
asID:                     61468
IP address blocks:        192.188.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9fdd7d63-afb3-4e00-a33a-7b77828872f7/7955196f919ee9639a3eefb43580c1411b377e84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9fdd7d63-afb3-4e00-a33a-7b77828872f7/7955196f919ee9639a3eefb43580c1411b377e84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7955196f919ee9639a3eefb43580c1411b377e84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871208 (0xd4b28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7955196f919ee9639a3eefb43580c1411b377e84
        Validity
            Not Before: Mar 24 14:41:19 2021 GMT
            Not After : Mar 24 14:41:19 2026 GMT
        Subject: CN=f7f211737e94f831c40098a9aa1b47edbd1cd4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:82:18:17:9b:a7:69:1b:cb:0e:41:5a:02:27:
                    51:27:94:47:89:7a:84:69:26:d3:56:88:39:88:31:
                    9d:e7:e7:1d:d9:ea:32:ec:26:e3:69:a5:a8:4b:69:
                    13:44:16:49:29:aa:ac:6a:61:45:cb:60:35:84:3f:
                    58:79:e9:48:23:75:0d:9b:2b:95:93:0f:98:45:94:
                    92:e4:cf:f7:1e:14:07:e4:4d:94:69:fd:38:bf:df:
                    f7:c8:4a:bd:d7:55:c0:07:a1:bb:df:32:88:0a:28:
                    94:ad:e1:29:51:03:cf:66:28:4f:06:4f:03:e5:f1:
                    a4:39:b7:d3:2d:11:da:0b:b1:f3:e4:62:1d:ce:2b:
                    a9:d8:3f:0a:74:d7:ea:24:07:bb:0c:3f:b0:48:dc:
                    86:5d:f7:6e:7d:b7:13:4b:e5:1f:21:f3:59:c9:bb:
                    2f:15:af:d1:3c:e6:78:eb:d9:b4:8e:54:8b:82:ab:
                    d2:a1:8f:e1:7e:62:2c:d1:85:85:01:ad:77:4e:a0:
                    29:ac:fa:e9:a1:8e:62:6e:07:7f:f1:1f:78:a6:64:
                    f5:a5:be:a0:2d:b7:59:63:f1:bb:f0:43:1f:08:3c:
                    d5:26:0c:66:f3:5c:6e:5a:23:44:7a:28:6d:6b:1f:
                    d2:c2:9a:83:f4:7d:86:1a:56:8a:83:2b:ea:5d:dd:
                    40:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E5:FB:B3:33:B9:B4:47:1A:5D:9C:9E:EA:A9:7F:C3:4C:E2:B9:EA
            X509v3 Authority Key Identifier:
                keyid:5B:4D:B8:BC:E6:14:91:33:A0:2D:C4:DE:B3:31:D0:E2:69:30:33:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7955196f919ee9639a3eefb43580c1411b377e84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9fdd7d63-afb3-4e00-a33a-7b77828872f7/f7f211737e94f831c40098a9aa1b47edbd1cd4ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9fdd7d63-afb3-4e00-a33a-7b77828872f7/7955196f919ee9639a3eefb43580c1411b377e84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:1f:da:f9:77:c5:23:d0:7d:16:bf:06:35:5d:01:7b:39:97:
         ad:37:e3:7a:81:6a:80:18:f0:59:ba:bc:61:b1:72:c3:8e:f1:
         a8:79:bd:b1:40:50:ca:a5:08:28:f1:64:02:7b:a9:71:c1:6d:
         49:05:cf:08:e1:7f:2f:52:83:ff:15:d5:95:c3:ef:f1:0a:89:
         72:b5:dc:b7:8e:d8:5e:07:80:1f:a3:48:9a:2d:ab:8d:d4:3c:
         91:11:34:c9:ac:10:75:01:6b:e6:3a:c6:70:c6:a4:f9:d2:05:
         e2:d2:9a:63:6f:9d:c6:f6:c6:e8:8e:e7:ad:e1:51:d2:b3:68:
         ee:9f:d5:16:d4:66:0b:fa:e8:02:5c:6f:29:76:a4:d2:c3:58:
         1f:86:5d:95:ab:d5:fd:6a:27:a2:95:8b:82:fb:a6:93:82:85:
         89:63:4c:bf:62:2b:75:b2:d8:ca:0e:e5:62:ac:78:27:3e:ce:
         bb:14:d4:b6:b3:9b:2f:8b:fa:f9:ab:1c:78:9b:75:4e:3c:48:
         10:ce:89:88:33:8f:cd:6e:7f:c4:39:4d:f9:53:25:74:0e:c5:
         91:ae:61:97:18:41:58:ab:41:00:52:fa:c1:89:a0:b3:80:14:
         53:6f:1e:ba:89:3e:7b:84:da:a2:b2:90:c4:dc:3a:62:1d:2f:
         5c:92:07:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 06:00:48 2024 by rpki-client on console-fra.rpki-client.org