Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS10476.roa
File:                     AS10476.roa (raw, json)
Hash identifier:          qqeSLuE3/vUpLR+dtqi3OqEAQVF7sgsMUP6KEIZchcI=
Subject key identifier:   9A:4F:BF:C9:12:91:58:D5:4A:7D:C7:C7:70:9C:6D:9D:77:4B:C1:36
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       62DB409DBDCF3A1AD63829C8EC21B6FF4E6172F0
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS10476.roa
Signing time:             Tue 04 Feb 2025 18:02:43 +0000
ROA not before:           Tue 04 Feb 2025 17:57:43 +0000
ROA not after:            Tue 03 Feb 2026 18:02:43 +0000
asID:                     10476
IP address blocks:        200.108.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:db:40:9d:bd:cf:3a:1a:d6:38:29:c8:ec:21:b6:ff:4e:61:72:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Feb  4 17:57:43 2025 GMT
            Not After : Feb  3 18:02:43 2026 GMT
        Subject: CN=9A4FBFC9129158D54A7DC7C7709C6D9D774BC136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e9:53:ff:ea:b3:40:a9:c5:dd:08:e0:d7:eb:
                    f5:2b:6b:97:52:73:45:97:4c:5f:ae:1d:b4:58:26:
                    fd:67:a6:aa:10:72:8a:44:37:8b:c0:bb:49:75:1e:
                    80:4e:62:6e:31:7e:24:61:24:70:80:d3:cc:89:50:
                    7a:6e:2f:d8:91:1c:8f:36:cf:65:0e:53:77:94:cc:
                    78:78:f1:0f:d5:89:54:58:c5:63:35:f7:a2:78:4b:
                    01:dc:26:34:ac:cc:4d:a9:d6:ca:74:75:35:14:ba:
                    15:41:d3:ad:35:db:56:06:c8:aa:68:7a:f2:fa:5e:
                    ea:f6:d7:73:77:03:e9:3d:a1:5d:0b:e0:ec:f3:95:
                    98:69:42:6e:48:bd:95:14:0a:52:d1:40:59:ed:d4:
                    4e:63:b3:6b:95:21:7b:95:50:ee:46:3f:27:15:d2:
                    7b:29:3c:cc:15:c1:6f:3a:8b:6e:27:5a:e1:23:8f:
                    dd:98:8e:cc:b0:a8:89:5a:ed:b5:ee:c7:d3:5a:e7:
                    72:fb:7a:50:96:24:ee:da:61:83:ba:23:b6:e4:1d:
                    68:7e:10:2e:92:1b:91:2e:93:f8:a2:74:8a:b3:eb:
                    ad:b8:13:19:26:17:52:23:b3:32:e7:cb:c1:81:6f:
                    2c:10:64:e0:e2:3b:4a:c0:14:6f:a4:4b:91:c9:4a:
                    90:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4F:BF:C9:12:91:58:D5:4A:7D:C7:C7:70:9C:6D:9D:77:4B:C1:36
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS10476.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:92:65:13:3f:da:76:44:9d:34:9a:41:00:99:ce:61:3c:26:
         88:c8:a0:26:09:4d:9f:fb:25:d0:00:f3:ad:6c:bd:fa:5f:de:
         b9:93:e7:30:64:af:ac:65:9a:61:ad:1e:49:a1:85:d9:d0:51:
         7e:99:5a:ad:c0:00:5e:60:5a:79:61:02:58:88:ec:b8:dc:9b:
         3a:12:3a:cc:3f:45:2d:f9:10:39:cd:24:aa:6b:0c:d4:a0:73:
         09:26:a1:04:57:b0:aa:36:ba:db:f3:43:a2:b7:49:52:d3:f0:
         ac:e9:f5:62:5c:b5:4d:3d:0a:a0:11:64:36:ef:7a:10:28:e4:
         e9:e0:1c:eb:38:9d:0e:35:ec:0c:f8:3e:75:f4:59:e2:ec:7c:
         1e:62:ef:10:f4:e9:a7:c9:48:a9:f6:8f:fe:e6:48:10:63:e0:
         4d:45:47:d7:16:fb:7c:1f:b4:c6:09:78:1e:37:a5:2f:fb:c9:
         2f:95:ab:66:9a:4f:75:10:5c:36:4b:ef:71:67:5a:f1:25:57:
         ad:7a:26:58:5d:70:b2:5a:84:70:b8:e8:0e:75:a3:f1:a3:0c:
         ac:f9:6c:e7:30:21:f0:83:57:0e:50:02:22:a3:79:7d:95:de:
         90:16:b9:57:07:72:74:b6:35:2d:2d:b1:77:01:00:fe:8a:42:
         09:d1:8b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:11:16 2025 by rpki-client