Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aae69840-7ed2-42a4-a0d0-df468c29db65/12c5ecbfd93c568be82b5859c11d7210b368a58c.roa
File:                     12c5ecbfd93c568be82b5859c11d7210b368a58c.roa (raw, json)
Hash identifier:          dH+oj928HXls/37Z8zf7HvhC7k5Q/ch3zZgShGQnKbo=
Subject key identifier:   5C:B8:AB:F0:89:49:39:20:27:12:8D:8F:80:A8:44:46:0D:68:67:2D
Certificate issuer:       /CN=acea05e36ade234a2b21796624db8f7c07355124
Certificate serial:       0D3544
Authority key identifier: 7A:75:A3:F8:25:83:24:1F:B3:1B:5E:CC:7F:61:3D:5C:FF:E9:97:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acea05e36ade234a2b21796624db8f7c07355124.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aae69840-7ed2-42a4-a0d0-df468c29db65/12c5ecbfd93c568be82b5859c11d7210b368a58c.roa
Signing time:             Wed 24 Mar 2021 14:33:39 +0000
ROA not before:           Wed 24 Mar 2021 14:33:39 +0000
ROA not after:            Tue 24 Mar 2026 14:33:39 +0000
asID:                     265831
IP address blocks:        192.141.48.0/24 maxlen: 24
                          192.141.49.0/24 maxlen: 24
                          192.141.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/aae69840-7ed2-42a4-a0d0-df468c29db65/acea05e36ade234a2b21796624db8f7c07355124.crl
                          rsync://repository.lacnic.net/rpki/lacnic/aae69840-7ed2-42a4-a0d0-df468c29db65/acea05e36ade234a2b21796624db8f7c07355124.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acea05e36ade234a2b21796624db8f7c07355124.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865604 (0xd3544)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acea05e36ade234a2b21796624db8f7c07355124
        Validity
            Not Before: Mar 24 14:33:39 2021 GMT
            Not After : Mar 24 14:33:39 2026 GMT
        Subject: CN=12c5ecbfd93c568be82b5859c11d7210b368a58c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:db:c4:fc:10:fb:32:2b:64:42:c5:6c:78:e2:
                    f0:ab:69:b7:44:25:64:88:f3:84:87:da:2a:14:12:
                    50:57:11:89:9a:ea:aa:80:ef:bd:68:0d:c3:ca:a5:
                    27:a4:52:57:be:bc:5d:7b:c1:61:21:81:8e:2a:d5:
                    da:dd:85:88:79:f3:87:4f:59:0a:93:c5:d4:5b:92:
                    bf:d5:9d:31:a8:d9:c7:00:b6:48:fc:16:aa:3b:cc:
                    12:ce:56:03:96:fa:a2:3f:83:cd:4c:e0:8d:09:37:
                    96:07:aa:2e:d4:23:b0:b5:ef:1b:24:e1:1a:2e:61:
                    da:97:7b:99:b5:16:9f:67:07:61:6d:09:f9:f0:44:
                    35:d9:d3:cc:a6:d9:18:0b:cf:0f:e1:75:fc:cb:5f:
                    8f:bc:44:56:ab:62:d6:dc:52:25:50:af:28:40:ac:
                    a4:a3:d5:2f:f2:6c:c1:f6:61:fc:cc:5a:3f:d7:54:
                    71:b4:7c:23:5e:dc:67:34:11:ab:ba:97:88:47:6d:
                    ae:6f:5d:0d:b1:fc:e1:9d:56:51:06:78:13:33:0e:
                    70:61:51:59:08:c7:bb:db:0c:a5:63:e9:28:90:11:
                    74:10:55:dc:f5:4b:a2:de:1a:2a:e8:e8:59:4c:c9:
                    1a:24:3b:47:82:aa:98:a3:51:a0:80:94:f8:f1:2c:
                    a9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B8:AB:F0:89:49:39:20:27:12:8D:8F:80:A8:44:46:0D:68:67:2D
            X509v3 Authority Key Identifier:
                keyid:7A:75:A3:F8:25:83:24:1F:B3:1B:5E:CC:7F:61:3D:5C:FF:E9:97:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acea05e36ade234a2b21796624db8f7c07355124.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aae69840-7ed2-42a4-a0d0-df468c29db65/12c5ecbfd93c568be82b5859c11d7210b368a58c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aae69840-7ed2-42a4-a0d0-df468c29db65/acea05e36ade234a2b21796624db8f7c07355124.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.48.0-192.141.50.255

    Signature Algorithm: sha256WithRSAEncryption
         7a:a6:d5:eb:80:96:08:13:93:c3:83:37:1f:3d:17:1e:80:99:
         06:5e:3c:3f:94:bb:88:0c:31:de:e9:6a:1c:af:7f:9f:bd:00:
         e4:11:be:c9:1d:4f:fd:f4:88:a2:88:f0:84:5a:24:8b:e6:3f:
         3c:8e:51:b1:ed:f3:30:4a:67:fd:a1:2c:0a:8d:2f:18:b7:59:
         a3:53:71:d8:6b:9e:a6:ac:ff:16:48:3b:92:2d:85:f2:2b:92:
         46:f5:25:2c:1e:ce:e1:48:94:01:14:a6:a9:5f:ae:b0:6c:1e:
         7c:32:e8:d9:b9:64:b7:3e:7c:e0:60:b3:bd:fc:51:29:3a:bb:
         25:73:0a:3b:25:a3:7f:c3:d2:04:29:dc:d7:a4:3c:7d:f5:27:
         04:90:ea:27:55:90:c1:65:57:c9:c2:5e:02:30:22:8e:d9:4d:
         fd:d8:fd:29:da:21:8e:d8:24:b2:24:64:7d:bc:0c:4a:35:05:
         98:02:bd:80:bc:99:bf:5a:ef:b3:ad:b1:58:23:73:38:ae:5f:
         47:c5:48:b4:8f:c3:cb:9d:e5:62:b6:ad:11:4d:90:c6:af:86:
         c5:9e:44:92:8c:43:12:c5:ce:4d:59:aa:9e:ff:0f:e2:50:b6:
         54:4f:cd:56:54:24:5c:1d:b9:ba:57:c9:c6:04:67:e4:d6:1d:
         6b:a1:8c:fa
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDDTVEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFj
ZWEwNWUzNmFkZTIzNGEyYjIxNzk2NjI0ZGI4ZjdjMDczNTUxMjQwHhcNMjEwMzI0
MTQzMzM5WhcNMjYwMzI0MTQzMzM5WjAzMTEwLwYDVQQDEygxMmM1ZWNiZmQ5M2M1
NjhiZTgyYjU4NTljMTFkNzIxMGIzNjhhNThjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAidvE/BD7MitkQsVseOLwq2m3RCVkiPOEh9oqFBJQVxGJmuqq
gO+9aA3DyqUnpFJXvrxde8FhIYGOKtXa3YWIefOHT1kKk8XUW5K/1Z0xqNnHALZI
/BaqO8wSzlYDlvqiP4PNTOCNCTeWB6ou1COwte8bJOEaLmHal3uZtRafZwdhbQn5
8EQ12dPMptkYC88P4XX8y1+PvERWq2LW3FIlUK8oQKyko9Uv8mzB9mH8zFo/11Rx
tHwjXtxnNBGrupeIR22ub10NsfzhnVZRBngTMw5wYVFZCMe72wylY+kokBF0EFXc
9Uui3hoq6OhZTMkaJDtHgqqYo1GggJT48SypWwIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFFy4q/CJSTkgJxKNj4CoREYNaGctMB8GA1UdIwQYMBaAFHp1o/glgyQfsxte
zH9hPVz/6Zc1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWNlYTA1
ZTM2YWRlMjM0YTJiMjE3OTY2MjRkYjhmN2MwNzM1NTEyNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWFlNjk4NDAtN2VkMi00MmE0LWEwZDAtZGY0Njhj
MjlkYjY1LzEyYzVlY2JmZDkzYzU2OGJlODJiNTg1OWMxMWQ3MjEwYjM2OGE1OGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYWU2OTg0MC03ZWQyLTQyYTQtYTBkMC1kZjQ2
OGMyOWRiNjUvYWNlYTA1ZTM2YWRlMjM0YTJiMjE3OTY2MjRkYjhmN2MwNzM1NTEy
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQEwI0wAwQAwI0yMA0GCSqGSIb3DQEBCwUAA4IBAQB6ptXr
gJYIE5PDgzcfPRcegJkGXjw/lLuIDDHe6Wocr3+fvQDkEb7JHU/99IiiiPCEWiSL
5j88jlGx7fMwSmf9oSwKjS8Yt1mjU3HYa56mrP8WSDuSLYXyK5JG9SUsHs7hSJQB
FKapX66wbB58MujZuWS3PnzgYLO9/FEpOrslcwo7JaN/w9IEKdzXpDx99ScEkOon
VZDBZVfJwl4CMCKO2U392P0p2iGO2CSyJGR9vAxKNQWYAr2AvJm/Wu+zrbFYI3M4
rl9HxUi0j8PLneVitq0RTZDGr4bFnkSSjEMSxc5NWaqe/w/iULZUT81WVCRcHbm6
V8nGBGfk1h1roYz6
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:14:22 2024 by rpki-client on console-ams.rpki-client.org