Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ab049880-19f9-4713-8964-99f92c2388a7/201ae090d202d46315b14325f581d1572846b1ea.roa
File:                     201ae090d202d46315b14325f581d1572846b1ea.roa (raw, json)
Hash identifier:          9GE/fdECEJwA/AI1VhsbcZmAz8AwOUfKb7/xuD0pK5M=
Subject key identifier:   D4:F5:AB:70:12:09:5F:11:11:4C:F4:C2:63:60:6B:D4:7D:45:36:0B
Certificate issuer:       /CN=7125c7c115a99947a022aea03850efda56aab912
Certificate serial:       0D4E14
Authority key identifier: C0:A3:81:14:BD:33:2A:AC:28:C8:7B:E2:99:BA:13:42:B0:53:C8:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7125c7c115a99947a022aea03850efda56aab912.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ab049880-19f9-4713-8964-99f92c2388a7/201ae090d202d46315b14325f581d1572846b1ea.roa
Signing time:             Wed 24 Mar 2021 14:40:29 +0000
ROA not before:           Wed 24 Mar 2021 14:40:28 +0000
ROA not after:            Tue 24 Mar 2026 14:40:28 +0000
asID:                     61468
IP address blocks:        179.49.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ab049880-19f9-4713-8964-99f92c2388a7/7125c7c115a99947a022aea03850efda56aab912.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ab049880-19f9-4713-8964-99f92c2388a7/7125c7c115a99947a022aea03850efda56aab912.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7125c7c115a99947a022aea03850efda56aab912.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871956 (0xd4e14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7125c7c115a99947a022aea03850efda56aab912
        Validity
            Not Before: Mar 24 14:40:28 2021 GMT
            Not After : Mar 24 14:40:28 2026 GMT
        Subject: CN=201ae090d202d46315b14325f581d1572846b1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ab:aa:16:25:bc:22:86:1d:2e:c9:06:0b:82:
                    22:03:9d:84:27:a3:7b:65:6e:2f:f8:e6:5a:a9:db:
                    22:7e:d0:9f:f2:5a:8f:d6:d0:c9:6d:66:d6:88:35:
                    40:03:a9:6c:2a:2e:69:06:03:e9:c2:58:b2:5b:11:
                    26:d2:e4:9a:14:2b:19:d7:e2:4f:a3:97:5f:5f:2c:
                    a8:17:db:ad:55:ab:9f:fa:97:1a:69:1b:a3:a9:61:
                    bd:bf:ff:44:f0:ad:78:74:c2:5c:62:e5:27:81:bd:
                    d2:27:1d:aa:b1:41:bb:5d:3c:b5:0c:dd:00:d2:af:
                    08:7d:35:62:7b:0a:00:e3:97:49:c0:fd:9d:d4:4f:
                    b1:32:37:56:2c:2e:6d:4a:e2:9d:33:5b:e1:ec:ee:
                    56:45:d2:ef:a9:20:5c:82:71:3d:d0:d6:14:2b:13:
                    a8:a3:c0:3c:bc:04:17:b7:3b:f6:74:9f:1a:47:16:
                    e3:83:1b:df:58:50:c4:a9:98:59:fe:0b:18:05:be:
                    8e:5d:a9:d8:17:c7:7c:29:e0:81:df:df:86:a5:ee:
                    06:4d:4e:28:28:92:eb:a5:7b:91:cb:e6:c5:0e:ca:
                    34:23:ec:1b:50:c2:a5:16:85:e3:79:5b:2c:64:d8:
                    0d:4e:7c:3c:d2:81:ae:c5:f1:62:10:b4:a4:ed:fa:
                    b1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F5:AB:70:12:09:5F:11:11:4C:F4:C2:63:60:6B:D4:7D:45:36:0B
            X509v3 Authority Key Identifier:
                keyid:C0:A3:81:14:BD:33:2A:AC:28:C8:7B:E2:99:BA:13:42:B0:53:C8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7125c7c115a99947a022aea03850efda56aab912.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ab049880-19f9-4713-8964-99f92c2388a7/201ae090d202d46315b14325f581d1572846b1ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ab049880-19f9-4713-8964-99f92c2388a7/7125c7c115a99947a022aea03850efda56aab912.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:f5:3e:b8:a8:a3:75:a9:26:5a:3a:be:1d:0a:c0:05:3d:10:
         a1:ec:0b:69:0a:9c:8c:ae:7f:c5:6b:4b:23:3a:5c:14:ee:53:
         87:5c:6b:60:e3:19:84:12:05:83:99:0a:5f:f0:57:aa:53:ef:
         63:2f:77:a0:2f:32:d2:fa:bc:f8:c9:5a:af:33:e9:9c:0a:b4:
         78:95:d8:7b:d5:a6:b6:f5:39:ce:2b:7f:54:6b:6a:45:59:71:
         d3:8f:bd:bd:6a:9e:fd:95:24:37:8b:94:85:de:bf:9c:a2:d1:
         2b:71:b6:5a:07:cf:80:4c:3b:bf:76:72:b9:47:38:98:d8:03:
         6f:e5:05:d5:b7:8b:67:36:b3:43:56:a4:28:bf:95:0a:96:34:
         a1:15:b2:ad:f3:0c:50:f5:cb:82:47:3b:7a:26:e9:8c:fd:47:
         34:1a:66:cd:4d:74:b8:3f:94:bf:05:c4:59:ac:c6:bb:05:3c:
         43:6b:77:e9:07:ef:13:8c:96:ac:91:a3:c7:40:48:ca:2e:61:
         7c:16:3c:65:24:7e:3c:42:9e:f8:83:d7:22:16:6a:4a:bc:68:
         b6:d3:17:1d:3c:fa:d1:88:67:73:50:38:ae:d2:a5:72:bd:ea:
         86:01:50:0a:d3:d0:ab:c2:69:c2:3a:b7:d1:2f:72:ae:a0:d3:
         57:d9:4e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 21:30:54 2024 by rpki-client on console-ams.rpki-client.org