Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ab049880-19f9-4713-8964-99f92c2388a7/709d1a011a4fa2738089a4a23d5a4c33bd1ebccf.roa
File:                     709d1a011a4fa2738089a4a23d5a4c33bd1ebccf.roa (raw, json)
Hash identifier:          5/xFIpCYilt2LvA7vXuMe0BUKpN7AII0STBUvoC7gaQ=
Subject key identifier:   63:6D:67:54:E6:EE:EF:B8:39:F0:79:AE:E8:6E:6E:E2:15:26:3C:8F
Certificate issuer:       /CN=7125c7c115a99947a022aea03850efda56aab912
Certificate serial:       0D4FF4
Authority key identifier: C0:A3:81:14:BD:33:2A:AC:28:C8:7B:E2:99:BA:13:42:B0:53:C8:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7125c7c115a99947a022aea03850efda56aab912.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ab049880-19f9-4713-8964-99f92c2388a7/709d1a011a4fa2738089a4a23d5a4c33bd1ebccf.roa
Signing time:             Wed 24 Mar 2021 14:40:29 +0000
ROA not before:           Wed 24 Mar 2021 14:40:28 +0000
ROA not after:            Tue 24 Mar 2026 14:40:28 +0000
asID:                     27947
IP address blocks:        190.57.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ab049880-19f9-4713-8964-99f92c2388a7/7125c7c115a99947a022aea03850efda56aab912.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ab049880-19f9-4713-8964-99f92c2388a7/7125c7c115a99947a022aea03850efda56aab912.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7125c7c115a99947a022aea03850efda56aab912.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 872436 (0xd4ff4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7125c7c115a99947a022aea03850efda56aab912
        Validity
            Not Before: Mar 24 14:40:28 2021 GMT
            Not After : Mar 24 14:40:28 2026 GMT
        Subject: CN=709d1a011a4fa2738089a4a23d5a4c33bd1ebccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5e:42:0b:8b:1b:b2:7b:18:19:9b:2e:03:96:
                    c4:13:c3:25:62:1e:9b:47:1f:b2:81:e1:40:62:4a:
                    c4:31:fe:91:71:08:41:0f:61:da:08:83:f2:81:d6:
                    b2:24:62:10:ee:3e:5b:b8:9f:8a:1e:3d:28:98:7f:
                    49:27:7d:3e:d2:e4:f9:68:45:0f:f8:8e:db:b3:91:
                    70:51:58:f1:a0:d0:91:a3:f9:57:7e:2d:69:e3:46:
                    45:2a:a5:6d:f3:ae:b5:0d:d0:d2:ae:d0:bf:90:90:
                    d7:bc:c7:c6:ad:b8:3f:02:0f:4f:f1:e4:e5:5c:83:
                    2b:92:0e:e1:ec:c8:1c:65:e1:91:a2:bf:71:7f:b2:
                    bf:30:45:d9:5f:c4:6e:f1:4d:52:73:95:c0:0f:24:
                    27:18:d8:a7:97:3c:43:93:f0:4e:24:71:5a:5c:7f:
                    b0:91:79:81:10:c4:4c:09:ce:04:55:39:04:60:85:
                    0c:11:57:d1:7a:3e:82:22:0f:e1:30:0d:17:c2:9b:
                    7a:f8:1c:44:22:55:ee:01:df:d0:b1:8b:0f:ad:62:
                    b9:ad:6e:ec:14:8d:12:83:11:d5:6c:9b:67:30:3e:
                    b2:68:56:8c:36:1f:be:6b:f9:0d:88:25:ee:23:aa:
                    9b:74:36:ed:de:53:b1:20:41:67:92:17:d1:1f:f4:
                    c1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6D:67:54:E6:EE:EF:B8:39:F0:79:AE:E8:6E:6E:E2:15:26:3C:8F
            X509v3 Authority Key Identifier:
                keyid:C0:A3:81:14:BD:33:2A:AC:28:C8:7B:E2:99:BA:13:42:B0:53:C8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7125c7c115a99947a022aea03850efda56aab912.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ab049880-19f9-4713-8964-99f92c2388a7/709d1a011a4fa2738089a4a23d5a4c33bd1ebccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ab049880-19f9-4713-8964-99f92c2388a7/7125c7c115a99947a022aea03850efda56aab912.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:ab:56:e1:34:b0:18:e8:1c:3b:c7:1d:ef:f3:b3:29:27:53:
         d9:b1:9a:c5:75:1d:2b:38:9d:79:8e:05:4a:c0:b9:6d:30:0b:
         cf:a3:0d:31:21:0d:0f:e5:9e:92:7d:c2:b9:00:b4:dd:7c:23:
         27:22:8d:08:92:d3:38:7a:91:39:26:14:c1:94:2b:ca:a6:c2:
         0c:fc:0c:18:54:ce:a2:c6:99:03:f7:00:24:4d:d4:5a:89:a4:
         31:cc:3d:15:53:c9:bd:27:ad:5a:f8:c1:a0:87:73:06:f0:74:
         92:4a:8d:a3:66:eb:b9:f9:cb:bc:a4:ee:bd:71:44:32:08:8a:
         0a:6c:80:13:af:59:84:30:21:88:43:07:0e:92:3b:02:11:5f:
         22:5d:56:e3:1f:0a:b1:6e:ac:de:0b:f2:6d:c6:f3:a2:ac:ae:
         6f:7a:93:35:06:2d:93:81:0d:23:b2:1b:b7:86:3f:f5:0b:66:
         21:b9:ac:f7:3c:26:00:18:96:8b:95:b3:87:e7:fb:9b:70:8b:
         01:72:5e:5c:bf:67:c8:b4:33:62:3f:64:8e:28:85:ec:a4:b6:
         0e:6b:11:ee:b0:fe:5c:0b:79:e4:c0:97:f3:e5:ca:d9:46:70:
         b6:4e:da:c5:60:1e:58:98:d0:cb:8b:03:36:12:65:33:25:73:
         de:8e:b0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 06:25:34 2024 by rpki-client on console-ams.rpki-client.org