Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/062458eeb08a6e086f4f98a4f4ed8306d75ff820.roa
File:                     062458eeb08a6e086f4f98a4f4ed8306d75ff820.roa (raw, json)
Hash identifier:          gqDYxEUeDtY59PwAYwsMGig5QocoibULosYQXX7+RUw=
Subject key identifier:   A3:17:17:42:9D:BD:D0:F9:6E:7C:EC:BE:6B:38:6F:F7:D2:C3:B0:4B
Certificate issuer:       /CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Certificate serial:       1AAAEB
Authority key identifier: 14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/062458eeb08a6e086f4f98a4f4ed8306d75ff820.roa
Signing time:             Wed 07 Sep 2022 22:30:02 +0000
ROA not before:           Wed 07 Sep 2022 20:49:37 +0000
ROA not after:            Sat 07 Sep 2024 20:49:37 +0000
asID:                     262145
IP address blocks:        190.211.122.0/24 maxlen: 25

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl
                          rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1747691 (0x1aaaeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
        Validity
            Not Before: Sep  7 20:49:37 2022 GMT
            Not After : Sep  7 20:49:37 2024 GMT
        Subject: CN=062458eeb08a6e086f4f98a4f4ed8306d75ff820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:31:71:8e:1a:2e:d1:14:b4:0c:a9:3f:f5:a5:
                    d1:6b:5d:5f:4b:8b:ab:e2:bb:b6:38:11:8d:ee:84:
                    a3:1c:a6:eb:fd:2f:b0:fe:a6:29:a3:bd:f2:32:f3:
                    2c:5d:90:88:d4:e9:38:41:ad:cd:f6:d4:64:fb:bd:
                    aa:9f:54:0d:61:a6:6c:e1:c0:26:f8:65:68:ac:78:
                    2d:65:1f:c7:0f:f4:fa:8c:54:8a:f0:cf:3e:53:44:
                    d4:75:66:97:f6:eb:46:af:e0:22:23:b1:0b:cf:ac:
                    4d:03:68:d1:94:83:87:e4:c0:98:8d:48:5c:c1:7b:
                    71:fb:57:19:7f:e1:b0:7c:cc:96:27:4d:6d:25:6d:
                    b9:4d:b7:5c:69:7b:e4:9b:27:43:ac:ca:b2:f8:f1:
                    8f:c5:91:4a:0e:27:e8:ec:a2:fe:72:92:75:75:ab:
                    12:66:ec:e4:a5:01:b8:8c:c7:bf:9d:a7:5d:0c:e3:
                    6c:9e:a2:43:b8:7e:ae:27:71:75:a6:a2:04:56:4c:
                    7c:93:43:27:49:dc:52:e9:62:bf:1d:58:8e:60:52:
                    c1:b2:81:2d:22:d1:27:26:05:45:33:88:04:bc:cf:
                    ef:98:91:f7:31:f4:96:80:06:8d:ec:0d:88:8d:76:
                    1d:9d:8e:83:4f:47:80:e2:0d:76:cf:e7:1a:d7:fb:
                    51:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:17:17:42:9D:BD:D0:F9:6E:7C:EC:BE:6B:38:6F:F7:D2:C3:B0:4B
            X509v3 Authority Key Identifier:
                keyid:14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/062458eeb08a6e086f4f98a4f4ed8306d75ff820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:94:bc:b8:5e:3d:23:3a:c4:fc:d8:f3:4c:ac:97:83:58:a9:
         fd:19:21:76:1c:61:44:e1:95:58:f9:df:50:a4:26:26:d1:9a:
         ce:82:ac:b1:b1:b4:f9:c1:31:cc:22:34:ca:79:7b:4d:55:e2:
         00:99:70:15:1e:7a:ba:a4:4b:44:47:20:10:2b:4d:bb:ab:1c:
         1a:2e:0e:59:21:f4:33:72:96:d2:d3:e4:f0:7b:0e:62:d1:2b:
         18:9b:d1:23:8a:89:57:d2:59:d3:0c:b3:4e:54:81:ee:e8:25:
         1a:1b:3e:49:8e:70:2d:80:a1:51:90:1b:61:57:25:aa:7c:7f:
         06:86:08:5c:e6:55:62:97:6b:1c:57:7f:45:a7:73:b8:3e:38:
         7e:30:7d:b9:79:cf:2d:59:ec:43:c3:ac:03:19:29:58:86:f7:
         12:7f:3b:2f:65:e8:aa:5d:d4:1e:2b:71:84:6d:a9:13:72:96:
         9e:3c:60:35:a4:7a:f0:67:92:a9:fb:73:38:e1:88:46:a3:4f:
         c6:37:64:9b:b8:88:e2:69:64:6c:c7:f2:be:20:dd:b1:14:a4:
         bb:cb:f2:70:bb:9f:61:fb:75:b2:2c:66:22:f8:4d:e6:8a:84:
         b0:d0:e1:23:f7:cd:f5:a8:6e:61:0f:e4:8c:9a:d4:e9:f5:64:
         71:e3:ee:b0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGqrrMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
NzQ3YzE5ODBiY2JlZWQ1NmNiNTE3YzY2N2E5NjZiODk0NWNlZWUwHhcNMjIwOTA3
MjA0OTM3WhcNMjQwOTA3MjA0OTM3WjAzMTEwLwYDVQQDEygwNjI0NThlZWIwOGE2
ZTA4NmY0Zjk4YTRmNGVkODMwNmQ3NWZmODIwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1DFxjhou0RS0DKk/9aXRa11fS4ur4ru2OBGN7oSjHKbr/S+w
/qYpo73yMvMsXZCI1Ok4Qa3N9tRk+72qn1QNYaZs4cAm+GVorHgtZR/HD/T6jFSK
8M8+U0TUdWaX9utGr+AiI7ELz6xNA2jRlIOH5MCYjUhcwXtx+1cZf+GwfMyWJ01t
JW25TbdcaXvkmydDrMqy+PGPxZFKDifo7KL+cpJ1dasSZuzkpQG4jMe/naddDONs
nqJDuH6uJ3F1pqIEVkx8k0MnSdxS6WK/HViOYFLBsoEtItEnJgVFM4gEvM/vmJH3
MfSWgAaN7A2IjXYdnY6DT0eA4g12z+ca1/tRmQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKMXF0KdvdD5bnzsvms4b/fSw7BLMB8GA1UdIwQYMBaAFBR0FWjkKW4qa7y5
Trkc04XkHHr0MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDU3NDdj
MTk4MGJjYmVlZDU2Y2I1MTdjNjY3YTk2NmI4OTQ1Y2VlZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWJmMTk1Y2UtYzQzZS00M2U2LTgyYmEtZDc3Njg5
NjgwNzg3LzA2MjQ1OGVlYjA4YTZlMDg2ZjRmOThhNGY0ZWQ4MzA2ZDc1ZmY4MjAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYmYxOTVjZS1jNDNlLTQzZTYtODJiYS1kNzc2
ODk2ODA3ODcvZDU3NDdjMTk4MGJjYmVlZDU2Y2I1MTdjNjY3YTk2NmI4OTQ1Y2Vl
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL7TejANBgkqhkiG9w0BAQsFAAOCAQEAh5S8uF49IzrE/Njz
TKyXg1ip/RkhdhxhROGVWPnfUKQmJtGazoKssbG0+cExzCI0ynl7TVXiAJlwFR56
uqRLREcgECtNu6scGi4OWSH0M3KW0tPk8HsOYtErGJvRI4qJV9JZ0wyzTlSB7ugl
Ghs+SY5wLYChUZAbYVclqnx/BoYIXOZVYpdrHFd/RadzuD44fjB9uXnPLVnsQ8Os
AxkpWIb3En87L2Xoql3UHitxhG2pE3KWnjxgNaR68GeSqftzOOGIRqNPxjdkm7iI
4mlkbMfyviDdsRSku8vycLufYft1sixmIvhN5oqEsNDhI/fN9ahuYQ/kjJrU6fVk
cePusA==
-----END CERTIFICATE-----
Generated at Thu Mar 28 18:50:55 2024 by rpki-client on console-ams.rpki-client.org