Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/92be6ec18a9dcf4face79f5254330269eb97434a.roa
File:                     92be6ec18a9dcf4face79f5254330269eb97434a.roa (raw, json)
Hash identifier:          tbTmHQqCzEkyMvf9jh6eyGs7YHkDYOQA49O0KGUiUQA=
Subject key identifier:   0B:75:0B:A1:45:67:55:0D:95:94:DA:DE:0E:1D:31:DA:54:CE:D2:1B
Certificate issuer:       /CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Certificate serial:       1A5A2D
Authority key identifier: 14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/92be6ec18a9dcf4face79f5254330269eb97434a.roa
Signing time:             Wed 07 Sep 2022 20:53:12 +0000
ROA not before:           Wed 07 Sep 2022 20:49:37 +0000
ROA not after:            Sat 07 Sep 2024 20:49:37 +0000
asID:                     262145
IP address blocks:        190.211.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl
                          rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1727021 (0x1a5a2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
        Validity
            Not Before: Sep  7 20:49:37 2022 GMT
            Not After : Sep  7 20:49:37 2024 GMT
        Subject: CN=92be6ec18a9dcf4face79f5254330269eb97434a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:78:db:6d:96:d4:80:3a:cf:dc:50:89:b4:c3:
                    19:a6:44:36:d8:47:72:f1:99:ac:04:fb:74:aa:d3:
                    a1:3f:5a:2c:71:d6:6f:76:57:5c:78:45:88:f6:f3:
                    e7:0b:e9:ca:f4:87:5d:69:32:3c:18:33:05:d5:13:
                    25:c0:e0:48:95:58:e2:56:08:5c:e9:bd:42:e8:ea:
                    99:f8:16:a7:44:52:ed:cf:47:ba:e5:77:7e:d0:c2:
                    fd:81:a7:5d:fe:55:0d:5c:bf:0a:75:1d:7c:17:6f:
                    2f:ed:a6:e2:7c:5c:e8:95:0f:8c:21:38:e1:ab:b8:
                    e9:61:03:08:d7:50:06:95:7f:0c:51:6f:bc:0b:18:
                    fb:0c:69:4a:ad:b0:f5:7a:b3:3f:59:21:8a:3c:99:
                    9b:55:e4:7d:e7:a8:1e:81:18:ff:0b:33:f3:bd:d9:
                    d5:75:d2:f9:2a:11:1f:32:c1:fe:71:11:f2:61:cc:
                    1b:80:92:dc:fa:48:b5:b2:f6:ca:c6:08:b1:5a:cc:
                    cf:a0:c4:c4:91:10:ef:d4:73:5b:eb:07:71:db:37:
                    3f:cb:98:53:76:65:b8:e3:2c:8d:a7:aa:07:f3:41:
                    a4:27:e6:ee:a4:da:cc:2f:0d:94:c0:c7:6e:9b:41:
                    fa:89:94:52:62:81:d2:14:3b:58:7f:bb:8f:d8:d0:
                    0d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:75:0B:A1:45:67:55:0D:95:94:DA:DE:0E:1D:31:DA:54:CE:D2:1B
            X509v3 Authority Key Identifier:
                keyid:14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/92be6ec18a9dcf4face79f5254330269eb97434a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:17:8d:46:1b:12:b2:ba:a1:97:3c:d7:cd:9e:8b:49:74:ef:
         0a:85:c7:d3:70:d6:8d:57:4f:59:6d:d3:af:55:66:6d:01:c6:
         3e:7d:56:6d:97:74:a8:69:90:5c:7d:84:d2:26:d2:9c:93:8a:
         a2:27:e4:40:e1:57:fa:a5:e5:09:48:b7:6f:75:d9:a9:bc:26:
         45:d4:a6:ff:cd:61:49:97:4f:f3:2b:b5:6e:d7:4c:ac:3a:9f:
         99:7d:0d:22:ba:75:7b:cc:c5:cf:10:77:2c:ce:68:9b:cd:af:
         10:c0:59:7a:cf:06:77:6e:62:8e:e1:6a:71:97:87:78:ef:db:
         2b:15:de:57:8a:f7:ef:31:c6:d8:44:87:cb:43:0b:54:c8:ba:
         29:54:d9:f0:a3:a8:fa:e2:9c:be:fc:24:34:c7:09:b4:25:9e:
         26:e2:c3:71:b1:30:b3:1d:76:19:a1:76:4a:20:ad:26:31:0c:
         5f:c7:5e:e7:a8:11:3f:17:d7:f8:45:94:49:15:db:19:cc:88:
         3c:26:c4:fe:1b:ba:9d:ea:ea:a5:29:75:f6:a0:45:41:2f:51:
         79:69:82:39:37:c0:67:e0:10:8e:a5:eb:e9:39:b3:44:10:34:
         33:a0:b1:a6:81:81:40:5f:e6:82:9f:26:55:3e:0c:97:bf:c6:
         b5:f7:26:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 18:50:55 2024 by rpki-client on console-ams.rpki-client.org