Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/73c3aeaf9cfa43cab31fa44ececfdf78df8ae35c.roa
File:                     73c3aeaf9cfa43cab31fa44ececfdf78df8ae35c.roa (raw, json)
Hash identifier:          MvOCTm+HTs7niT3QG966jdamCzdbPNQOPTBNp658LyY=
Subject key identifier:   7B:6A:7E:94:CC:34:29:1C:68:8F:12:77:0C:AD:87:B8:A9:E2:D3:3A
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       0E6CAC
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/73c3aeaf9cfa43cab31fa44ececfdf78df8ae35c.roa
Signing time:             Wed 24 Mar 2021 14:38:32 +0000
ROA not before:           Wed 24 Mar 2021 14:38:31 +0000
ROA not after:            Tue 24 Mar 2026 14:38:31 +0000
asID:                     22724
IP address blocks:        181.113.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl
                          rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 945324 (0xe6cac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Mar 24 14:38:31 2021 GMT
            Not After : Mar 24 14:38:31 2026 GMT
        Subject: CN=73c3aeaf9cfa43cab31fa44ececfdf78df8ae35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1a:ef:ad:07:03:43:37:9a:fc:56:23:c8:19:
                    6b:20:28:b2:f4:11:c2:dc:36:bf:17:10:7f:3f:9a:
                    5e:13:07:ae:4a:f1:39:7f:e5:fa:35:2c:c1:72:0c:
                    ee:3f:91:c9:ca:2d:30:3e:ab:05:d4:d5:72:1e:77:
                    db:fb:41:70:73:c5:fa:cf:7d:cb:2c:f7:b9:49:9d:
                    69:1c:b4:ed:6f:4b:e7:5c:92:b8:a6:9d:0c:60:67:
                    60:3c:f2:57:29:9b:8f:6c:c3:8d:97:33:cd:e8:23:
                    a5:3f:0e:60:be:4e:89:39:4b:39:48:2a:b4:2d:d8:
                    3b:60:ea:a9:f2:de:7f:98:12:88:3f:e0:96:7c:27:
                    8c:62:8e:88:24:a9:e7:2a:e9:aa:9c:c6:fd:0d:06:
                    31:0a:8d:f2:7f:53:99:1a:89:92:a0:e6:01:fa:35:
                    b1:d2:73:72:39:02:3a:8c:8f:33:0b:78:b8:a2:c1:
                    9b:86:c7:ab:ab:bb:bf:4c:6c:17:14:f9:9f:a9:3e:
                    3d:1b:9a:23:12:d8:98:58:f0:0e:ef:71:bb:5b:ce:
                    9e:8d:a6:d2:0f:fb:73:de:b8:0d:62:0d:a6:e5:26:
                    27:81:b7:39:bb:7e:a7:d3:a0:d1:49:cf:1e:6c:50:
                    70:8b:58:39:df:94:6b:f7:48:dc:4c:2e:04:52:44:
                    cd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6A:7E:94:CC:34:29:1C:68:8F:12:77:0C:AD:87:B8:A9:E2:D3:3A
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/73c3aeaf9cfa43cab31fa44ececfdf78df8ae35c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.113.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:9c:7d:1b:8e:d9:d0:f8:d3:ee:a7:6a:6f:d7:a4:de:92:4d:
         4b:3e:4f:5f:ef:b8:4f:e5:44:ea:03:3c:43:1f:0a:a5:81:4d:
         03:89:bc:cf:cd:81:28:75:46:5d:bf:3a:d9:00:ce:af:2c:bc:
         09:31:7c:48:af:2b:93:15:3e:6b:66:4a:ef:36:6b:a7:ee:e8:
         4f:05:42:eb:fe:f5:a2:d9:6a:e6:1a:d0:45:45:4d:f9:81:86:
         db:40:6b:1c:38:9b:47:56:a8:f6:7c:50:f6:bb:1c:c9:57:bc:
         5a:11:5a:e0:f0:9d:1e:41:13:bd:08:62:cc:1c:8a:82:4a:5b:
         2b:6f:f9:c1:e1:f2:c1:7f:c2:cb:52:33:c4:8c:9b:70:a1:17:
         ff:96:e8:c0:b0:5b:76:42:c9:89:c4:f3:65:03:2b:e0:5b:c0:
         e5:60:99:05:b7:61:bd:95:0c:24:39:47:2b:c4:d3:d0:51:40:
         a1:6e:c4:2e:1d:48:d9:0b:75:21:38:8b:9b:7c:5a:e5:89:97:
         5c:62:18:a1:ca:fe:1b:50:97:ac:eb:2d:9b:4d:6c:37:21:b3:
         a9:02:51:58:53:c5:d6:f4:c6:b4:da:1a:82:70:4a:be:bc:58:
         41:51:73:48:9c:c2:1d:4f:07:65:9f:5c:20:0b:53:68:6d:81:
         31:98:99:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 03:11:39 2024 by rpki-client on console-fra.rpki-client.org