Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/fc9504b91912f55bec014e8ad0e472a4a9785f19.roa
File:                     fc9504b91912f55bec014e8ad0e472a4a9785f19.roa (raw, json)
Hash identifier:          V5wvbYL1KVyhqWMf0aDGfKxu/tbaxfYnSI5cfUBwS1w=
Subject key identifier:   F9:E4:A2:0C:3F:A4:C0:D2:D9:AA:2C:FF:09:62:FD:F8:B5:F7:2C:06
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       0E5E15
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/fc9504b91912f55bec014e8ad0e472a4a9785f19.roa
Signing time:             Wed 24 Mar 2021 14:38:32 +0000
ROA not before:           Wed 24 Mar 2021 14:38:31 +0000
ROA not after:            Tue 24 Mar 2026 14:38:31 +0000
asID:                     22724
IP address blocks:        186.178.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl
                          rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 941589 (0xe5e15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Mar 24 14:38:31 2021 GMT
            Not After : Mar 24 14:38:31 2026 GMT
        Subject: CN=fc9504b91912f55bec014e8ad0e472a4a9785f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7b:9e:72:90:ab:8a:23:3b:5c:2d:a3:bc:4e:
                    01:1c:d0:99:04:5d:a7:79:fa:8b:df:5d:56:93:3a:
                    53:e3:82:9b:f8:d3:14:01:23:11:ac:ca:91:4a:ed:
                    8e:20:c1:3d:93:3d:f7:bc:99:4b:a9:1b:dd:37:aa:
                    c4:6f:7c:e9:50:61:c9:e1:1a:89:e4:58:ce:ca:04:
                    20:14:c8:3b:dd:47:e5:4f:b0:07:8d:8e:96:e0:16:
                    83:d2:f0:5d:83:9d:58:8c:7a:e4:c3:af:21:ef:c2:
                    c8:a5:1a:3b:3a:fa:27:dc:0e:1f:aa:a4:14:a9:f6:
                    9e:09:b0:3e:55:f1:e9:54:83:4c:4a:94:8d:a4:81:
                    2f:39:e7:e8:e5:44:d7:98:82:32:37:b5:df:d8:12:
                    bc:98:9c:62:e2:c0:84:1b:f3:cb:cb:d9:32:57:c0:
                    7d:4a:40:86:d5:dd:1e:7c:51:aa:29:f9:26:48:a0:
                    d1:81:42:ff:7e:08:bf:12:6d:9f:98:bd:7f:9d:1e:
                    e2:ff:26:40:2a:15:d1:b8:dd:c0:c0:1d:e4:7b:2f:
                    84:44:64:9f:e3:fe:8e:41:81:74:40:5f:09:e7:a3:
                    8f:08:35:c8:b6:65:ab:2f:fc:db:c9:5c:e7:e0:c5:
                    c4:32:bf:02:b4:ab:0f:b2:a7:85:36:4a:b1:87:92:
                    e3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E4:A2:0C:3F:A4:C0:D2:D9:AA:2C:FF:09:62:FD:F8:B5:F7:2C:06
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/fc9504b91912f55bec014e8ad0e472a4a9785f19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.178.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:4c:7b:fa:5c:1d:b5:cd:4c:aa:3c:e8:3d:ec:b5:bc:9d:38:
         d9:1e:76:be:94:f8:d6:1b:e2:72:48:c1:33:f9:b5:9a:77:79:
         3d:2b:6f:cc:ef:15:dc:5e:78:fa:dc:17:92:65:8b:d0:fa:d4:
         d6:c6:fb:b9:7f:1f:0a:b7:fa:59:5f:1b:4c:27:58:a5:c3:43:
         1c:5d:4f:fa:c2:30:ee:79:e8:0e:70:2a:4b:97:99:8b:4e:98:
         b7:df:de:c3:10:bf:87:5d:99:d5:27:21:35:c4:c5:6a:4f:45:
         2a:9b:2a:2f:3d:4b:86:4e:0f:32:3e:e9:98:45:c6:e5:11:a4:
         65:b7:32:27:f7:58:b3:5a:9c:53:58:5a:47:ea:13:d2:ff:af:
         46:c2:82:cd:10:98:f9:28:5f:86:7c:0e:f5:c2:8d:47:ad:82:
         40:01:a7:b8:bb:61:f8:c3:a9:0b:33:d1:5b:b5:03:21:c2:a1:
         a3:9b:9b:23:26:26:fa:0d:49:2f:c1:90:c7:a2:c5:7c:e5:01:
         5d:14:6f:9f:ac:d2:a9:08:81:93:7c:89:7a:d0:bf:53:ed:07:
         6e:78:3f:12:16:c7:5c:27:37:a3:ca:81:a0:8a:16:0a:aa:29:
         05:61:bc:da:7b:f5:38:98:f1:d2:ac:06:67:51:d2:2c:27:ec:
         92:71:fc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 11:05:16 2024 by rpki-client on console-ams.rpki-client.org