Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ad334f87-413e-4aef-a852-24bde5146872/deca8df5df7b2369b24915fef19b3e35755a18f9.roa
File:                     deca8df5df7b2369b24915fef19b3e35755a18f9.roa (raw, json)
Hash identifier:          Otu+PuC3HFoxQey/TXGvUdMW+7KuMcH41yLsiKwl6AA=
Subject key identifier:   6F:BA:9E:9C:8C:D3:32:DE:C5:AC:E5:BC:E3:A8:16:9C:F8:51:52:24
Certificate issuer:       /CN=10a3a8baa2e094658cc0ff4a8ef7ec5de920490f
Certificate serial:       0F580F
Authority key identifier: BC:91:F9:11:47:A5:40:CF:90:F2:57:82:4E:3F:7B:83:7E:DB:18:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10a3a8baa2e094658cc0ff4a8ef7ec5de920490f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ad334f87-413e-4aef-a852-24bde5146872/deca8df5df7b2369b24915fef19b3e35755a18f9.roa
Signing time:             Mon 08 Aug 2022 22:21:30 +0000
ROA not before:           Mon 08 Aug 2022 22:20:40 +0000
ROA not after:            Thu 08 Aug 2024 22:20:40 +0000
asID:                     270061
IP address blocks:        177.87.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ad334f87-413e-4aef-a852-24bde5146872/10a3a8baa2e094658cc0ff4a8ef7ec5de920490f.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ad334f87-413e-4aef-a852-24bde5146872/10a3a8baa2e094658cc0ff4a8ef7ec5de920490f.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10a3a8baa2e094658cc0ff4a8ef7ec5de920490f.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1005583 (0xf580f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10a3a8baa2e094658cc0ff4a8ef7ec5de920490f
        Validity
            Not Before: Aug  8 22:20:40 2022 GMT
            Not After : Aug  8 22:20:40 2024 GMT
        Subject: CN=deca8df5df7b2369b24915fef19b3e35755a18f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7f:4b:6c:f7:d2:de:97:77:76:45:76:78:cc:
                    0a:2a:1c:47:6b:28:ae:78:f2:43:ae:79:8d:c9:03:
                    ac:3f:c3:7d:94:93:7e:dd:c3:48:60:28:02:16:f9:
                    54:03:60:3c:aa:85:78:c1:34:d0:aa:29:26:cf:b4:
                    8a:a8:69:39:7f:29:72:c6:df:9b:b3:f7:25:1e:2f:
                    98:f7:23:0a:7d:e6:c0:8a:96:27:19:4b:2f:63:cf:
                    61:2c:83:74:05:0d:ac:44:f1:a8:9e:37:94:a0:65:
                    35:59:bf:8b:1f:42:ed:75:22:49:d3:28:22:5e:25:
                    0d:b4:b9:54:88:10:85:e0:21:b6:51:7e:55:3c:79:
                    ac:28:a9:1d:32:e9:69:79:75:f4:6f:fd:d3:fb:1d:
                    2e:81:72:32:27:3e:2b:48:f7:31:44:04:b9:bc:f2:
                    24:04:ea:29:d5:05:14:d8:1a:95:c8:61:5f:e5:6d:
                    d9:cf:00:50:52:a7:ec:d4:e4:1b:60:76:1f:d8:69:
                    bf:6b:6e:83:72:c6:44:8e:9e:33:9e:88:2b:a1:29:
                    c0:1f:b0:d0:c6:bd:fd:36:82:2e:ba:8c:5a:35:c2:
                    e0:cb:48:a1:7a:1f:65:1b:42:e9:db:2e:d3:7b:49:
                    f8:51:85:18:69:c2:08:a4:bc:6e:b9:5c:84:a5:50:
                    33:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BA:9E:9C:8C:D3:32:DE:C5:AC:E5:BC:E3:A8:16:9C:F8:51:52:24
            X509v3 Authority Key Identifier:
                keyid:BC:91:F9:11:47:A5:40:CF:90:F2:57:82:4E:3F:7B:83:7E:DB:18:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10a3a8baa2e094658cc0ff4a8ef7ec5de920490f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ad334f87-413e-4aef-a852-24bde5146872/deca8df5df7b2369b24915fef19b3e35755a18f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ad334f87-413e-4aef-a852-24bde5146872/10a3a8baa2e094658cc0ff4a8ef7ec5de920490f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:76:77:b7:6b:00:ab:16:d6:18:0c:67:bb:88:2a:78:f5:50:
         68:4f:b3:89:56:17:de:59:64:bb:73:89:45:4a:cf:8c:34:92:
         c5:9c:25:16:72:dc:c7:f5:5f:47:e7:5b:ae:21:aa:f9:f5:0d:
         9e:8f:27:54:99:a3:d4:ff:83:5f:5e:59:ff:ad:5a:f9:88:b1:
         9d:f9:63:ca:28:d4:dc:a6:be:c2:12:95:fd:2a:b8:4d:56:cf:
         8e:77:a8:63:60:e4:16:d0:55:e7:66:0b:2a:ec:ca:5c:e8:fd:
         b5:4c:5e:b3:81:d5:c9:2d:6c:39:60:9a:05:0c:35:d9:ef:b7:
         3e:a8:9d:59:f9:7b:d5:dc:28:a1:bd:25:a2:7c:da:3e:81:a5:
         b0:b7:a7:c0:13:22:ab:0a:8d:63:b1:b0:c3:37:17:f6:b0:02:
         6b:5f:bc:86:1d:17:bf:55:d1:e2:53:84:7f:55:74:8f:7c:7f:
         d0:9b:0d:f9:e3:fa:6b:a6:32:63:8f:f4:23:ad:f9:57:e4:6c:
         04:65:70:3c:42:d7:7a:8e:60:80:3a:19:18:86:cf:54:1d:e5:
         ae:7e:b6:9f:fc:39:98:dd:09:99:8f:d7:8b:17:40:a9:b6:fc:
         45:18:56:5a:d8:26:c0:20:9b:b3:28:d2:f4:9c:dc:53:dc:23:
         8e:0a:54:6c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDD1gPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEw
YTNhOGJhYTJlMDk0NjU4Y2MwZmY0YThlZjdlYzVkZTkyMDQ5MGYwHhcNMjIwODA4
MjIyMDQwWhcNMjQwODA4MjIyMDQwWjAzMTEwLwYDVQQDEyhkZWNhOGRmNWRmN2Iy
MzY5YjI0OTE1ZmVmMTliM2UzNTc1NWExOGY5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAon9LbPfS3pd3dkV2eMwKKhxHayiuePJDrnmNyQOsP8N9lJN+
3cNIYCgCFvlUA2A8qoV4wTTQqikmz7SKqGk5fylyxt+bs/clHi+Y9yMKfebAipYn
GUsvY89hLIN0BQ2sRPGonjeUoGU1Wb+LH0LtdSJJ0ygiXiUNtLlUiBCF4CG2UX5V
PHmsKKkdMulpeXX0b/3T+x0ugXIyJz4rSPcxRAS5vPIkBOop1QUU2BqVyGFf5W3Z
zwBQUqfs1OQbYHYf2Gm/a26DcsZEjp4znogroSnAH7DQxr39NoIuuoxaNcLgy0ih
eh9lG0Lp2y7Te0n4UYUYacIIpLxuuVyEpVAzRwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFG+6npyM0zLexazlvOOoFpz4UVIkMB8GA1UdIwQYMBaAFLyR+RFHpUDPkPJX
gk4/e4N+2xjzMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTBhM2E4
YmFhMmUwOTQ2NThjYzBmZjRhOGVmN2VjNWRlOTIwNDkwZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWQzMzRmODctNDEzZS00YWVmLWE4NTItMjRiZGU1
MTQ2ODcyL2RlY2E4ZGY1ZGY3YjIzNjliMjQ5MTVmZWYxOWIzZTM1NzU1YTE4Zjku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hZDMzNGY4Ny00MTNlLTRhZWYtYTg1Mi0yNGJk
ZTUxNDY4NzIvMTBhM2E4YmFhMmUwOTQ2NThjYzBmZjRhOGVmN2VjNWRlOTIwNDkw
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALFX+jANBgkqhkiG9w0BAQsFAAOCAQEAeHZ3t2sAqxbWGAxn
u4gqePVQaE+ziVYX3llku3OJRUrPjDSSxZwlFnLcx/VfR+dbriGq+fUNno8nVJmj
1P+DX15Z/61a+YixnfljyijU3Ka+whKV/Sq4TVbPjneoY2DkFtBV52YLKuzKXOj9
tUxes4HVyS1sOWCaBQw12e+3PqidWfl71dwoob0lonzaPoGlsLenwBMiqwqNY7Gw
wzcX9rACa1+8hh0Xv1XR4lOEf1V0j3x/0JsN+eP6a6YyY4/0I635V+RsBGVwPELX
eo5ggDoZGIbPVB3lrn62n/w5mN0JmY/XixdAqbb8RRhWWtgmwCCbsyjS9JzcU9wj
jgpUbA==
-----END CERTIFICATE-----
Generated at Thu Mar 28 22:20:24 2024 by rpki-client on console-fra.rpki-client.org