Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/adab4f1b-8b6f-4d45-8f1d-9829cc9a16c9/7e8aec4cd1610e611ec8b4cee201fb922e65b669.roa
File:                     7e8aec4cd1610e611ec8b4cee201fb922e65b669.roa (raw, json)
Hash identifier:          qO8eHUei5mdg16iqk0OLGaWv48h2lOGNG3RHX7ypf6g=
Subject key identifier:   96:8C:16:16:A4:89:B8:1A:6B:DB:0B:24:2A:77:1E:F8:C4:36:90:A2
Certificate issuer:       /CN=c0d7f94bc9ee9469d5005478bbd95979d65c8543
Certificate serial:       0C32A1
Authority key identifier: DB:DB:F7:BF:49:A9:B9:DE:18:A4:81:59:AA:A2:3D:F4:AE:24:5B:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c0d7f94bc9ee9469d5005478bbd95979d65c8543.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/adab4f1b-8b6f-4d45-8f1d-9829cc9a16c9/7e8aec4cd1610e611ec8b4cee201fb922e65b669.roa
Signing time:             Tue 20 Sep 2022 00:26:16 +0000
ROA not before:           Tue 20 Sep 2022 00:26:08 +0000
ROA not after:            Fri 20 Sep 2024 00:26:08 +0000
asID:                     271873
IP address blocks:        179.63.148.0/22 maxlen: 22
                          2803:cc10::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/adab4f1b-8b6f-4d45-8f1d-9829cc9a16c9/c0d7f94bc9ee9469d5005478bbd95979d65c8543.crl
                          rsync://repository.lacnic.net/rpki/lacnic/adab4f1b-8b6f-4d45-8f1d-9829cc9a16c9/c0d7f94bc9ee9469d5005478bbd95979d65c8543.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c0d7f94bc9ee9469d5005478bbd95979d65c8543.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 799393 (0xc32a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d7f94bc9ee9469d5005478bbd95979d65c8543
        Validity
            Not Before: Sep 20 00:26:08 2022 GMT
            Not After : Sep 20 00:26:08 2024 GMT
        Subject: CN=7e8aec4cd1610e611ec8b4cee201fb922e65b669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b5:64:30:b3:1b:a0:c7:d7:f9:eb:b1:f2:5a:
                    4c:e3:ee:cb:26:68:b7:2e:3d:be:63:d2:13:2a:ac:
                    3e:33:fc:10:37:60:97:0c:3b:9b:6c:0b:f4:5e:d0:
                    03:91:c0:72:39:d3:a3:de:7d:8f:ef:da:6f:6e:55:
                    96:bb:fb:d7:cd:fd:20:67:ae:35:d0:c6:fa:c6:f4:
                    4c:68:58:0c:11:b9:ad:fd:d1:d9:01:e5:28:6d:5d:
                    9c:ee:e0:8c:03:a7:3b:da:53:c5:c4:b3:70:84:53:
                    90:09:cc:8d:ea:26:b0:3b:0f:ef:7e:70:b0:d6:4e:
                    f6:b4:a2:b2:2d:88:63:00:88:19:97:28:dd:25:ed:
                    74:45:29:3a:9a:19:13:be:80:9e:86:ce:f6:df:ff:
                    d0:f6:c8:86:26:3e:dc:48:86:4a:6a:40:89:18:ab:
                    8e:f6:b2:db:44:3f:2d:1e:78:00:de:0c:02:9f:84:
                    79:b6:89:1a:be:79:8c:ec:e3:a6:aa:39:04:82:b7:
                    1d:d4:87:ef:89:f8:96:4a:c8:72:bb:62:51:60:89:
                    e1:41:3f:42:47:38:ee:72:c6:f6:c0:df:79:0f:aa:
                    26:c7:2f:b9:56:73:f5:59:8d:f0:bc:64:35:20:1a:
                    0d:77:d0:7b:57:9d:4a:dd:ab:95:fc:a1:53:0b:a2:
                    7e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8C:16:16:A4:89:B8:1A:6B:DB:0B:24:2A:77:1E:F8:C4:36:90:A2
            X509v3 Authority Key Identifier:
                keyid:DB:DB:F7:BF:49:A9:B9:DE:18:A4:81:59:AA:A2:3D:F4:AE:24:5B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c0d7f94bc9ee9469d5005478bbd95979d65c8543.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/adab4f1b-8b6f-4d45-8f1d-9829cc9a16c9/7e8aec4cd1610e611ec8b4cee201fb922e65b669.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/adab4f1b-8b6f-4d45-8f1d-9829cc9a16c9/c0d7f94bc9ee9469d5005478bbd95979d65c8543.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.148.0/22
                IPv6:
                  2803:cc10::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:b6:b4:18:e7:56:cd:41:74:aa:ed:3a:e9:67:5d:17:2f:df:
         f3:52:0e:7f:f0:33:94:43:ee:ac:62:0d:a2:b8:41:60:2f:14:
         c2:20:5c:1c:f5:d8:16:35:7e:0b:16:8f:09:72:5f:3c:05:d2:
         ae:12:91:cd:4c:6e:fe:c7:62:a4:1d:49:9e:ff:8d:a6:40:cb:
         59:b8:4d:ac:c2:28:65:d1:1b:29:66:72:75:a2:ef:d6:d6:61:
         f7:f1:34:ac:74:ae:84:1c:3a:c0:d2:a7:6d:e1:09:c0:16:84:
         c1:39:5b:59:f8:fb:2e:67:59:8b:78:e4:5d:e4:6d:16:c2:cb:
         8a:92:5b:68:b9:f2:03:a6:68:ee:11:a2:ef:15:7c:66:76:43:
         cb:c1:f9:3a:19:be:28:1c:7d:02:06:ef:be:e9:e9:b5:ee:31:
         80:a5:fb:cc:1a:9d:8d:b5:83:83:1b:d4:40:16:42:08:f3:00:
         ad:f9:84:68:e1:e8:e5:02:f7:6b:f9:92:4e:fa:ea:a2:52:07:
         39:b1:e1:48:1e:2e:41:b6:1b:f6:7e:82:2f:a0:40:7e:fc:12:
         05:80:f2:aa:87:84:dc:71:6e:ed:23:ba:f7:1a:d6:24:ce:96:
         05:f0:61:4b:40:67:df:73:b7:ac:2f:7d:94:19:2f:71:8e:28:
         78:49:0b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 08:39:23 2024 by rpki-client on console-ams.rpki-client.org