Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/adc3609e-0ac8-4ee9-bada-988c51980d21/9780c1153d6c60b1232ea62c8419550e8b1ce099.roa
File:                     9780c1153d6c60b1232ea62c8419550e8b1ce099.roa (raw, json)
Hash identifier:          aMxFsIxp7jwXSVSyr/cPFAjErMu8IkcIRiuFNpgOEXg=
Subject key identifier:   3B:96:AA:D0:0D:E3:31:11:3D:C5:99:ED:97:3A:64:8D:6D:75:1A:D6
Certificate issuer:       /CN=35a6432df2042587eb3174fcd6bc3a37171044f7
Certificate serial:       0B8FDA
Authority key identifier: EC:12:93:BE:21:C9:50:A9:29:C4:D0:33:E2:A8:AA:2A:3B:7E:C4:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/35a6432df2042587eb3174fcd6bc3a37171044f7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/adc3609e-0ac8-4ee9-bada-988c51980d21/9780c1153d6c60b1232ea62c8419550e8b1ce099.roa
Signing time:             Wed 24 Mar 2021 14:29:07 +0000
ROA not before:           Wed 24 Mar 2021 14:29:07 +0000
ROA not after:            Tue 24 Mar 2026 14:29:07 +0000
asID:                     266775
IP address blocks:        45.235.96.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/adc3609e-0ac8-4ee9-bada-988c51980d21/35a6432df2042587eb3174fcd6bc3a37171044f7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/adc3609e-0ac8-4ee9-bada-988c51980d21/35a6432df2042587eb3174fcd6bc3a37171044f7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/35a6432df2042587eb3174fcd6bc3a37171044f7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 757722 (0xb8fda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35a6432df2042587eb3174fcd6bc3a37171044f7
        Validity
            Not Before: Mar 24 14:29:07 2021 GMT
            Not After : Mar 24 14:29:07 2026 GMT
        Subject: CN=9780c1153d6c60b1232ea62c8419550e8b1ce099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:50:41:39:cf:71:83:47:4e:00:f7:54:bd:a4:
                    87:75:d6:92:e1:52:e6:74:07:6e:08:ef:11:b8:72:
                    04:91:ab:9c:3c:71:ab:69:bb:60:eb:97:3b:9e:6a:
                    28:10:a0:a4:87:11:a1:dc:44:b8:30:9c:ca:38:61:
                    c0:50:17:7e:19:72:90:f8:24:ce:9b:82:7c:4b:24:
                    97:00:cb:68:e5:eb:30:8e:d5:26:8e:5e:00:34:1b:
                    eb:7a:96:fb:c5:ea:2b:ab:ef:c8:94:3b:fe:f7:e3:
                    1e:00:3b:09:d5:30:52:28:ad:db:48:eb:46:7f:cf:
                    40:22:cf:36:17:7e:de:2b:a4:05:0e:d8:7e:f1:33:
                    2f:3c:be:81:13:bf:39:ed:7f:85:76:be:43:77:5f:
                    4a:50:83:cc:b6:d9:f2:f5:f2:66:3e:5a:25:85:76:
                    40:74:c1:37:fa:13:c5:5d:11:e5:21:3a:0e:e4:02:
                    fd:f4:f3:f9:09:4c:44:c1:76:15:79:04:9c:52:fd:
                    ea:5b:0a:74:a1:91:41:bb:df:b9:05:86:b0:52:e3:
                    89:03:47:81:d2:9d:2c:a2:aa:78:c5:9d:5a:7c:3f:
                    5a:3c:0c:21:a2:d9:cc:d4:72:05:ef:12:ae:d9:cf:
                    81:b5:64:1b:5b:58:00:0b:e9:33:81:a1:64:fb:41:
                    fd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:96:AA:D0:0D:E3:31:11:3D:C5:99:ED:97:3A:64:8D:6D:75:1A:D6
            X509v3 Authority Key Identifier:
                keyid:EC:12:93:BE:21:C9:50:A9:29:C4:D0:33:E2:A8:AA:2A:3B:7E:C4:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/35a6432df2042587eb3174fcd6bc3a37171044f7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/adc3609e-0ac8-4ee9-bada-988c51980d21/9780c1153d6c60b1232ea62c8419550e8b1ce099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/adc3609e-0ac8-4ee9-bada-988c51980d21/35a6432df2042587eb3174fcd6bc3a37171044f7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:22:6c:dd:c2:d4:aa:3b:e0:3c:4d:af:c1:3d:19:a7:94:ff:
         76:f5:0d:fd:b4:0f:15:62:57:c6:2b:af:3f:03:8c:d0:49:9e:
         e3:30:08:f6:5b:87:4c:55:90:3d:44:bc:c9:9a:91:7b:2b:44:
         1a:57:e9:c6:f7:be:d7:70:c1:9f:64:2b:41:3e:89:99:03:13:
         44:8c:52:8d:2c:18:af:23:e7:08:f6:2f:0b:5d:d4:a7:f5:82:
         48:e9:12:1d:01:e7:74:88:27:dd:c3:73:80:9e:89:d4:5f:d4:
         3e:2f:3b:dc:0a:41:77:58:9a:d3:b2:22:39:52:e8:ed:9f:d2:
         e4:f7:a1:26:c4:a4:83:d2:f0:5b:76:ce:f5:15:11:03:56:4c:
         ee:f6:45:af:5e:0d:44:e3:fc:40:e7:48:2a:97:45:6e:6e:d2:
         3d:dc:50:b6:ae:3e:b5:19:27:b9:89:ef:e1:df:b0:0f:81:e8:
         3f:bf:c0:bc:8c:5b:22:53:37:28:c6:75:cc:88:ec:44:e6:46:
         c4:5e:96:ce:8f:c9:5d:72:e3:c4:8b:02:34:10:0c:de:6e:40:
         15:90:61:6e:e7:3b:fa:7a:02:eb:4a:8d:c2:0a:2a:55:b1:71:
         7d:e6:59:c6:e2:6a:af:cb:f0:78:ee:92:b9:dd:33:75:32:61:
         20:b6:27:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 04:03:30 2024 by rpki-client on console-ams.rpki-client.org