Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b15ccc0f-e6e7-4ddb-8974-13c2fae405ea/0fc17e98a5cecb261ff85649db50be2207c53ae8.roa
File:                     0fc17e98a5cecb261ff85649db50be2207c53ae8.roa (raw, json)
Hash identifier:          aWcDTeuEiUmka5MIZw+WvclW+bbITR5ohAdj4x2Nkyw=
Subject key identifier:   DA:B5:C0:59:76:F3:58:FE:C9:47:1E:F0:CD:C7:0F:1A:29:41:F5:35
Certificate issuer:       /CN=f996736b1fa10fc86d7dcd8f0972181fe443fb10
Certificate serial:       0D7D9A
Authority key identifier: 75:57:10:2A:06:F8:53:89:F2:A4:FB:49:FB:0D:BB:55:9D:77:29:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f996736b1fa10fc86d7dcd8f0972181fe443fb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b15ccc0f-e6e7-4ddb-8974-13c2fae405ea/0fc17e98a5cecb261ff85649db50be2207c53ae8.roa
Signing time:             Wed 24 Mar 2021 14:40:19 +0000
ROA not before:           Wed 24 Mar 2021 14:40:19 +0000
ROA not after:            Tue 24 Mar 2026 14:40:19 +0000
asID:                     264668
IP address blocks:        45.224.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/b15ccc0f-e6e7-4ddb-8974-13c2fae405ea/f996736b1fa10fc86d7dcd8f0972181fe443fb10.crl
                          rsync://repository.lacnic.net/rpki/lacnic/b15ccc0f-e6e7-4ddb-8974-13c2fae405ea/f996736b1fa10fc86d7dcd8f0972181fe443fb10.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f996736b1fa10fc86d7dcd8f0972181fe443fb10.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 884122 (0xd7d9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f996736b1fa10fc86d7dcd8f0972181fe443fb10
        Validity
            Not Before: Mar 24 14:40:19 2021 GMT
            Not After : Mar 24 14:40:19 2026 GMT
        Subject: CN=0fc17e98a5cecb261ff85649db50be2207c53ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ab:51:07:98:ac:6a:1f:01:ea:bc:e7:c5:99:
                    19:87:c5:5e:7d:e2:11:76:a9:6d:41:48:94:8c:d9:
                    a4:9a:98:63:b7:a2:84:31:2d:84:6b:f1:3d:0e:0c:
                    ca:19:5b:f9:fe:9e:03:1e:4b:8a:f7:b7:2e:43:c2:
                    74:1a:64:9e:e3:93:e3:c1:15:7c:63:a7:3a:63:d5:
                    f4:ca:83:b2:bc:2a:09:b5:24:88:cd:70:41:33:f1:
                    d3:30:5b:2b:19:a8:12:9c:0c:0e:ed:eb:b6:bd:14:
                    db:96:d5:5f:fd:05:69:e9:de:eb:17:df:9b:76:2e:
                    23:2d:99:1e:c2:66:8d:d2:e2:28:19:a6:2e:3c:e0:
                    f7:cd:4b:a2:aa:40:7d:47:d2:c3:c3:50:3d:cf:79:
                    74:02:49:9f:58:8b:85:ca:f7:1c:c8:84:5d:60:bf:
                    84:3d:23:21:f5:7f:81:79:d8:2e:ec:15:3d:ed:c0:
                    4e:35:93:05:26:8b:07:57:a6:08:3a:90:dd:10:e0:
                    d8:0c:5f:65:9d:62:9f:fe:8f:84:b8:2a:64:1c:bf:
                    3a:f3:9f:fb:3b:ce:2e:7c:16:de:54:ad:14:97:ec:
                    d3:8a:45:dd:22:74:9b:f8:fc:28:fa:04:55:9e:52:
                    3e:5d:ad:e2:4e:38:d2:c1:0f:13:da:bc:ee:b8:18:
                    54:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B5:C0:59:76:F3:58:FE:C9:47:1E:F0:CD:C7:0F:1A:29:41:F5:35
            X509v3 Authority Key Identifier:
                keyid:75:57:10:2A:06:F8:53:89:F2:A4:FB:49:FB:0D:BB:55:9D:77:29:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f996736b1fa10fc86d7dcd8f0972181fe443fb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b15ccc0f-e6e7-4ddb-8974-13c2fae405ea/0fc17e98a5cecb261ff85649db50be2207c53ae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b15ccc0f-e6e7-4ddb-8974-13c2fae405ea/f996736b1fa10fc86d7dcd8f0972181fe443fb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:e3:55:e0:1e:e8:f7:5e:0e:c5:b0:c0:dd:fb:64:7a:b5:ef:
         7a:ec:4d:49:b8:17:6d:af:29:0f:b1:dd:ec:62:70:d6:ce:96:
         84:6a:2c:03:e7:34:7c:97:cc:e1:ab:18:66:f0:78:22:b5:00:
         cc:4e:48:9f:46:77:b4:0e:ba:9f:66:67:5e:5f:60:cd:bb:41:
         9b:25:71:2f:22:ee:98:2d:7d:8e:e5:11:41:4b:04:d5:bb:f9:
         a6:58:c2:8f:90:18:1c:e9:b5:73:28:4b:1b:16:14:98:e7:80:
         e9:6c:84:0c:91:c0:b4:cf:2d:7c:b2:d7:18:6c:14:21:3e:51:
         1b:f4:bf:3b:93:38:4e:e5:f1:a4:7f:30:c9:22:b5:6a:0f:89:
         9d:75:5e:bf:1b:94:05:48:0e:da:38:2f:08:6d:c6:d7:2d:64:
         c7:2a:72:c1:2d:76:45:99:45:2c:b2:ed:4f:a9:6f:25:54:c8:
         54:21:26:53:90:d0:c6:2f:02:92:da:20:05:3e:0c:45:37:f0:
         1e:07:8d:62:32:09:86:bf:41:10:2d:eb:ff:b4:66:ae:89:39:
         95:74:5c:59:77:ad:dc:e1:7a:a6:aa:3b:4a:02:29:0d:78:f5:
         01:28:3f:31:17:12:2b:b7:1e:cf:b9:47:b9:1c:39:77:bb:fd:
         a6:e6:43:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:36:04 2024 by rpki-client on console-fra.rpki-client.org