Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b369a1a6-ee02-401e-bff0-44bb84dd2083/7342756950c45e083898de6340e902247c8b7807.roa
File:                     7342756950c45e083898de6340e902247c8b7807.roa (raw, json)
Hash identifier:          Zp+5S8MQJBUs7EMhbhXjzLCVNVYzP1gW8nt6kePHnSU=
Subject key identifier:   4B:F1:31:8F:A9:82:5B:0A:73:30:5F:62:8B:1F:19:A5:BE:CA:D2:6D
Certificate issuer:       /CN=fab7451764b596de709b99eb3cf7e0bae002e6d0
Certificate serial:       02327E
Authority key identifier: 3C:EF:77:0F:35:28:E9:19:AD:7C:4F:59:AE:9A:F9:7A:BB:82:01:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fab7451764b596de709b99eb3cf7e0bae002e6d0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b369a1a6-ee02-401e-bff0-44bb84dd2083/7342756950c45e083898de6340e902247c8b7807.roa
Signing time:             Sat 04 Nov 2023 01:12:14 +0000
ROA not before:           Sat 04 Nov 2023 01:12:14 +0000
ROA not after:            Tue 04 Nov 2025 01:12:14 +0000
asID:                     265808
IP address blocks:        201.182.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/b369a1a6-ee02-401e-bff0-44bb84dd2083/fab7451764b596de709b99eb3cf7e0bae002e6d0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/b369a1a6-ee02-401e-bff0-44bb84dd2083/fab7451764b596de709b99eb3cf7e0bae002e6d0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fab7451764b596de709b99eb3cf7e0bae002e6d0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 01 Mar 2024 13:46:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143998 (0x2327e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab7451764b596de709b99eb3cf7e0bae002e6d0
        Validity
            Not Before: Nov  4 01:12:14 2023 GMT
            Not After : Nov  4 01:12:14 2025 GMT
        Subject: CN=7342756950c45e083898de6340e902247c8b7807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d8:d7:ec:d1:20:06:a8:57:23:8b:61:76:5b:
                    be:f5:a3:cb:9e:92:04:89:e7:fe:a1:7a:84:d3:10:
                    a3:16:2c:f7:4d:f0:08:97:51:d7:e1:f7:21:98:56:
                    1a:e6:ea:b4:52:cf:c6:39:08:03:56:1d:5a:62:38:
                    04:62:de:5b:13:95:e9:4e:22:0f:b6:d3:ca:9e:b7:
                    d8:fa:82:97:86:65:8e:61:19:98:9e:99:2b:e0:be:
                    79:00:95:aa:30:3f:c7:47:e3:50:02:0f:10:df:2b:
                    bf:c0:5a:2f:cb:92:0a:0f:29:9a:4a:17:b0:f3:85:
                    c8:d1:83:02:cd:a9:81:2a:60:ae:f9:32:84:2e:97:
                    b5:8d:6f:83:70:62:bc:68:a8:ae:70:5b:e7:45:33:
                    b3:69:34:f2:d9:33:c7:7c:0f:39:ee:06:8d:ee:d4:
                    5b:9f:99:b0:dc:2e:a2:a8:a9:5e:e3:6f:c1:f3:ac:
                    8a:b1:ed:cd:4b:1c:d9:63:23:40:7a:79:74:bb:5d:
                    1d:58:bd:28:8d:73:a7:0b:3e:e0:c3:0e:a5:70:bf:
                    8d:1b:41:3a:51:2e:02:2a:ca:b0:70:24:db:7f:23:
                    99:76:2c:98:77:4c:04:20:2b:d1:5f:06:ef:8d:a3:
                    c2:62:c4:6d:c9:1e:ef:7a:d9:dd:8b:0a:25:b9:73:
                    5a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F1:31:8F:A9:82:5B:0A:73:30:5F:62:8B:1F:19:A5:BE:CA:D2:6D
            X509v3 Authority Key Identifier:
                keyid:3C:EF:77:0F:35:28:E9:19:AD:7C:4F:59:AE:9A:F9:7A:BB:82:01:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fab7451764b596de709b99eb3cf7e0bae002e6d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b369a1a6-ee02-401e-bff0-44bb84dd2083/7342756950c45e083898de6340e902247c8b7807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b369a1a6-ee02-401e-bff0-44bb84dd2083/fab7451764b596de709b99eb3cf7e0bae002e6d0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:9c:df:b8:f6:76:36:5a:0e:6d:20:12:61:f8:8a:de:8e:2c:
         05:95:f7:68:4d:40:a0:05:1b:d3:76:c1:7a:a3:80:55:e5:c4:
         00:54:be:c9:53:3b:fd:ce:3b:a2:b3:e8:23:14:54:12:0e:e2:
         19:b1:c9:f5:69:33:92:30:bb:1f:ac:e7:d3:f1:0d:55:81:35:
         44:61:91:f5:40:01:76:a5:51:03:24:c8:3d:64:76:32:82:66:
         3d:b4:40:a7:75:09:42:d3:49:92:7e:b5:2f:f3:37:22:f2:7d:
         f1:c0:d3:79:57:41:4a:26:84:a0:f6:d5:20:6d:bb:a7:8d:ed:
         da:13:46:53:30:2f:bd:3a:f2:f5:3c:c1:6d:93:eb:bb:9b:ae:
         bc:a1:64:38:ae:92:60:c2:fc:cf:65:f9:73:6b:9b:b8:27:82:
         67:c5:b6:99:cd:13:53:03:0c:16:be:c9:ca:ce:c4:64:62:18:
         44:fc:fa:26:80:ea:fd:f0:56:97:09:5d:b6:dc:99:5e:c0:13:
         a7:f4:33:2e:b3:b1:08:a5:33:a7:29:f6:3c:fb:3a:41:7a:26:
         82:b2:01:3f:3b:01:85:84:4b:c7:be:59:d3:5c:8e:7e:f8:53:
         ba:3f:33:8d:ce:67:aa:9a:c3:80:ed:7e:df:63:6e:dc:e9:11:
         91:e5:d4:de
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAjJ+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZh
Yjc0NTE3NjRiNTk2ZGU3MDliOTllYjNjZjdlMGJhZTAwMmU2ZDAwHhcNMjMxMTA0
MDExMjE0WhcNMjUxMTA0MDExMjE0WjAzMTEwLwYDVQQDEyg3MzQyNzU2OTUwYzQ1
ZTA4Mzg5OGRlNjM0MGU5MDIyNDdjOGI3ODA3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiNjX7NEgBqhXI4thdlu+9aPLnpIEief+oXqE0xCjFiz3TfAI
l1HX4fchmFYa5uq0Us/GOQgDVh1aYjgEYt5bE5XpTiIPttPKnrfY+oKXhmWOYRmY
npkr4L55AJWqMD/HR+NQAg8Q3yu/wFovy5IKDymaShew84XI0YMCzamBKmCu+TKE
Lpe1jW+DcGK8aKiucFvnRTOzaTTy2TPHfA857gaN7tRbn5mw3C6iqKle42/B86yK
se3NSxzZYyNAenl0u10dWL0ojXOnCz7gww6lcL+NG0E6US4CKsqwcCTbfyOZdiyY
d0wEICvRXwbvjaPCYsRtyR7vetndiwoluXNa8QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEvxMY+pglsKczBfYosfGaW+ytJtMB8GA1UdIwQYMBaAFDzvdw81KOkZrXxP
Wa6a+Xq7ggHrMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmFiNzQ1
MTc2NGI1OTZkZTcwOWI5OWViM2NmN2UwYmFlMDAyZTZkMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjM2OWExYTYtZWUwMi00MDFlLWJmZjAtNDRiYjg0
ZGQyMDgzLzczNDI3NTY5NTBjNDVlMDgzODk4ZGU2MzQwZTkwMjI0N2M4Yjc4MDcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iMzY5YTFhNi1lZTAyLTQwMWUtYmZmMC00NGJi
ODRkZDIwODMvZmFiNzQ1MTc2NGI1OTZkZTcwOWI5OWViM2NmN2UwYmFlMDAyZTZk
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsm2cDANBgkqhkiG9w0BAQsFAAOCAQEALJzfuPZ2NloObSAS
YfiK3o4sBZX3aE1AoAUb03bBeqOAVeXEAFS+yVM7/c47orPoIxRUEg7iGbHJ9Wkz
kjC7H6zn0/ENVYE1RGGR9UABdqVRAyTIPWR2MoJmPbRAp3UJQtNJkn61L/M3IvJ9
8cDTeVdBSiaEoPbVIG27p43t2hNGUzAvvTry9TzBbZPru5uuvKFkOK6SYML8z2X5
c2ubuCeCZ8W2mc0TUwMMFr7Jys7EZGIYRPz6JoDq/fBWlwldttyZXsATp/QzLrOx
CKUzpyn2PPs6QXomgrIBPzsBhYRLx75Z01yOfvhTuj8zjc5nqprDgO1+32Nu3OkR
keXU3g==
-----END CERTIFICATE-----
Generated at Tue Feb 27 14:04:19 2024 by rpki-client on console-ams.rpki-client.org