Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/15fe31c30aacb9af3f723351987d5ecf02691c63.roa
File:                     15fe31c30aacb9af3f723351987d5ecf02691c63.roa (raw, json)
Hash identifier:          igsRwaQaJRkBV1EdkfhS4gzchzlondJvNcbC6ib+tj0=
Subject key identifier:   87:28:F0:A4:4E:BA:01:C9:D1:ED:1A:6A:DF:A0:CA:40:30:B0:54:45
Certificate issuer:       /CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
Certificate serial:       1C50DB
Authority key identifier: 61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/15fe31c30aacb9af3f723351987d5ecf02691c63.roa
Signing time:             Thu 22 Sep 2022 21:06:01 +0000
ROA not before:           Thu 22 Sep 2022 21:03:00 +0000
ROA not after:            Sun 22 Sep 2024 21:03:00 +0000
asID:                     22368
IP address blocks:        190.184.128.0/18 maxlen: 18
                          190.184.128.0/23 maxlen: 23
                          190.184.130.0/23 maxlen: 23
                          190.184.132.0/23 maxlen: 23
                          190.184.134.0/23 maxlen: 23
                          190.184.136.0/24 maxlen: 24
                          190.184.137.0/24 maxlen: 24
                          190.184.138.0/24 maxlen: 24
                          190.184.139.0/24 maxlen: 24
                          190.184.140.0/23 maxlen: 23
                          190.184.142.0/23 maxlen: 23
                          190.184.144.0/24 maxlen: 24
                          190.184.145.0/24 maxlen: 24
                          190.184.146.0/24 maxlen: 24
                          190.184.147.0/24 maxlen: 24
                          190.184.148.0/23 maxlen: 23
                          190.184.150.0/23 maxlen: 23
                          190.184.152.0/23 maxlen: 23
                          190.184.154.0/23 maxlen: 23
                          190.184.156.0/23 maxlen: 23
                          190.184.158.0/23 maxlen: 23
                          190.184.160.0/23 maxlen: 23
                          190.184.162.0/23 maxlen: 23
                          190.184.164.0/23 maxlen: 23
                          190.184.166.0/23 maxlen: 23
                          190.184.168.0/24 maxlen: 24
                          190.184.169.0/24 maxlen: 24
                          190.184.170.0/24 maxlen: 24
                          190.184.171.0/24 maxlen: 24
                          190.184.172.0/24 maxlen: 24
                          190.184.173.0/24 maxlen: 24
                          190.184.174.0/24 maxlen: 24
                          190.184.175.0/24 maxlen: 24
                          190.184.176.0/23 maxlen: 23
                          190.184.178.0/23 maxlen: 23
                          190.184.180.0/23 maxlen: 23
                          190.184.182.0/23 maxlen: 23
                          190.184.184.0/24 maxlen: 24
                          190.184.185.0/24 maxlen: 24
                          190.184.186.0/23 maxlen: 23
                          190.184.188.0/23 maxlen: 23
                          190.184.190.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Mar 2023 02:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1855707 (0x1c50db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
        Validity
            Not Before: Sep 22 21:03:00 2022 GMT
            Not After : Sep 22 21:03:00 2024 GMT
        Subject: CN=15fe31c30aacb9af3f723351987d5ecf02691c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ad:ef:3a:66:a8:38:01:1d:64:f7:c2:bc:cd:
                    7a:25:67:17:65:ba:e1:c7:80:0a:f3:45:53:26:2c:
                    b7:5b:f0:56:4f:7b:b0:d1:41:8e:6c:f8:c3:31:d4:
                    6a:97:1f:91:46:43:4b:c3:ad:b5:5f:88:6b:e3:55:
                    f3:06:83:ab:b9:62:f1:fb:a7:61:6d:54:23:21:e3:
                    74:6a:df:97:db:a9:8f:ea:99:7f:7c:ca:74:02:4b:
                    35:79:9c:4d:bd:91:f8:ed:32:4d:8e:e0:ab:99:6e:
                    ad:2e:95:5b:41:91:88:bd:35:ed:7e:50:74:b8:45:
                    f7:76:11:df:78:54:00:ea:d3:f3:d6:1f:0c:cb:50:
                    56:9b:ab:1a:f7:23:be:b0:1b:02:6f:45:1e:49:32:
                    7e:45:0d:28:ad:d9:86:54:4d:8e:3f:5a:02:89:82:
                    11:99:1a:4a:c4:c4:1b:9d:92:52:25:bf:3b:0b:6c:
                    cb:d5:54:8e:83:93:f5:97:65:b7:49:cd:6e:0b:4b:
                    bf:04:b5:91:03:66:f4:a7:d9:04:13:88:a8:a2:23:
                    f8:3e:85:fc:80:db:26:a6:80:b8:80:97:83:f1:21:
                    39:b6:2d:b6:bf:db:b1:dc:c9:4a:fe:9a:39:76:37:
                    42:36:48:58:71:21:22:a4:dc:e6:03:8b:e8:38:b7:
                    54:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                87:28:F0:A4:4E:BA:01:C9:D1:ED:1A:6A:DF:A0:CA:40:30:B0:54:45
            X509v3 Authority Key Identifier: 
                keyid:61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer

            Subject Information Access: 
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/15fe31c30aacb9af3f723351987d5ecf02691c63.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         21:88:68:97:10:c0:c5:b4:82:cd:c4:31:89:9b:9a:dc:e3:20:
         ca:e5:74:78:89:39:e0:36:61:6f:9a:ca:85:30:7a:f3:48:fa:
         8b:62:9a:e1:f0:36:e7:07:c0:63:c5:f1:40:62:fd:38:94:a4:
         b9:47:7e:9e:60:d6:65:41:22:92:c8:cb:b0:93:8f:94:da:58:
         4b:b7:24:36:5c:49:a2:c6:1d:9b:d1:b3:04:44:8f:67:3e:82:
         e3:c8:db:6b:d7:c2:62:7f:26:35:6e:39:72:fb:b2:af:39:81:
         37:eb:09:c4:c9:f7:46:71:26:c7:92:3f:61:02:3b:d9:a1:ef:
         ce:4f:60:10:4a:7d:3f:57:ca:7d:95:ce:93:38:f4:c8:75:75:
         9b:1b:17:76:2d:bb:ec:8e:15:74:25:2b:a9:0f:98:06:e8:15:
         7b:8d:91:bb:a0:3f:99:6c:84:b9:a2:e8:04:0b:7b:50:3f:50:
         88:43:ba:62:9c:10:06:8a:9c:56:99:77:f3:a5:1c:57:2a:30:
         7d:51:e7:5c:34:a7:f9:62:da:11:83:e1:33:9a:44:44:c1:b1:
         a0:b1:62:f1:31:90:2d:1d:f6:88:8c:db:a9:4b:be:e5:24:93:
         b3:df:f6:32:13:32:d8:2d:72:14:e3:ee:2e:41:b6:5f:d9:81:
         a1:7d:2b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 15 11:35:06 2023 by rpki-client on console-ams.rpki-client.org