Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b4237b89-f403-4fd5-81da-10f21f8985a8/6c6c17e1cbba4fdbb373cba7810dc5c587ffdfbb.roa
File:                     6c6c17e1cbba4fdbb373cba7810dc5c587ffdfbb.roa (raw, json)
Hash identifier:          PxC7B80g5LbFt+0dmrg/VPAoZ4iGNeff8eHu927y7Nw=
Subject key identifier:   BE:0E:7A:15:6B:8F:E9:94:9C:C7:99:A6:88:49:60:AF:BB:9A:66:7C
Certificate issuer:       /CN=50f2e353c2a1af3e7924280fa2d8603c1b56e309
Certificate serial:       01A125
Authority key identifier: EF:42:53:48:AE:B0:A1:9C:3C:58:57:E7:9F:89:B4:9C:0F:9A:40:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50f2e353c2a1af3e7924280fa2d8603c1b56e309.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b4237b89-f403-4fd5-81da-10f21f8985a8/6c6c17e1cbba4fdbb373cba7810dc5c587ffdfbb.roa
Signing time:             Tue 19 Jul 2022 21:42:06 +0000
ROA not before:           Sat 04 Jun 2022 03:00:00 +0000
ROA not after:            Tue 04 Jun 2024 03:00:00 +0000
asID:                     271848
IP address blocks:        177.22.254.0/23 maxlen: 24
                          187.49.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/b4237b89-f403-4fd5-81da-10f21f8985a8/50f2e353c2a1af3e7924280fa2d8603c1b56e309.crl
                          rsync://repository.lacnic.net/rpki/lacnic/b4237b89-f403-4fd5-81da-10f21f8985a8/50f2e353c2a1af3e7924280fa2d8603c1b56e309.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50f2e353c2a1af3e7924280fa2d8603c1b56e309.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Feb 2024 15:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106789 (0x1a125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f2e353c2a1af3e7924280fa2d8603c1b56e309
        Validity
            Not Before: Jun  4 03:00:00 2022 GMT
            Not After : Jun  4 03:00:00 2024 GMT
        Subject: CN=6c6c17e1cbba4fdbb373cba7810dc5c587ffdfbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3d:c1:65:2d:29:25:6a:0a:94:22:6c:f8:bf:
                    96:cb:eb:57:17:ad:ba:25:6b:93:25:a6:e0:27:b1:
                    98:af:48:a3:21:1f:e3:f8:d2:a2:78:a2:d7:6a:ac:
                    7b:00:dc:25:6c:5e:7e:c6:bf:11:3c:f3:69:16:f6:
                    63:2e:fd:c7:d2:6b:7c:83:8b:81:62:5b:3c:6e:75:
                    09:7b:23:20:0e:31:61:71:a8:f9:e2:da:8a:f4:c4:
                    e9:74:6f:5c:05:a8:e7:14:75:ea:98:48:5d:27:c8:
                    43:0a:da:03:3a:c5:f3:2d:ca:a1:18:c1:36:dd:7e:
                    ae:98:1d:43:7c:2d:50:5c:64:37:89:b7:d2:06:69:
                    52:0d:bf:0f:e0:36:14:0d:72:9b:23:ba:53:da:15:
                    b8:6c:ec:51:6b:cd:fa:86:65:fb:9a:fe:fa:0f:1d:
                    3f:c4:f1:38:e1:f3:e1:a6:23:ca:36:5f:cc:b2:bc:
                    02:55:24:57:6e:c3:d0:ad:c9:5c:86:64:7f:80:50:
                    9c:f1:1a:69:e7:2b:56:98:3d:8b:8c:e2:e1:4f:e1:
                    9a:e0:17:5e:97:56:84:3a:3d:d7:20:0b:eb:33:07:
                    b3:0c:f1:78:cd:52:e2:39:96:8c:48:7e:db:bb:e1:
                    01:10:31:c7:92:ef:00:37:e8:11:f4:e6:ab:b5:00:
                    ed:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0E:7A:15:6B:8F:E9:94:9C:C7:99:A6:88:49:60:AF:BB:9A:66:7C
            X509v3 Authority Key Identifier:
                keyid:EF:42:53:48:AE:B0:A1:9C:3C:58:57:E7:9F:89:B4:9C:0F:9A:40:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50f2e353c2a1af3e7924280fa2d8603c1b56e309.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b4237b89-f403-4fd5-81da-10f21f8985a8/6c6c17e1cbba4fdbb373cba7810dc5c587ffdfbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b4237b89-f403-4fd5-81da-10f21f8985a8/50f2e353c2a1af3e7924280fa2d8603c1b56e309.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.254.0/23
                  187.49.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:ab:6e:34:48:ce:ec:ee:f8:be:f7:56:29:14:25:38:f6:d1:
         ba:47:07:b1:16:31:9b:2f:64:60:aa:0c:bc:58:13:66:00:b1:
         09:8e:15:d1:5c:b3:5b:57:bf:9f:e8:de:4d:0e:09:f9:ed:34:
         19:63:8d:82:5d:3d:54:c6:17:c5:8c:24:e9:4d:cf:4d:9c:79:
         f5:a2:0e:8d:1a:2f:c6:e5:c0:ac:fb:3e:0f:35:d1:74:c8:6e:
         22:cc:82:41:c5:62:d6:ac:b3:b5:b2:30:b0:04:53:37:53:a9:
         45:a4:b2:6c:9f:e5:92:ae:19:c0:e6:bc:e4:0b:17:55:10:e2:
         dc:82:28:82:3a:23:ac:24:db:55:c5:31:7a:8d:c0:e6:8e:bd:
         c7:c7:78:3c:16:82:12:66:d4:32:cf:9e:97:f6:9d:6b:1e:f9:
         55:04:62:20:3b:ae:b8:2a:32:7e:ee:6d:e0:14:7a:48:6a:7c:
         fb:d0:e5:2e:76:54:9a:e4:27:a1:0f:81:81:a2:26:b1:c2:5b:
         d5:e2:8f:77:03:4b:d7:5c:59:a7:03:eb:26:ef:58:82:2d:20:
         28:c8:f4:69:11:b6:6c:47:2a:2e:4a:c0:73:05:75:4b:24:59:
         04:1f:d8:32:d3:ce:0c:21:5c:e7:62:30:90:22:ac:d5:f5:d2:
         93:1d:d0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 17:09:04 2024 by rpki-client on console-ams.rpki-client.org