Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/e4ccfbda4394c706a08e2bce01ae63d92d4e4f3b.roa
File:                     e4ccfbda4394c706a08e2bce01ae63d92d4e4f3b.roa (raw, json)
Hash identifier:          HPKpYx9tII6sE67TD8Y5YgK9tarnXqodpptyGd588CI=
Subject key identifier:   12:BC:E5:51:BA:D1:87:47:68:87:1D:89:93:05:2A:B7:A5:BA:F4:E1
Certificate issuer:       /CN=74ceb21261d995f6744c5614710320d1ad4b79f6
Certificate serial:       10D7DE
Authority key identifier: FA:E5:7E:91:CE:52:47:08:AB:10:B2:16:82:17:A8:91:B8:38:C0:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74ceb21261d995f6744c5614710320d1ad4b79f6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/e4ccfbda4394c706a08e2bce01ae63d92d4e4f3b.roa
Signing time:             Thu 16 Sep 2021 20:48:08 +0000
ROA not before:           Thu 16 Sep 2021 03:00:00 +0000
ROA not after:            Sat 16 Sep 2023 03:00:00 +0000
asID:                     266706
IP address blocks:        45.229.188.0/24 maxlen: 24
                          45.229.189.0/24 maxlen: 24
                          45.229.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/74ceb21261d995f6744c5614710320d1ad4b79f6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/74ceb21261d995f6744c5614710320d1ad4b79f6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74ceb21261d995f6744c5614710320d1ad4b79f6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Mar 2023 02:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1103838 (0x10d7de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74ceb21261d995f6744c5614710320d1ad4b79f6
        Validity
            Not Before: Sep 16 03:00:00 2021 GMT
            Not After : Sep 16 03:00:00 2023 GMT
        Subject: CN=e4ccfbda4394c706a08e2bce01ae63d92d4e4f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5c:d9:f0:8c:21:a7:d2:c4:22:d8:72:66:ec:
                    72:99:79:30:0f:7b:d5:f9:29:2d:f9:08:4f:72:f8:
                    51:ef:11:a1:9f:1b:65:12:c5:18:c2:7b:1a:56:1b:
                    d3:78:28:22:f5:06:4d:d7:6c:7b:be:96:a6:fd:17:
                    64:9e:58:05:38:b3:d0:19:a9:7f:4b:4d:19:a5:95:
                    f5:7a:ea:c3:10:ff:d6:2a:57:8e:ab:5a:a1:b1:f8:
                    67:78:01:9e:37:38:c0:e5:c2:d5:56:db:55:1a:29:
                    d8:89:2c:a1:0d:68:91:f9:f1:5a:e4:d7:58:51:dd:
                    88:33:ec:03:5e:32:bf:a5:84:0d:f8:84:04:5e:7a:
                    20:f9:d9:94:08:93:2f:c0:a5:72:4b:3c:4e:fd:77:
                    1d:3a:3c:3b:e9:af:41:41:46:f2:52:dd:15:da:43:
                    49:ce:ea:be:e3:c8:77:22:96:71:51:92:15:f5:ee:
                    3e:13:a0:9e:30:95:cd:04:09:2c:3a:99:3b:c2:f7:
                    b9:10:b7:18:68:42:9d:69:50:24:24:ac:2f:9d:4e:
                    e0:ea:b1:ab:b1:c8:a8:0d:b2:4a:aa:6b:49:44:20:
                    34:40:fe:b1:d0:04:ed:0d:76:c2:19:87:f0:af:69:
                    46:2f:74:2f:5f:6d:65:8b:9f:40:c7:02:9c:4e:1e:
                    69:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                12:BC:E5:51:BA:D1:87:47:68:87:1D:89:93:05:2A:B7:A5:BA:F4:E1
            X509v3 Authority Key Identifier: 
                keyid:FA:E5:7E:91:CE:52:47:08:AB:10:B2:16:82:17:A8:91:B8:38:C0:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74ceb21261d995f6744c5614710320d1ad4b79f6.cer

            Subject Information Access: 
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/e4ccfbda4394c706a08e2bce01ae63d92d4e4f3b.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/74ceb21261d995f6744c5614710320d1ad4b79f6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.188.0-45.229.190.255

    Signature Algorithm: sha256WithRSAEncryption
         52:a3:f8:56:d9:5b:d8:7b:d5:a1:ac:9e:04:96:54:12:be:48:
         86:f8:d0:fd:10:82:1a:71:70:a7:bf:ae:81:a5:3b:2c:27:f3:
         e5:54:05:ed:a1:6a:7a:9d:fa:ea:60:09:3b:3d:9f:0f:c6:6a:
         0d:4f:f2:94:c9:12:ee:b6:07:20:db:d5:14:ed:45:10:58:40:
         20:9b:b2:12:da:0d:42:ab:c0:41:37:e0:11:a1:34:ab:1f:ac:
         34:dd:3e:2f:a5:c6:bb:16:2c:eb:63:3a:85:0c:cd:69:91:19:
         f8:42:e8:24:7e:c9:57:ef:c1:5d:11:ee:09:74:ae:4b:72:82:
         44:29:7b:9d:ef:3e:ef:55:4f:ec:ac:ae:5d:65:dc:ba:d9:3c:
         cb:26:89:71:38:7c:66:0c:04:58:78:dc:c4:f3:4f:84:fe:c4:
         6b:05:cc:f6:8d:e9:18:75:55:27:e3:5b:e8:66:4f:28:71:72:
         50:20:13:fe:5a:3c:15:9c:a7:00:7e:12:c8:59:87:fa:37:e3:
         7c:4d:d7:07:1e:56:d3:14:c5:c8:02:a6:c2:8f:c3:5c:71:63:
         93:47:9a:ab:c2:b4:09:34:a0:23:de:62:88:c0:a2:db:91:16:
         67:8c:66:55:bf:8b:d7:66:94:5c:93:93:b5:d3:ba:11:2c:44:
         91:0f:72:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 15 11:35:07 2023 by rpki-client on console-ams.rpki-client.org