Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6b07e59-c421-40b5-9fa3-c93fd4dd3a99/50d0ccaa7fa6dcc356aa269e9fbb2a71f880da76.roa
File:                     50d0ccaa7fa6dcc356aa269e9fbb2a71f880da76.roa (raw, json)
Hash identifier:          vPPtGgjSgjxIeYkASg0w/AkcNeo2SvP1Zi8o/qWszrM=
Subject key identifier:   52:3D:0C:AF:9F:2F:CA:90:29:3C:95:FB:4F:E1:62:41:8E:D5:53:8E
Certificate issuer:       /CN=705e033d3f21da2fa4710b451c0d5a49bc994068
Certificate serial:       0250
Authority key identifier: B2:47:89:F5:83:A2:6A:6D:17:21:FA:BA:9A:C9:01:5E:31:80:37:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/705e033d3f21da2fa4710b451c0d5a49bc994068.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b6b07e59-c421-40b5-9fa3-c93fd4dd3a99/50d0ccaa7fa6dcc356aa269e9fbb2a71f880da76.roa
Signing time:             Mon 25 Jul 2022 17:22:32 +0000
ROA not before:           Mon 25 Jul 2022 03:00:00 +0000
ROA not after:            Thu 25 Jul 2024 03:00:00 +0000
asID:                     264666
IP address blocks:        179.0.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/b6b07e59-c421-40b5-9fa3-c93fd4dd3a99/705e033d3f21da2fa4710b451c0d5a49bc994068.crl
                          rsync://repository.lacnic.net/rpki/lacnic/b6b07e59-c421-40b5-9fa3-c93fd4dd3a99/705e033d3f21da2fa4710b451c0d5a49bc994068.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/705e033d3f21da2fa4710b451c0d5a49bc994068.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=705e033d3f21da2fa4710b451c0d5a49bc994068
        Validity
            Not Before: Jul 25 03:00:00 2022 GMT
            Not After : Jul 25 03:00:00 2024 GMT
        Subject: CN=50d0ccaa7fa6dcc356aa269e9fbb2a71f880da76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:af:a0:96:e3:df:fb:a7:b4:ae:db:14:cf:9d:
                    c3:5f:f5:9f:17:a7:88:51:07:3d:e6:3e:37:63:ad:
                    7b:c2:80:7d:93:9f:d3:f2:a3:ce:25:a8:02:7c:d3:
                    45:53:cd:7e:61:e4:cd:d8:7b:b9:90:43:46:c9:37:
                    78:54:86:e4:3f:ed:e0:bc:e4:bb:c1:e2:42:f4:ae:
                    98:10:b8:ed:90:91:f2:0b:a9:b6:e5:7c:53:e3:63:
                    d7:d7:e8:83:b0:05:f8:a1:d0:e1:02:eb:97:f1:48:
                    1e:fe:a5:ce:ff:1a:fe:3a:ac:0b:e1:e5:c6:fb:a1:
                    03:12:18:1c:6a:3c:74:10:44:d8:83:7a:d4:3b:9c:
                    8d:98:f5:b0:e8:56:2c:cd:63:0e:18:cb:e8:09:21:
                    68:0b:78:7e:27:b1:eb:0b:d4:63:d9:10:01:36:11:
                    4d:4d:de:85:bc:b4:54:83:9a:0c:3a:09:27:1d:03:
                    e3:56:9c:4e:3a:53:1f:29:e0:98:ce:67:c8:a8:67:
                    40:22:2b:57:50:7c:a7:1f:6c:e5:c2:bc:67:db:f3:
                    ed:8a:21:90:15:ed:86:1d:57:63:a2:a6:66:27:c5:
                    4a:04:6c:fc:7c:bb:ab:55:d6:8a:67:f2:ad:c7:82:
                    be:de:df:71:ae:3a:85:54:af:1f:24:f6:e2:b4:e4:
                    6b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:3D:0C:AF:9F:2F:CA:90:29:3C:95:FB:4F:E1:62:41:8E:D5:53:8E
            X509v3 Authority Key Identifier:
                keyid:B2:47:89:F5:83:A2:6A:6D:17:21:FA:BA:9A:C9:01:5E:31:80:37:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/705e033d3f21da2fa4710b451c0d5a49bc994068.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6b07e59-c421-40b5-9fa3-c93fd4dd3a99/50d0ccaa7fa6dcc356aa269e9fbb2a71f880da76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b6b07e59-c421-40b5-9fa3-c93fd4dd3a99/705e033d3f21da2fa4710b451c0d5a49bc994068.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:64:b7:de:a6:a6:59:c9:f9:1f:54:06:df:8a:73:4f:85:47:
         e9:a3:d8:79:53:ca:18:3e:63:16:cf:af:8d:df:07:08:b7:8f:
         eb:95:28:7f:9e:4c:eb:79:53:5d:10:40:5a:d9:80:2d:56:95:
         47:1c:f4:24:49:c5:79:78:0e:e2:86:d3:56:b2:76:fc:6b:e1:
         9b:ec:99:16:a5:b4:0d:53:ea:48:0f:fd:0b:f1:0d:07:73:90:
         53:76:d1:57:2d:49:0e:b9:48:3e:24:7a:ba:dd:7c:08:e7:c9:
         86:34:10:39:c4:35:44:18:cc:e0:0b:d5:f5:a6:39:e2:16:d8:
         89:bd:bd:df:aa:01:c7:0b:27:1c:e7:c8:4c:09:b2:6e:a8:26:
         ff:d9:6b:61:c4:e6:3f:13:b4:a6:79:51:de:5a:9f:d3:dc:52:
         3e:ab:21:32:cf:cd:32:37:b5:a9:a0:89:16:9f:9a:cd:a7:fe:
         1f:f0:a1:03:f7:81:e4:41:d8:1c:d2:27:45:fd:32:ea:9f:a1:
         ba:52:bf:ed:30:3c:ae:32:58:80:79:30:a3:63:8a:cc:34:61:
         81:ee:c0:1d:e3:c6:c4:2f:74:f4:97:7b:cd:8e:b8:3e:72:06:
         a1:86:dd:d5:fb:e3:d6:99:ef:b3:46:77:19:7c:f1:14:73:b0:
         52:59:fb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 13:29:26 2024 by rpki-client on console-ams.rpki-client.org