Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/90b17ac542abbad3119008e775c21d173cebcffa.roa
File:                     90b17ac542abbad3119008e775c21d173cebcffa.roa (raw, json)
Hash identifier:          1Yyivi+HUCVobbFiRqZv8igalY7/eRKDmcbtKOom1pk=
Subject key identifier:   CC:CB:34:20:E8:BA:77:23:39:85:6B:3C:F4:55:2E:52:F5:78:42:6D
Certificate issuer:       /CN=c376ce9732a7f8438a8728863d42624058e18390
Certificate serial:       194FAC
Authority key identifier: D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/90b17ac542abbad3119008e775c21d173cebcffa.roa
Signing time:             Thu 14 Jul 2022 13:50:28 +0000
ROA not before:           Thu 14 Jul 2022 03:00:00 +0000
ROA not after:            Tue 14 Jul 2026 03:00:00 +0000
asID:                     28064
IP address blocks:        190.61.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.crl
                          rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Apr 2024 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1658796 (0x194fac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c376ce9732a7f8438a8728863d42624058e18390
        Validity
            Not Before: Jul 14 03:00:00 2022 GMT
            Not After : Jul 14 03:00:00 2026 GMT
        Subject: CN=90b17ac542abbad3119008e775c21d173cebcffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:76:47:b3:99:4a:be:57:38:f0:55:d0:d7:32:
                    d8:0a:dd:67:d5:0b:6c:64:7a:bd:45:6d:19:b3:68:
                    79:11:f4:9a:63:8a:b2:fc:00:12:be:28:ad:24:15:
                    c5:36:1c:51:68:b7:71:06:6f:5d:1e:82:3e:49:b5:
                    56:78:4e:80:7e:e4:2e:10:19:f4:c9:30:98:61:31:
                    82:5a:18:c6:ce:fc:e2:f3:7f:bc:eb:f7:41:ff:3e:
                    cc:27:ed:4b:be:bb:d6:9e:90:8f:30:db:3e:61:21:
                    ec:b8:35:01:85:5e:4c:01:00:e0:ca:79:a8:f6:32:
                    af:e1:c9:c4:0f:ce:a5:be:c8:70:08:7c:96:53:ef:
                    e2:4b:b0:a7:5b:60:fb:ca:75:08:3a:e1:1b:a0:cd:
                    09:b9:e0:97:4d:f3:86:39:aa:ab:7b:03:bd:39:58:
                    9e:13:8e:43:20:fe:da:a8:81:a6:df:74:4d:a3:44:
                    3f:6f:af:a1:92:6a:ba:3b:3b:ab:ef:45:b7:39:46:
                    50:f6:fd:70:df:bb:6b:ae:fe:e2:6a:d8:a2:93:49:
                    56:7e:75:e5:7a:32:03:c2:72:28:e8:72:76:d0:c6:
                    d7:f5:40:58:6b:fb:d3:4d:60:eb:f8:9f:99:80:1c:
                    42:9c:0e:06:09:d5:6c:56:a0:29:d8:1c:1e:c4:eb:
                    71:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:CB:34:20:E8:BA:77:23:39:85:6B:3C:F4:55:2E:52:F5:78:42:6D
            X509v3 Authority Key Identifier:
                keyid:D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/90b17ac542abbad3119008e775c21d173cebcffa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:e2:9d:f3:f0:8d:4e:8a:11:7b:64:4e:61:67:94:c7:50:b4:
         d3:61:14:4e:9b:d6:99:c9:8a:98:a4:c4:86:57:a4:ea:c8:5e:
         10:3c:72:c1:7e:dc:be:e9:74:e4:05:07:68:d8:a6:72:b4:5b:
         57:7f:8f:e2:96:2e:57:ee:42:8a:76:a9:25:e6:5c:51:f6:a3:
         82:7a:8a:88:fb:86:4d:9f:00:a7:72:4c:4f:d0:73:05:95:b9:
         94:a3:a4:b2:f5:aa:24:8c:14:1b:ae:3d:8f:74:b4:bb:9d:e1:
         31:5e:71:81:84:48:6f:08:f9:e9:c2:63:18:69:f7:23:e5:f3:
         7e:85:05:86:34:06:ab:af:11:82:d0:cc:a0:5b:02:61:8a:27:
         f1:a2:5e:77:67:26:77:5c:9e:b2:d1:a4:53:74:1b:ea:4f:26:
         d6:4c:2f:5f:da:f3:f4:2d:f6:1b:06:f5:a0:9f:b7:1a:f1:ed:
         c9:e4:9e:45:41:4b:c5:aa:a4:00:40:f4:9f:bc:50:08:1b:b5:
         31:64:8a:4a:9f:e8:ab:ec:78:b2:f4:22:b8:41:f2:84:9f:07:
         c2:9f:2a:25:f2:aa:f2:3c:51:cd:9d:52:c6:c6:6a:49:fc:56:
         10:75:9e:e8:1d:45:d5:22:e5:5d:5b:1c:9c:68:9b:62:1e:bb:
         d7:38:f0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 05:27:10 2024 by rpki-client on console-fra.rpki-client.org