Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bbbb52e1-06f0-499b-bffa-3c9225740b4b/397fad571579f3dc8ade26a7f6040947c1b0fc9f.roa
File:                     397fad571579f3dc8ade26a7f6040947c1b0fc9f.roa (raw, json)
Hash identifier:          qB6ArVDwPqIoyIuvPcWC2vkAfSGK4wskN+vQIACW1W4=
Subject key identifier:   47:B3:05:DD:EC:36:30:79:F5:EA:BB:8D:CE:FA:3F:02:FB:F9:65:AA
Certificate issuer:       /CN=6efa4d53a9a2c33a3fe7585233f9d4d4c10ff669
Certificate serial:       23515F
Authority key identifier: 8F:72:71:5B:AE:6B:CC:AB:62:1F:27:32:6C:82:80:01:F5:31:84:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6efa4d53a9a2c33a3fe7585233f9d4d4c10ff669.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bbbb52e1-06f0-499b-bffa-3c9225740b4b/397fad571579f3dc8ade26a7f6040947c1b0fc9f.roa
Signing time:             Sat 04 Nov 2023 21:21:53 +0000
ROA not before:           Sat 04 Nov 2023 21:21:53 +0000
ROA not after:            Tue 04 Nov 2025 21:21:53 +0000
asID:                     23470
IP address blocks:        45.164.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/bbbb52e1-06f0-499b-bffa-3c9225740b4b/6efa4d53a9a2c33a3fe7585233f9d4d4c10ff669.crl
                          rsync://repository.lacnic.net/rpki/lacnic/bbbb52e1-06f0-499b-bffa-3c9225740b4b/6efa4d53a9a2c33a3fe7585233f9d4d4c10ff669.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6efa4d53a9a2c33a3fe7585233f9d4d4c10ff669.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Feb 2024 20:21:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2314591 (0x23515f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6efa4d53a9a2c33a3fe7585233f9d4d4c10ff669
        Validity
            Not Before: Nov  4 21:21:53 2023 GMT
            Not After : Nov  4 21:21:53 2025 GMT
        Subject: CN=397fad571579f3dc8ade26a7f6040947c1b0fc9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:64:0d:66:1f:c7:6c:f2:00:42:d0:57:e8:f6:
                    fd:1f:89:52:16:ac:94:ad:0d:b4:7b:4d:f9:47:8a:
                    5c:e6:c6:87:d0:f8:21:48:1a:f5:b5:a6:cc:19:d3:
                    78:13:03:04:d1:e3:d8:49:9f:e5:2c:c6:59:59:f2:
                    3e:60:d0:f7:69:4d:05:a6:6d:74:83:cc:f2:9e:c1:
                    63:5d:88:1e:fc:10:58:32:0d:09:b7:cd:0d:18:61:
                    6d:bd:76:30:2d:4a:70:e8:4d:eb:ee:29:8f:7f:b6:
                    89:53:e8:48:13:a4:56:11:e7:59:6d:ab:73:6b:e9:
                    9a:63:77:5f:9b:87:2c:54:58:fa:75:95:19:8e:4a:
                    97:e6:76:47:ec:ed:f9:14:d4:0d:0a:52:0c:c0:b9:
                    38:a5:3c:c3:9d:47:01:ca:51:2d:7d:f5:2a:49:2b:
                    99:30:01:3b:e3:ce:f4:0d:a1:5d:18:5b:96:4b:eb:
                    02:c4:82:95:51:73:9c:c5:45:39:ae:01:5c:93:8a:
                    ee:26:27:8f:78:7a:53:28:ae:46:b6:55:13:66:e0:
                    43:67:47:ab:58:0d:f2:e3:6b:08:24:01:4a:23:32:
                    61:55:38:78:1e:dc:e3:a9:48:b3:e1:16:c3:ae:05:
                    76:b8:39:29:2c:b4:02:65:22:01:e2:95:19:97:75:
                    f9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B3:05:DD:EC:36:30:79:F5:EA:BB:8D:CE:FA:3F:02:FB:F9:65:AA
            X509v3 Authority Key Identifier:
                keyid:8F:72:71:5B:AE:6B:CC:AB:62:1F:27:32:6C:82:80:01:F5:31:84:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6efa4d53a9a2c33a3fe7585233f9d4d4c10ff669.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bbbb52e1-06f0-499b-bffa-3c9225740b4b/397fad571579f3dc8ade26a7f6040947c1b0fc9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bbbb52e1-06f0-499b-bffa-3c9225740b4b/6efa4d53a9a2c33a3fe7585233f9d4d4c10ff669.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:fd:c9:0f:7c:50:1d:69:7a:d3:40:73:0c:83:6c:c5:b1:f8:
         5a:f4:ff:6c:4a:25:f2:22:9e:07:33:6d:20:6f:e2:df:3a:62:
         a1:f3:c9:9e:89:68:03:f2:84:01:34:5f:f6:f5:f2:ef:00:92:
         10:25:69:55:e5:56:76:bf:e9:cf:62:67:dd:2f:86:11:09:4a:
         50:54:64:0b:7f:2e:d2:37:8d:39:5b:17:63:5b:9c:db:50:b5:
         18:77:d1:ed:b3:1f:3a:a3:be:02:cd:f7:d8:06:52:d3:79:1b:
         d0:7e:76:b2:a9:c0:07:df:1c:c1:6a:17:de:c5:44:b4:b3:95:
         92:25:16:c7:9c:47:88:8d:c8:b6:59:87:8e:92:ec:8a:da:39:
         79:54:60:e0:85:52:fe:70:92:6b:1b:91:12:15:25:05:6f:ae:
         62:21:51:b6:24:ec:a9:52:b8:b2:17:37:34:3f:93:ca:f1:a3:
         68:8a:b5:1d:79:3e:7c:b8:76:c8:f2:12:a3:75:58:21:10:aa:
         08:47:4f:c5:a4:75:a9:87:29:89:c7:21:f7:c0:95:35:e6:a2:
         f5:0c:54:33:da:e9:dc:3a:42:84:02:44:4b:25:5f:ea:69:0f:
         25:cb:8d:ff:a0:ab:b5:b7:2f:93:50:d5:eb:c0:03:77:2a:8c:
         37:5d:c6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 00:13:13 2024 by rpki-client on console-ams.rpki-client.org