Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c079b6f9-d183-408f-ad1c-0a598750f335/fdd3378e4f98caada0c106d249339ade5e38e1a4.roa
File:                     fdd3378e4f98caada0c106d249339ade5e38e1a4.roa (raw, json)
Hash identifier:          NRWnUjxUH8qmYdgOO1IwtXoY2Hh6voGfAXsrZPh+XOE=
Subject key identifier:   D8:4F:47:11:58:41:D7:D4:19:2A:FA:F6:B7:5A:96:F4:C6:19:04:24
Certificate issuer:       /CN=c08f25f3d9b765be7d5d7c635b90cf35d837805f
Certificate serial:       0C3DEE
Authority key identifier: F0:5D:78:25:DF:35:90:2C:01:80:6A:92:F2:F2:3C:1C:59:C7:08:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c08f25f3d9b765be7d5d7c635b90cf35d837805f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c079b6f9-d183-408f-ad1c-0a598750f335/fdd3378e4f98caada0c106d249339ade5e38e1a4.roa
Signing time:             Wed 24 Mar 2021 14:34:26 +0000
ROA not before:           Wed 24 Mar 2021 14:34:26 +0000
ROA not after:            Tue 24 Mar 2026 14:34:26 +0000
asID:                     40676
IP address blocks:        45.236.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/c079b6f9-d183-408f-ad1c-0a598750f335/c08f25f3d9b765be7d5d7c635b90cf35d837805f.crl
                          rsync://repository.lacnic.net/rpki/lacnic/c079b6f9-d183-408f-ad1c-0a598750f335/c08f25f3d9b765be7d5d7c635b90cf35d837805f.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c08f25f3d9b765be7d5d7c635b90cf35d837805f.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 802286 (0xc3dee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c08f25f3d9b765be7d5d7c635b90cf35d837805f
        Validity
            Not Before: Mar 24 14:34:26 2021 GMT
            Not After : Mar 24 14:34:26 2026 GMT
        Subject: CN=fdd3378e4f98caada0c106d249339ade5e38e1a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e2:98:78:32:e4:8b:86:f0:20:0a:82:57:be:
                    a2:b0:80:b6:6a:5b:e0:2b:66:ad:df:1a:61:84:78:
                    26:b8:10:b0:86:35:e6:5e:65:34:09:23:e4:81:73:
                    65:53:a4:53:93:98:3b:45:b8:46:03:f3:5b:63:36:
                    c3:74:dc:79:da:33:75:0e:a3:c5:6c:0a:11:0e:35:
                    d2:16:52:f5:8b:66:cf:30:3e:17:5f:26:93:bc:2f:
                    ae:76:7f:af:e2:d8:d1:80:ab:6e:38:ea:b7:ba:c6:
                    70:ce:21:25:d5:a0:25:45:b5:aa:0d:4c:31:63:0e:
                    9e:15:63:1b:ec:11:a1:31:4f:8e:7e:38:4a:52:7f:
                    53:b9:55:ba:71:cb:8e:b3:51:89:eb:58:2b:ab:cd:
                    92:39:52:8b:ad:c1:50:63:fa:26:31:12:8c:33:c7:
                    0b:ee:60:9a:ce:18:bd:47:fb:04:00:b3:44:89:7a:
                    8a:91:3b:23:58:89:d7:45:10:0b:44:d7:51:2f:7b:
                    cd:d9:73:a4:0e:6f:4a:16:51:9d:0b:19:48:17:04:
                    d9:82:6a:7c:86:18:3d:ec:10:5a:57:6d:e4:de:e5:
                    a8:4c:93:05:1e:12:ec:6c:c2:69:36:a2:67:30:ac:
                    8c:2e:a3:3d:3f:93:b0:e9:6f:bd:7e:99:ab:2c:8c:
                    e5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4F:47:11:58:41:D7:D4:19:2A:FA:F6:B7:5A:96:F4:C6:19:04:24
            X509v3 Authority Key Identifier:
                keyid:F0:5D:78:25:DF:35:90:2C:01:80:6A:92:F2:F2:3C:1C:59:C7:08:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c08f25f3d9b765be7d5d7c635b90cf35d837805f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c079b6f9-d183-408f-ad1c-0a598750f335/fdd3378e4f98caada0c106d249339ade5e38e1a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c079b6f9-d183-408f-ad1c-0a598750f335/c08f25f3d9b765be7d5d7c635b90cf35d837805f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:73:b4:d9:90:a1:fc:34:13:6f:ab:0c:03:6b:a3:98:df:9a:
         b6:b3:2b:2c:18:df:a2:36:cb:92:c5:40:35:e2:62:71:cf:ae:
         39:c5:8e:08:6f:96:c8:0e:f6:61:a4:29:13:ee:da:01:cf:9b:
         4f:94:df:17:16:48:ca:6a:67:7e:26:94:5a:a7:bd:3f:f5:b2:
         82:f1:4f:51:9e:85:75:7f:0f:76:26:ed:70:3b:48:d4:a6:61:
         19:39:69:1c:87:44:04:c8:55:a6:44:86:51:d1:3f:a4:1b:15:
         bd:93:8f:55:47:02:f2:a2:45:93:8d:ae:a5:ba:ea:56:05:9c:
         c3:7b:da:11:d3:b9:27:60:a6:2e:83:e3:82:0a:78:28:1b:83:
         be:bd:fa:e3:6e:76:67:13:ac:c6:91:63:74:a0:a2:c1:d0:09:
         6a:de:7f:1d:3c:f0:2f:15:a5:48:47:72:bf:6a:72:ab:14:f7:
         05:9c:e7:9d:45:7d:6a:89:a6:65:5a:4f:76:ed:9e:00:31:54:
         4a:53:9f:13:b9:3f:b9:1c:e7:7a:13:6c:60:7f:3c:be:ee:bd:
         02:67:a0:03:fb:80:a3:05:ee:3c:6b:f9:29:28:2a:07:83:96:
         c3:40:59:12:6a:4b:64:bf:44:c4:ce:17:12:c4:ad:0a:68:68:
         27:86:20:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 19:40:41 2024 by rpki-client on console-fra.rpki-client.org