Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c0e7ebb5-5a3e-4c09-9071-07ec93f7dafe/c3b747c2f170947477cf7a482c0e4a6bd9475bd6.roa
File:                     c3b747c2f170947477cf7a482c0e4a6bd9475bd6.roa (raw, json)
Hash identifier:          9I6rD1BIfuw2d6kO9NDjQ5QBdGQ/TT3Bp3RcqhBZCYA=
Subject key identifier:   9E:2F:27:2D:44:98:88:EE:3A:2B:D6:4C:E4:2B:E5:95:DA:88:4B:56
Certificate issuer:       /CN=7683d32cdb4affaba4c3cf86675e6414d022d8db
Certificate serial:       0C83F5
Authority key identifier: 81:4C:3C:60:92:35:46:FF:92:6B:52:16:C1:D4:A4:56:B2:C7:51:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7683d32cdb4affaba4c3cf86675e6414d022d8db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c0e7ebb5-5a3e-4c09-9071-07ec93f7dafe/c3b747c2f170947477cf7a482c0e4a6bd9475bd6.roa
Signing time:             Wed 24 Mar 2021 14:38:18 +0000
ROA not before:           Wed 24 Mar 2021 14:38:17 +0000
ROA not after:            Tue 24 Mar 2026 14:38:17 +0000
asID:                     266709
IP address blocks:        45.229.148.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/c0e7ebb5-5a3e-4c09-9071-07ec93f7dafe/7683d32cdb4affaba4c3cf86675e6414d022d8db.crl
                          rsync://repository.lacnic.net/rpki/lacnic/c0e7ebb5-5a3e-4c09-9071-07ec93f7dafe/7683d32cdb4affaba4c3cf86675e6414d022d8db.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7683d32cdb4affaba4c3cf86675e6414d022d8db.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 820213 (0xc83f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7683d32cdb4affaba4c3cf86675e6414d022d8db
        Validity
            Not Before: Mar 24 14:38:17 2021 GMT
            Not After : Mar 24 14:38:17 2026 GMT
        Subject: CN=c3b747c2f170947477cf7a482c0e4a6bd9475bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bb:56:01:00:45:13:28:4a:b1:b2:ae:ad:94:
                    0b:57:4c:0d:c1:7d:54:90:59:a6:ea:fe:7d:f8:11:
                    ca:f2:f4:25:50:28:91:2b:a0:0e:11:7f:45:24:5f:
                    a8:04:6e:77:26:13:6c:5f:d2:19:59:5b:a6:33:72:
                    43:01:34:7f:9b:06:d5:9c:7f:0d:d1:1d:b2:8c:61:
                    68:17:2d:26:4d:8a:ea:89:5d:79:dc:ff:11:1c:fc:
                    bf:c6:4c:c9:f8:31:83:5b:2e:66:f7:cc:9f:d7:ca:
                    53:d1:70:8f:9f:ef:e8:37:6c:8a:c2:35:a4:a3:6f:
                    1a:9c:c4:b0:c4:22:b8:cf:22:d3:2c:a3:6f:b4:58:
                    5c:f1:96:b5:d7:de:32:4c:80:a7:bc:6f:ec:5e:22:
                    d8:48:5a:7f:6d:99:d9:fd:3d:ae:3c:1f:e5:d9:8c:
                    5c:c6:85:46:0f:c6:1d:7a:e5:76:44:03:ee:7c:8b:
                    8e:07:ab:9d:20:87:6b:b7:f0:e9:93:d7:80:42:5c:
                    4e:71:86:3e:30:70:f9:7f:2e:5b:e6:b9:de:3b:1c:
                    3e:b2:3b:4b:25:c0:d0:2c:cd:02:5b:a6:b0:ac:e4:
                    3b:59:8b:6d:2a:c0:67:d9:1b:48:7c:7e:94:87:6a:
                    ca:1a:1d:7a:67:0b:a2:51:1c:47:8e:80:2b:3f:ce:
                    06:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2F:27:2D:44:98:88:EE:3A:2B:D6:4C:E4:2B:E5:95:DA:88:4B:56
            X509v3 Authority Key Identifier:
                keyid:81:4C:3C:60:92:35:46:FF:92:6B:52:16:C1:D4:A4:56:B2:C7:51:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7683d32cdb4affaba4c3cf86675e6414d022d8db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c0e7ebb5-5a3e-4c09-9071-07ec93f7dafe/c3b747c2f170947477cf7a482c0e4a6bd9475bd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c0e7ebb5-5a3e-4c09-9071-07ec93f7dafe/7683d32cdb4affaba4c3cf86675e6414d022d8db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:b3:b1:b8:7d:f0:64:28:bb:89:4c:fb:5a:be:4a:10:13:c3:
         c7:f1:88:a1:ba:df:1e:63:38:10:3f:d0:c1:85:b5:46:a8:86:
         40:92:15:55:9e:a7:fc:c9:ae:c5:40:77:49:96:52:ef:61:15:
         89:cf:0a:5f:9c:29:04:17:16:7b:30:70:fd:01:1e:ed:df:7f:
         66:cd:05:56:c8:35:82:92:4e:66:63:1e:bb:9b:3f:02:ca:8d:
         1f:8d:3b:2c:a8:80:bd:46:85:e9:3a:e6:c2:99:35:36:31:35:
         25:ef:dc:8a:d7:ff:f3:71:d5:a3:f9:54:9d:a4:54:92:ef:e7:
         1e:5a:3b:73:4e:38:f3:58:f4:25:d3:13:7f:ba:41:8e:5b:73:
         79:ed:e1:7c:ae:37:64:6a:e2:a3:a2:58:f2:a2:e0:37:ee:c7:
         0a:bf:39:58:3c:58:e8:bb:23:4e:e1:92:17:7b:2d:b8:fa:63:
         38:75:99:b1:6a:fd:45:19:7e:70:22:f2:47:e7:a2:4d:73:5b:
         1b:62:ef:9b:64:6d:1a:3b:77:1c:92:07:27:1a:6f:a7:30:97:
         06:f5:9d:91:6d:96:af:ff:f8:76:d7:46:3c:14:a9:22:4f:0b:
         b6:64:73:51:9c:ba:06:97:2b:54:76:72:00:20:ad:a0:17:7a:
         a8:1c:63:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 22:20:26 2024 by rpki-client on console-fra.rpki-client.org