Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1724a6f-1a4b-433c-8582-7de7e0a913e0/67caad542fc06c51525ccd07e3dce8fb0ce3c1bb.roa
File:                     67caad542fc06c51525ccd07e3dce8fb0ce3c1bb.roa (raw, json)
Hash identifier:          9sMDxmkQ6WrUTwlwgaQ6HkyN698p9v/wY4Dt2Dc6VRw=
Subject key identifier:   E6:FE:9B:AB:85:23:05:79:0F:25:84:03:C9:2C:8A:3E:21:DA:BE:09
Certificate issuer:       /CN=75ea5c79a4b285a7ff9304a161ca92b6cd0c8479
Certificate serial:       183C26
Authority key identifier: 5B:8E:39:32:2C:6D:5E:0D:CE:FA:18:7C:F0:90:BB:DC:03:DE:F3:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75ea5c79a4b285a7ff9304a161ca92b6cd0c8479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c1724a6f-1a4b-433c-8582-7de7e0a913e0/67caad542fc06c51525ccd07e3dce8fb0ce3c1bb.roa
Signing time:             Thu 11 May 2023 15:12:35 +0000
ROA not before:           Wed 10 May 2023 15:12:35 +0000
ROA not after:            Sun 11 May 2025 15:12:35 +0000
asID:                     19889
IP address blocks:        161.22.0.0/19 maxlen: 24
                          181.118.224.0/19 maxlen: 24
                          190.3.128.0/19 maxlen: 24
                          190.57.192.0/19 maxlen: 24
                          200.85.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/c1724a6f-1a4b-433c-8582-7de7e0a913e0/75ea5c79a4b285a7ff9304a161ca92b6cd0c8479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/c1724a6f-1a4b-433c-8582-7de7e0a913e0/75ea5c79a4b285a7ff9304a161ca92b6cd0c8479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75ea5c79a4b285a7ff9304a161ca92b6cd0c8479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 Mar 2024 01:34:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1588262 (0x183c26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75ea5c79a4b285a7ff9304a161ca92b6cd0c8479
        Validity
            Not Before: May 10 15:12:35 2023 GMT
            Not After : May 11 15:12:35 2025 GMT
        Subject: CN=67caad542fc06c51525ccd07e3dce8fb0ce3c1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cd:a5:0f:ad:78:01:d6:a0:c4:4a:e6:1b:f4:
                    65:28:bf:81:dd:dd:ed:38:9b:31:56:f4:fe:dc:f9:
                    85:1b:19:a6:1e:fd:56:b6:c2:c8:60:09:e8:e8:54:
                    28:83:d7:6b:eb:08:d5:b7:18:c8:09:c4:40:78:d2:
                    c1:e7:19:38:d7:95:af:ab:90:d2:39:69:42:bd:38:
                    58:92:aa:09:ee:64:53:b3:f8:53:b5:76:c7:36:07:
                    97:80:26:c7:2b:03:a0:7f:76:18:73:f7:0b:7a:ee:
                    58:8a:01:a2:c6:fd:04:80:e1:a6:d0:f4:ed:64:8a:
                    b2:78:71:ac:2a:b6:08:1e:1b:1f:ce:20:25:a7:4d:
                    53:a3:0d:7f:f5:26:c5:b5:69:6b:bd:41:e8:80:81:
                    f4:d3:00:10:a4:bb:4a:42:ba:93:5f:68:79:ea:84:
                    bd:64:91:90:36:8d:d2:a1:1d:13:b6:df:56:36:e1:
                    c8:4c:f7:f8:a3:0e:84:af:df:af:d5:68:fc:a3:d7:
                    c7:13:f3:29:0f:73:e4:0d:dd:0d:37:70:24:f6:72:
                    7f:0a:ba:10:55:48:08:0e:a6:e8:e5:49:0d:55:cb:
                    f5:b7:43:93:be:5c:16:e1:31:77:30:6c:fb:7e:4e:
                    20:07:8d:3e:b6:64:12:ac:8a:ff:61:f5:6e:a9:f1:
                    db:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FE:9B:AB:85:23:05:79:0F:25:84:03:C9:2C:8A:3E:21:DA:BE:09
            X509v3 Authority Key Identifier:
                keyid:5B:8E:39:32:2C:6D:5E:0D:CE:FA:18:7C:F0:90:BB:DC:03:DE:F3:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75ea5c79a4b285a7ff9304a161ca92b6cd0c8479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1724a6f-1a4b-433c-8582-7de7e0a913e0/67caad542fc06c51525ccd07e3dce8fb0ce3c1bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c1724a6f-1a4b-433c-8582-7de7e0a913e0/75ea5c79a4b285a7ff9304a161ca92b6cd0c8479.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.0.0/19
                  181.118.224.0/19
                  190.3.128.0/19
                  190.57.192.0/19
                  200.85.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0a:47:78:e1:53:a9:28:2a:37:bd:71:f4:62:c2:e2:93:14:e7:
         ed:b2:7e:a7:76:c7:3c:f2:98:4f:b4:28:d2:4c:6a:8b:f7:25:
         10:2a:ba:2f:28:e6:61:eb:29:fc:53:cf:44:96:0e:e4:76:e3:
         17:3d:a0:42:db:a9:ec:9d:58:4f:c9:d8:2d:e9:93:58:f6:4d:
         58:57:a1:7a:f3:fd:c6:a2:f9:c7:32:2b:a1:41:1f:ee:df:48:
         c7:5f:ad:31:bf:e7:ac:d7:94:db:a5:30:2c:cd:fb:22:6a:88:
         d4:01:c8:db:d4:94:2b:88:7d:f9:a4:67:1a:8d:e9:10:f4:88:
         d2:3f:c5:c8:46:5e:fe:a7:38:cf:c1:4c:0b:9f:2c:73:ea:14:
         37:ad:de:93:56:71:8a:93:f4:9d:12:23:8f:60:a0:e6:c0:8f:
         72:72:8d:4c:76:74:3e:02:46:22:b4:4a:cb:4f:3c:51:dd:71:
         c6:69:61:da:53:b0:d8:85:ce:9e:3e:f8:03:f8:d6:1a:3a:c4:
         8e:d4:c2:2f:1c:e3:35:13:54:60:7c:f0:9e:c1:0e:94:96:50:
         fe:f8:54:24:55:e8:39:51:a2:f3:5b:59:07:cb:53:50:07:18:
         1e:41:5a:37:08:d5:2e:e5:4d:5c:ef:98:9f:6b:b8:66:fd:cf:
         96:a4:ac:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 07:17:00 2024 by rpki-client on console-ams.rpki-client.org