Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/908205d9e7d930566a64098619ec3b3b712d6785.roa
File:                     908205d9e7d930566a64098619ec3b3b712d6785.roa (raw, json)
Hash identifier:          663/JA/3DxTE8hyV/TYcmnUQRBI0B1L8nA7BZ7QqvjQ=
Subject key identifier:   B6:CC:84:99:72:70:83:09:21:B2:7C:9A:DC:81:27:12:29:11:29:CC
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       22A939
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/908205d9e7d930566a64098619ec3b3b712d6785.roa
Signing time:             Fri 04 Aug 2023 16:10:05 +0000
ROA not before:           Thu 03 Aug 2023 16:10:05 +0000
ROA not after:            Mon 04 Aug 2025 16:10:05 +0000
asID:                     197644
IP address blocks:        190.93.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Aug 2023 15:21:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2271545 (0x22a939)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Aug  3 16:10:05 2023 GMT
            Not After : Aug  4 16:10:05 2025 GMT
        Subject: CN=908205d9e7d930566a64098619ec3b3b712d6785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4f:36:58:38:e3:62:0c:b9:01:53:c9:66:a8:
                    8c:0c:4c:ab:53:ff:47:cb:03:2e:2b:9a:f2:06:99:
                    1f:40:5e:c0:e8:63:eb:14:c9:29:fb:07:5c:73:8c:
                    f0:2a:c7:d6:d2:7b:8a:44:eb:63:f6:fb:03:b3:1c:
                    f6:54:58:5d:98:36:71:30:a7:98:f4:29:dd:46:c2:
                    94:a5:e9:45:6b:74:d0:e5:40:10:05:c7:c0:c9:fa:
                    fe:bf:aa:67:14:59:17:ad:46:d1:68:41:f4:3d:f1:
                    22:ea:e3:fa:a2:ea:0f:30:ae:42:1b:b1:14:b8:f2:
                    43:4c:14:88:72:63:93:ff:7f:ad:1f:8b:77:94:7b:
                    16:dd:87:44:98:af:c9:cf:a7:82:6d:58:5c:fa:20:
                    fb:69:fc:75:57:5d:db:e8:16:b6:07:6b:a4:03:f1:
                    95:b6:f8:54:1d:6f:a4:8e:95:70:67:20:03:18:5c:
                    b2:31:56:40:05:b5:7a:d5:5f:ab:0c:f6:f1:26:ff:
                    b9:da:78:0e:f1:c1:a3:e6:93:83:48:70:b4:ba:4d:
                    08:5e:30:c9:77:ec:4d:49:2f:36:c6:b5:aa:b0:6d:
                    b6:b7:83:d4:ab:01:fd:f2:b9:49:ac:e6:dd:dd:d0:
                    51:fe:cd:e5:01:92:ff:b1:45:34:79:9f:83:b7:bb:
                    3f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CC:84:99:72:70:83:09:21:B2:7C:9A:DC:81:27:12:29:11:29:CC
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/908205d9e7d930566a64098619ec3b3b712d6785.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:f3:15:22:4c:4c:6e:2e:a6:99:a0:9f:a5:30:c8:1a:6b:10:
         00:e0:31:1f:18:29:ff:fe:85:e7:c1:c7:ea:10:f8:22:4e:2d:
         85:ba:0e:ee:31:38:61:5a:55:6f:3f:d2:4b:48:e5:63:fb:2f:
         85:1e:ba:b6:14:ab:24:d9:5f:46:65:55:04:87:e3:c8:e9:ec:
         3b:fa:50:95:00:bc:85:81:4e:38:d6:91:ec:7e:19:78:72:61:
         82:8e:28:91:e7:30:1b:0f:9a:94:2f:b9:03:36:ee:02:80:04:
         37:a9:60:49:e6:1b:d0:f6:1d:a0:4e:93:61:39:01:56:5f:b3:
         f6:da:a8:49:19:8c:f0:14:30:94:38:10:da:cb:bf:e6:5c:4e:
         f3:b4:db:a2:a6:ad:49:61:ca:bb:7b:4f:f0:ff:72:51:17:28:
         08:6d:6d:a0:13:da:e1:76:9e:6f:91:85:66:ab:e4:da:06:b2:
         57:f0:44:74:c8:01:fb:16:5c:cb:8c:91:1b:b3:ee:a6:f7:3c:
         21:32:ac:ca:76:73:f4:4a:5a:30:44:2b:2f:3a:3c:94:9a:c7:
         39:28:83:c2:09:2f:ba:e8:0f:18:1a:62:fd:04:4e:6f:b0:36:
         71:06:32:1a:c5:1d:d9:69:3c:12:1a:78:1f:b8:0d:e9:39:f7:
         09:3e:59:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 15:43:39 2023 by rpki-client on console-ams.rpki-client.org