Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/f20d8931eeac4b7a184fae5bd28dfd12d810d6b1.roa
File:                     f20d8931eeac4b7a184fae5bd28dfd12d810d6b1.roa (raw, json)
Hash identifier:          CkQr3WCn5Q9/J9PKQmg53TKDyVI9joIEuqQy/LzRjP8=
Subject key identifier:   52:51:4C:2E:27:72:BE:FF:51:B8:AE:44:1B:6D:A8:2E:BA:A6:25:5F
Certificate issuer:       /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial:       229235
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/f20d8931eeac4b7a184fae5bd28dfd12d810d6b1.roa
Signing time:             Fri 04 Aug 2023 16:06:31 +0000
ROA not before:           Thu 03 Aug 2023 16:06:31 +0000
ROA not after:            Mon 04 Aug 2025 16:06:31 +0000
asID:                     197644
IP address blocks:        190.93.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Aug 2023 15:21:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2265653 (0x229235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
        Validity
            Not Before: Aug  3 16:06:31 2023 GMT
            Not After : Aug  4 16:06:31 2025 GMT
        Subject: CN=f20d8931eeac4b7a184fae5bd28dfd12d810d6b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:05:81:52:b9:23:98:f5:e6:73:5c:3d:1b:e3:
                    99:8f:ca:ab:36:49:45:95:8a:83:f5:62:99:8e:e7:
                    84:3e:1d:17:a4:1e:3e:a3:ea:ec:c6:89:8c:d7:32:
                    12:e8:9e:6b:ed:85:b2:97:62:d0:38:17:f4:40:8e:
                    53:2b:f6:43:60:fc:fa:d5:c7:a1:5c:2a:71:10:99:
                    56:3f:b4:e4:4b:e1:59:45:a8:52:9c:c8:b2:78:86:
                    05:f8:f8:39:03:e6:12:1b:e7:ac:17:b3:2a:4d:b0:
                    c5:f4:68:fa:a1:89:60:c1:f9:f6:c0:8b:3a:fc:cf:
                    70:37:08:23:13:d2:ed:ba:05:e4:0f:fc:71:76:10:
                    ae:2c:a2:c5:7e:6e:27:51:e1:97:02:90:50:a3:52:
                    46:10:dc:ca:c0:07:0f:46:38:38:c9:14:30:d1:ee:
                    e0:98:b1:ae:f8:51:da:20:8a:8d:a0:0b:e6:d0:29:
                    0d:4b:5f:a6:0c:e6:e2:98:ef:33:1b:91:03:c7:b5:
                    67:b3:95:20:91:b5:36:f9:3c:9d:ad:ad:e8:05:4f:
                    96:5b:8f:9f:1c:bd:0d:0f:0e:4d:23:c7:5c:06:8e:
                    41:77:d0:ac:61:e0:8a:38:2d:3e:ca:af:32:cc:ec:
                    a0:88:e1:a4:0b:be:ef:10:6f:de:2e:99:93:97:2d:
                    61:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:51:4C:2E:27:72:BE:FF:51:B8:AE:44:1B:6D:A8:2E:BA:A6:25:5F
            X509v3 Authority Key Identifier:
                keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/f20d8931eeac4b7a184fae5bd28dfd12d810d6b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:f6:9f:c0:d8:e5:ef:79:0f:9b:46:7b:ca:bd:d7:e4:71:99:
         88:7c:69:4d:b0:de:d7:84:6b:dd:d5:76:0a:c0:0b:0e:6b:41:
         b6:9c:6a:e7:f5:68:19:47:df:c7:84:be:c6:da:c4:50:4a:05:
         f0:eb:84:5b:56:67:f6:ab:f8:05:b1:7a:26:ee:ec:c7:71:8d:
         90:f0:a0:07:6e:04:c9:fc:f1:80:77:58:3c:c7:e5:c5:47:ee:
         68:04:93:24:67:7f:82:83:2d:a9:89:db:83:c5:90:df:92:a3:
         52:87:8d:ae:43:54:df:45:ef:8a:71:48:fb:c2:17:f0:dc:5e:
         78:7c:a8:01:f8:58:5e:53:d0:a5:d8:06:00:bc:17:22:98:98:
         a9:20:5e:d4:8e:3f:00:5b:c5:06:a5:73:dc:63:90:79:83:a6:
         92:de:92:8b:c1:b3:1e:83:91:06:7e:22:b5:fd:78:41:a4:85:
         2d:90:c9:36:e1:f3:b1:f7:52:1f:ad:99:6c:07:a3:14:bc:c8:
         7a:29:36:48:7e:79:61:17:33:7a:86:08:40:b0:70:4c:c9:93:
         a6:5b:c7:9e:6c:4e:97:19:c3:90:56:e4:ec:48:99:a0:bd:f2:
         89:80:ce:f6:04:19:d0:22:6d:d6:19:5c:ad:87:42:2f:79:47:
         4c:11:20:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 15:45:13 2023 by rpki-client on console-fra.rpki-client.org