Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c9f070f5-eddd-4f1e-9a4e-591a0fed3fed/ac1a93c58186c5fa4c3aa7d80f22fc0b5cc89048.roa
File:                     ac1a93c58186c5fa4c3aa7d80f22fc0b5cc89048.roa (raw, json)
Hash identifier:          GJwIoSwuu5IhXqg8QbkQP2SL3VokZ9NVwdPBPRP5Ab4=
Subject key identifier:   3D:88:75:AD:9B:24:0D:B5:06:0E:18:DE:DB:2D:05:BA:44:18:D9:04
Certificate issuer:       /CN=37bd7cd8964f0c9582b713bd1d719cbcfcf135e2
Certificate serial:       0163
Authority key identifier: ED:99:66:95:7A:67:06:05:3D:E7:07:DB:0D:48:5A:65:82:93:A7:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37bd7cd8964f0c9582b713bd1d719cbcfcf135e2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c9f070f5-eddd-4f1e-9a4e-591a0fed3fed/ac1a93c58186c5fa4c3aa7d80f22fc0b5cc89048.roa
Signing time:             Thu 15 Sep 2022 19:55:45 +0000
ROA not before:           Thu 15 Sep 2022 19:54:55 +0000
ROA not after:            Sun 15 Sep 2024 19:54:55 +0000
asID:                     266735
IP address blocks:        45.231.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/c9f070f5-eddd-4f1e-9a4e-591a0fed3fed/37bd7cd8964f0c9582b713bd1d719cbcfcf135e2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/c9f070f5-eddd-4f1e-9a4e-591a0fed3fed/37bd7cd8964f0c9582b713bd1d719cbcfcf135e2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37bd7cd8964f0c9582b713bd1d719cbcfcf135e2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Mar 2024 06:24:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37bd7cd8964f0c9582b713bd1d719cbcfcf135e2
        Validity
            Not Before: Sep 15 19:54:55 2022 GMT
            Not After : Sep 15 19:54:55 2024 GMT
        Subject: CN=ac1a93c58186c5fa4c3aa7d80f22fc0b5cc89048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b9:10:c1:62:2b:59:53:0d:76:3c:15:a3:aa:
                    e0:75:ea:ac:20:05:4b:6b:3f:46:1b:de:0b:88:ef:
                    1a:fd:74:14:8a:87:94:bf:5c:19:26:bc:57:f7:c7:
                    02:2d:ec:16:20:ba:c7:40:49:7e:96:1a:4f:eb:27:
                    1b:3e:b0:58:99:2d:89:65:5e:ad:cf:ec:38:8f:f1:
                    92:97:db:b8:80:12:82:9b:23:2d:6e:f4:f0:52:98:
                    6e:57:8e:76:e6:e7:30:50:76:5b:ef:b3:05:02:19:
                    a2:95:d1:17:fc:5d:f8:70:21:13:d6:a9:20:e9:e5:
                    eb:e0:0c:89:22:4b:10:39:57:f2:78:98:38:dd:63:
                    f8:64:c0:89:7b:74:15:7f:c5:9b:03:82:9b:ff:71:
                    56:95:51:df:42:07:41:36:75:a2:d6:be:f3:bf:4d:
                    7b:ec:19:d7:e3:ed:76:13:31:52:9d:18:9c:79:31:
                    2d:00:74:f3:9d:c6:9d:72:8f:b5:86:bc:b7:dc:ca:
                    91:62:e9:9b:ae:3c:62:82:30:a8:c2:d7:c3:ba:dd:
                    81:c0:a6:0c:a9:be:90:32:c9:8e:10:2f:b5:73:1d:
                    e3:5b:9b:61:56:0c:06:64:cc:42:49:87:37:1b:06:
                    db:48:00:02:5d:c1:10:5d:09:8b:4a:6f:49:e4:a6:
                    ca:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:88:75:AD:9B:24:0D:B5:06:0E:18:DE:DB:2D:05:BA:44:18:D9:04
            X509v3 Authority Key Identifier:
                keyid:ED:99:66:95:7A:67:06:05:3D:E7:07:DB:0D:48:5A:65:82:93:A7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37bd7cd8964f0c9582b713bd1d719cbcfcf135e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c9f070f5-eddd-4f1e-9a4e-591a0fed3fed/ac1a93c58186c5fa4c3aa7d80f22fc0b5cc89048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c9f070f5-eddd-4f1e-9a4e-591a0fed3fed/37bd7cd8964f0c9582b713bd1d719cbcfcf135e2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:7f:b5:54:58:5b:2e:47:c9:62:91:97:30:f5:23:c1:36:ad:
         bb:e5:82:fc:80:6a:a2:59:fa:7c:b8:e0:9d:23:e4:4d:55:71:
         c5:bb:1a:16:2a:e6:95:3b:a8:95:9c:35:fe:2a:5f:56:0d:a8:
         2c:10:48:18:1d:f4:a3:7c:4c:43:0d:50:c8:85:1d:eb:11:f0:
         8f:1d:39:c7:cd:a7:0f:9c:36:8a:54:77:15:a3:4a:dc:01:1f:
         01:db:0a:42:6d:5d:ce:c4:4b:a2:ef:ae:ff:f4:b6:cf:2e:69:
         4a:49:2b:5b:51:ee:f0:99:49:90:3c:45:b9:73:29:12:45:52:
         94:50:40:31:74:df:1f:16:67:98:00:38:0e:44:68:c3:e6:7d:
         94:c3:54:cb:a2:c8:e2:d9:2d:65:75:be:15:fc:80:09:0b:5d:
         96:0a:cd:ca:cb:79:0d:8a:c8:5e:a6:7f:ac:18:24:f6:c4:50:
         53:b5:03:1a:bb:23:ff:fd:81:ad:f1:c1:6d:80:12:1a:02:72:
         e6:9d:25:3b:03:e0:61:83:77:51:1b:e1:03:8e:c4:d9:dc:ae:
         40:9f:ae:82:3c:31:72:12:e4:ef:fe:bb:90:18:f8:ee:5a:06:
         5d:a1:73:05:3f:ef:1e:4f:8a:e4:0e:79:40:16:11:0a:ff:69:
         25:fb:78:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 3 12:12:05 2024 by rpki-client on console-ams.rpki-client.org