Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2f25f6f-e0a6-42e1-befb-f064e10637b7/d242dedfb776fecb49b11e440b1b18a69036b5e4.roa
File:                     d242dedfb776fecb49b11e440b1b18a69036b5e4.roa (raw, json)
Hash identifier:          Pq8AE83oXyqQJSurl0ozPkyN18ookAPalqhIYKKAi8k=
Subject key identifier:   01:2B:36:EA:F8:77:05:BB:C2:09:F4:9B:96:82:AB:BD:A7:55:32:B9
Certificate issuer:       /CN=fbdbede87b4431efcfcb2b63afa31714b26664a5
Certificate serial:       0B5793
Authority key identifier: 43:64:E7:CF:40:DC:6C:A4:B1:E6:79:CF:14:04:3F:DD:E3:FE:D5:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbdbede87b4431efcfcb2b63afa31714b26664a5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d2f25f6f-e0a6-42e1-befb-f064e10637b7/d242dedfb776fecb49b11e440b1b18a69036b5e4.roa
Signing time:             Wed 24 Mar 2021 14:31:25 +0000
ROA not before:           Wed 24 Mar 2021 14:31:25 +0000
ROA not after:            Tue 24 Mar 2026 14:31:25 +0000
asID:                     267825
IP address blocks:        45.173.52.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/d2f25f6f-e0a6-42e1-befb-f064e10637b7/fbdbede87b4431efcfcb2b63afa31714b26664a5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/d2f25f6f-e0a6-42e1-befb-f064e10637b7/fbdbede87b4431efcfcb2b63afa31714b26664a5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbdbede87b4431efcfcb2b63afa31714b26664a5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 743315 (0xb5793)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbdbede87b4431efcfcb2b63afa31714b26664a5
        Validity
            Not Before: Mar 24 14:31:25 2021 GMT
            Not After : Mar 24 14:31:25 2026 GMT
        Subject: CN=d242dedfb776fecb49b11e440b1b18a69036b5e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cd:fd:d9:18:56:b7:49:bb:fc:8d:24:95:0b:
                    3b:52:56:7e:24:ca:a2:20:04:1b:94:39:5c:dc:50:
                    10:53:fb:47:50:6d:63:54:11:c4:ca:92:68:4b:fc:
                    7b:02:0d:f2:d2:2a:37:7d:de:3f:4d:f8:4c:e0:4f:
                    ab:a3:45:0e:80:b2:fe:09:ab:38:95:a1:59:91:11:
                    ca:30:1e:8d:c0:c4:5f:29:81:09:01:a0:27:cd:7b:
                    27:87:a5:5b:9e:82:0e:6a:77:51:bd:89:52:a9:e0:
                    e4:3d:ca:38:22:c2:86:8c:74:5d:e2:ab:49:c1:61:
                    5c:dc:c1:b7:b2:c6:7c:a6:d0:97:bf:7c:0a:0c:a2:
                    b4:38:ec:18:fe:c8:73:a0:aa:67:65:4a:86:9e:b3:
                    88:6c:d0:3c:3a:18:f2:22:1d:c8:fd:6e:9e:9d:26:
                    80:ee:3d:c0:10:82:75:e0:0d:2f:ca:dc:5f:77:6a:
                    87:a5:1e:85:a8:c1:03:96:77:0d:06:42:87:fe:89:
                    2d:08:bf:d1:3a:2a:90:3b:6f:64:d4:a2:0d:70:a4:
                    4e:e1:33:45:ca:04:6f:93:dd:ba:a2:d8:b9:93:13:
                    78:91:79:02:3a:14:8f:51:83:f2:52:70:6e:9d:03:
                    2c:a6:27:e0:b7:4a:98:7c:45:e2:73:9a:bf:c4:30:
                    92:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2B:36:EA:F8:77:05:BB:C2:09:F4:9B:96:82:AB:BD:A7:55:32:B9
            X509v3 Authority Key Identifier:
                keyid:43:64:E7:CF:40:DC:6C:A4:B1:E6:79:CF:14:04:3F:DD:E3:FE:D5:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbdbede87b4431efcfcb2b63afa31714b26664a5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2f25f6f-e0a6-42e1-befb-f064e10637b7/d242dedfb776fecb49b11e440b1b18a69036b5e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d2f25f6f-e0a6-42e1-befb-f064e10637b7/fbdbede87b4431efcfcb2b63afa31714b26664a5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:fe:67:ba:3f:34:62:4b:8d:f0:28:d8:50:2f:79:7e:52:e9:
         11:e8:6c:08:f9:6e:af:a5:08:cc:fe:e5:0b:8f:b6:d9:d3:24:
         94:34:de:f5:50:eb:16:cf:ec:25:6a:de:83:07:d6:23:a8:6f:
         ec:cc:25:d3:e3:e6:3e:88:11:78:cf:84:06:a6:2c:30:70:f9:
         7b:d5:fe:ce:12:be:a6:f5:06:6a:b6:f2:d4:72:10:19:f7:d2:
         03:4d:b7:7d:23:8f:1a:2e:dd:97:ca:83:14:66:9b:a1:93:3f:
         68:b7:1d:af:de:bc:99:f8:f9:9f:19:66:60:5f:f9:c3:e8:ef:
         2a:f3:fb:d1:9c:38:70:3b:3e:b7:fa:fd:97:93:fa:9a:80:7e:
         f5:d7:21:07:a7:8a:8a:79:24:d7:3b:62:60:9a:b3:e2:c4:1c:
         34:1c:6b:56:f4:f7:7f:dc:29:7f:37:e7:92:71:0f:52:a0:06:
         c3:6b:94:53:2b:31:52:17:3e:5a:cb:d8:cd:4b:36:e3:5a:22:
         f6:36:00:15:74:61:4e:41:95:46:27:47:c4:e2:37:85:e2:c1:
         bf:a2:7b:d4:e5:75:97:23:e9:2a:bf:0f:a4:06:34:97:af:a0:
         fd:2a:22:31:a3:64:b6:ca:27:6f:a2:cc:91:d7:07:75:ea:79:
         bf:34:ca:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 21:31:06 2024 by rpki-client on console-ams.rpki-client.org