Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d7079f76-cfb7-48af-bbf8-de247fb2d045/e87c8123e3bbe21a559a4e7c3b3d242b4f2d90c3.roa
File:                     e87c8123e3bbe21a559a4e7c3b3d242b4f2d90c3.roa (raw, json)
Hash identifier:          N87y5wkHJuTvizf9F6Ss7VbkLSvqevGo6sMFRuZAzkw=
Subject key identifier:   F1:59:80:BC:E7:CD:E5:78:43:30:50:87:41:EF:1C:67:B1:67:88:9D
Certificate issuer:       /CN=92ca6bd9f98bddb081dcd1d841d79196a7f4a5c8
Certificate serial:       0D715E
Authority key identifier: 51:07:E5:8C:65:19:19:3D:C1:BB:72:06:A9:34:B2:86:11:03:F6:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92ca6bd9f98bddb081dcd1d841d79196a7f4a5c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d7079f76-cfb7-48af-bbf8-de247fb2d045/e87c8123e3bbe21a559a4e7c3b3d242b4f2d90c3.roa
Signing time:             Wed 24 Mar 2021 14:40:21 +0000
ROA not before:           Wed 24 Mar 2021 14:40:21 +0000
ROA not after:            Tue 24 Mar 2026 14:40:21 +0000
asID:                     22724
IP address blocks:        200.29.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/d7079f76-cfb7-48af-bbf8-de247fb2d045/92ca6bd9f98bddb081dcd1d841d79196a7f4a5c8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/d7079f76-cfb7-48af-bbf8-de247fb2d045/92ca6bd9f98bddb081dcd1d841d79196a7f4a5c8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92ca6bd9f98bddb081dcd1d841d79196a7f4a5c8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 22 Jul 2023 20:58:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880990 (0xd715e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92ca6bd9f98bddb081dcd1d841d79196a7f4a5c8
        Validity
            Not Before: Mar 24 14:40:21 2021 GMT
            Not After : Mar 24 14:40:21 2026 GMT
        Subject: CN=e87c8123e3bbe21a559a4e7c3b3d242b4f2d90c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fc:d4:3e:af:30:f9:36:92:de:1b:ed:73:15:
                    02:2e:5a:2c:13:86:f1:61:6a:6d:a2:b3:f0:42:e4:
                    6c:3f:81:10:cf:e6:76:32:fc:4a:06:25:b4:bf:b2:
                    a4:32:2b:f6:3d:82:58:b2:cb:65:83:09:38:71:59:
                    0d:f2:73:66:f9:43:aa:35:9e:04:9c:04:ee:56:8e:
                    89:07:1b:0b:67:31:04:eb:a4:8e:7c:70:4d:10:af:
                    b7:37:2b:1c:97:b6:1f:6c:87:03:ce:54:6b:d6:d0:
                    22:dd:c5:e1:45:9b:8d:2e:6a:d5:42:53:98:5c:6b:
                    2d:17:cb:04:0b:18:a0:cb:cd:86:e3:a7:a9:b0:aa:
                    c4:a7:41:4f:1f:de:6d:a4:2d:c5:66:40:36:a0:d4:
                    81:61:79:8c:ec:3b:70:26:d7:02:68:fd:25:3f:c9:
                    b0:c2:6e:a3:d2:29:62:39:6f:dd:02:09:a8:bd:e0:
                    79:6f:29:72:a2:d2:62:f7:09:9d:22:0b:c2:3b:8a:
                    12:ec:ad:a5:1b:ba:2c:8b:7b:a0:1a:00:e6:2d:3c:
                    f7:07:7b:ea:ec:6a:3d:0a:4d:9f:47:71:41:86:8b:
                    50:ab:9b:da:6e:be:8e:44:db:6c:a8:30:95:bd:21:
                    b8:e0:b4:ec:cf:c7:ae:06:7c:72:bf:14:8a:f5:33:
                    1b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:59:80:BC:E7:CD:E5:78:43:30:50:87:41:EF:1C:67:B1:67:88:9D
            X509v3 Authority Key Identifier:
                keyid:51:07:E5:8C:65:19:19:3D:C1:BB:72:06:A9:34:B2:86:11:03:F6:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92ca6bd9f98bddb081dcd1d841d79196a7f4a5c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d7079f76-cfb7-48af-bbf8-de247fb2d045/e87c8123e3bbe21a559a4e7c3b3d242b4f2d90c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d7079f76-cfb7-48af-bbf8-de247fb2d045/92ca6bd9f98bddb081dcd1d841d79196a7f4a5c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:85:3f:45:40:d5:6e:55:46:96:7d:e1:44:a4:43:1d:58:cf:
         8f:c3:3d:df:82:d3:5c:91:14:75:66:68:d4:33:8e:b2:21:ee:
         d1:45:56:73:61:80:44:10:10:1e:ee:73:0e:94:c8:fb:aa:85:
         0d:5d:ab:a2:86:bc:b2:14:57:8b:2f:ab:3b:89:dd:dd:95:58:
         b7:f9:3c:e2:5a:00:3c:8e:12:f8:f9:f0:99:97:a3:93:37:ce:
         f8:f8:25:b0:45:3a:10:61:6a:4a:77:23:8c:f7:bc:73:01:8e:
         13:57:fd:e2:1b:4e:b6:54:34:f0:dc:9d:d5:88:35:0d:94:6b:
         b7:50:4a:1a:ee:99:55:b2:50:17:c2:58:e0:20:bc:e8:2c:f3:
         29:08:87:c4:4d:e3:41:d4:e3:fd:69:1b:4f:05:b1:0b:5f:32:
         45:7a:b5:03:5a:62:e2:64:57:80:af:a5:7a:56:35:b7:8e:02:
         ff:6c:ec:ef:6c:be:dd:89:d3:fe:f8:7c:d0:05:e4:cb:4d:74:
         b4:05:28:32:9c:2c:01:63:b4:c0:5d:79:f2:5d:54:c1:e1:25:
         9d:b6:4f:4a:62:ce:54:de:ef:45:4d:89:43:6d:6a:08:f1:72:
         d3:4c:cc:67:3f:39:fa:e6:99:48:b6:44:27:15:3d:3e:ac:27:
         3f:78:27:3d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDXFeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDky
Y2E2YmQ5Zjk4YmRkYjA4MWRjZDFkODQxZDc5MTk2YTdmNGE1YzgwHhcNMjEwMzI0
MTQ0MDIxWhcNMjYwMzI0MTQ0MDIxWjAzMTEwLwYDVQQDEyhlODdjODEyM2UzYmJl
MjFhNTU5YTRlN2MzYjNkMjQyYjRmMmQ5MGMzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjPzUPq8w+TaS3hvtcxUCLlosE4bxYWptorPwQuRsP4EQz+Z2
MvxKBiW0v7KkMiv2PYJYsstlgwk4cVkN8nNm+UOqNZ4EnATuVo6JBxsLZzEE66SO
fHBNEK+3Nyscl7YfbIcDzlRr1tAi3cXhRZuNLmrVQlOYXGstF8sECxigy82G46ep
sKrEp0FPH95tpC3FZkA2oNSBYXmM7DtwJtcCaP0lP8mwwm6j0iliOW/dAgmoveB5
bylyotJi9wmdIgvCO4oS7K2lG7osi3ugGgDmLTz3B3vq7Go9Ck2fR3FBhotQq5va
br6ORNtsqDCVvSG44LTsz8euBnxyvxSK9TMbGQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPFZgLznzeV4QzBQh0HvHGexZ4idMB8GA1UdIwQYMBaAFFEH5YxlGRk9wbty
Bqk0soYRA/YZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTJjYTZi
ZDlmOThiZGRiMDgxZGNkMWQ4NDFkNzkxOTZhN2Y0YTVjOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDcwNzlmNzYtY2ZiNy00OGFmLWJiZjgtZGUyNDdm
YjJkMDQ1L2U4N2M4MTIzZTNiYmUyMWE1NTlhNGU3YzNiM2QyNDJiNGYyZDkwYzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kNzA3OWY3Ni1jZmI3LTQ4YWYtYmJmOC1kZTI0
N2ZiMmQwNDUvOTJjYTZiZDlmOThiZGRiMDgxZGNkMWQ4NDFkNzkxOTZhN2Y0YTVj
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgd9TANBgkqhkiG9w0BAQsFAAOCAQEAeoU/RUDVblVGln3h
RKRDHVjPj8M934LTXJEUdWZo1DOOsiHu0UVWc2GARBAQHu5zDpTI+6qFDV2rooa8
shRXiy+rO4nd3ZVYt/k84loAPI4S+PnwmZejkzfO+PglsEU6EGFqSncjjPe8cwGO
E1f94htOtlQ08Nyd1Yg1DZRrt1BKGu6ZVbJQF8JY4CC86CzzKQiHxE3jQdTj/Wkb
TwWxC18yRXq1A1pi4mRXgK+lelY1t44C/2zs72y+3YnT/vh80AXky010tAUoMpws
AWO0wF158l1UweElnbZPSmLOVN7vRU2JQ21qCPFy00zMZz85+uaZSLZEJxU9Pqwn
P3gnPQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 22:21:33 2023 by rpki-client on console-fra.rpki-client.org