Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e100e7fa-4f97-4f7e-966d-9cf60cf89b38/de115846bc3b84990559f6b6d28464c8336acb63.roa
File:                     de115846bc3b84990559f6b6d28464c8336acb63.roa (raw, json)
Hash identifier:          SaubiSe/Dsr6/9MZcYw104AYSUY4R4gU9pOe4hx+k1o=
Subject key identifier:   69:DC:53:9A:4A:4E:84:6B:AC:A9:80:FF:1C:B1:6B:8C:26:6B:58:0B
Certificate issuer:       /CN=addc265893644938b54a21e410f7b22c5aeab890
Certificate serial:       0B1795
Authority key identifier: 06:3D:B0:64:CC:63:CE:97:AF:B5:F0:3B:B6:DF:C9:FE:95:E2:38:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/addc265893644938b54a21e410f7b22c5aeab890.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e100e7fa-4f97-4f7e-966d-9cf60cf89b38/de115846bc3b84990559f6b6d28464c8336acb63.roa
Signing time:             Tue 03 Oct 2023 01:41:42 +0000
ROA not before:           Mon 02 Oct 2023 01:41:42 +0000
ROA not after:            Fri 03 Oct 2025 02:41:42 +0000
asID:                     266884
IP address blocks:        45.160.200.0/22 maxlen: 22
                          45.160.200.0/24 maxlen: 24
                          45.160.201.0/24 maxlen: 24
                          45.160.202.0/24 maxlen: 24
                          45.160.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/e100e7fa-4f97-4f7e-966d-9cf60cf89b38/addc265893644938b54a21e410f7b22c5aeab890.crl
                          rsync://repository.lacnic.net/rpki/lacnic/e100e7fa-4f97-4f7e-966d-9cf60cf89b38/addc265893644938b54a21e410f7b22c5aeab890.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/addc265893644938b54a21e410f7b22c5aeab890.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Feb 2024 21:42:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 726933 (0xb1795)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=addc265893644938b54a21e410f7b22c5aeab890
        Validity
            Not Before: Oct  2 01:41:42 2023 GMT
            Not After : Oct  3 02:41:42 2025 GMT
        Subject: CN=de115846bc3b84990559f6b6d28464c8336acb63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3f:ce:f7:bc:d5:bc:1c:24:ca:ed:ae:c9:e6:
                    7f:02:53:66:cd:fc:f1:b0:b9:c6:31:0d:5d:4f:7a:
                    0b:0c:e1:03:5a:f5:d8:bf:a0:e4:d3:97:4b:d9:b4:
                    76:24:e9:b0:be:d4:85:5f:c5:69:d0:0b:83:50:5a:
                    7b:19:2b:e7:68:39:ac:db:43:d7:a3:00:b7:c2:14:
                    52:46:ff:ea:ef:03:50:f0:8d:92:92:4e:c4:3e:fd:
                    8a:00:61:f1:dc:56:ad:1b:c9:0b:58:ee:90:b1:0f:
                    ac:19:11:0d:f3:80:44:ca:58:cc:9a:a3:90:a3:78:
                    a7:aa:bb:3c:1f:6a:42:2c:95:78:c0:c2:04:6b:e7:
                    b9:91:f3:73:fd:41:c2:a2:2d:63:be:57:dd:d8:99:
                    e2:06:14:1a:7f:45:db:be:00:1e:a5:fe:da:69:fc:
                    6b:fa:65:00:27:38:d2:88:09:3a:c8:bc:ee:fc:be:
                    88:af:d1:f4:2b:d3:25:8e:81:ec:e1:68:19:e6:e7:
                    96:fb:ad:e9:e5:4b:3e:98:c2:6d:3a:ab:ef:18:a9:
                    ed:a0:31:d7:fc:a1:2f:12:27:9e:f6:d8:8c:c6:09:
                    9d:61:43:37:0f:28:7c:4e:b5:36:4f:55:b7:06:ce:
                    c4:95:f1:37:f2:3d:b2:71:e6:ef:ca:f6:c9:6d:99:
                    6b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DC:53:9A:4A:4E:84:6B:AC:A9:80:FF:1C:B1:6B:8C:26:6B:58:0B
            X509v3 Authority Key Identifier:
                keyid:06:3D:B0:64:CC:63:CE:97:AF:B5:F0:3B:B6:DF:C9:FE:95:E2:38:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/addc265893644938b54a21e410f7b22c5aeab890.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e100e7fa-4f97-4f7e-966d-9cf60cf89b38/de115846bc3b84990559f6b6d28464c8336acb63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e100e7fa-4f97-4f7e-966d-9cf60cf89b38/addc265893644938b54a21e410f7b22c5aeab890.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:8a:27:4e:fa:5b:da:23:e6:07:c0:02:4f:72:33:f6:48:01:
         70:c7:a8:3e:63:fe:9a:64:16:21:33:5a:ef:08:f0:5e:b0:5e:
         94:1c:98:90:97:82:f3:ea:89:1b:4d:e0:f7:6c:ee:0c:62:7f:
         52:74:46:17:73:7b:a2:f4:60:62:0b:d5:5a:f9:35:05:df:e6:
         5b:6b:1c:80:65:1c:b0:a5:2f:54:5b:07:bd:8b:c0:e9:50:a4:
         c0:84:57:fb:c4:02:b8:4e:fa:34:64:1e:7e:5e:1b:d7:7b:23:
         24:0c:25:28:91:70:06:95:32:ac:16:34:30:dd:66:c8:ef:a5:
         aa:1a:ea:3a:dc:19:85:b1:cc:06:37:78:94:f9:2a:6a:ef:24:
         d4:95:e5:6a:11:8a:e4:07:3a:69:ac:cc:3b:33:79:1a:15:6d:
         52:e9:8a:d9:0f:ec:64:b1:c9:05:b7:cd:b9:bb:66:1a:2c:0c:
         40:27:f4:cd:e5:23:38:1e:38:92:f3:65:4d:53:b4:be:91:bd:
         95:68:82:49:9b:d2:27:a9:f8:d1:72:6d:73:ce:a3:a1:9f:db:
         70:4e:af:ad:80:7f:6d:9e:c7:5a:6f:e2:05:71:b5:80:32:8a:
         26:fe:b3:5a:01:21:74:43:5b:42:dc:ee:9b:b3:6f:22:4e:3d:
         c8:31:13:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 25 03:13:32 2024 by rpki-client on console-fra.rpki-client.org