Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e292cf36-d052-443b-ac4b-7b4ba73bc218/e82e58916b7574bf062fe94cdc3a54ef63adfe50.roa
File:                     e82e58916b7574bf062fe94cdc3a54ef63adfe50.roa (raw, json)
Hash identifier:          LGi9CvbEB8DC2I7lZyS/mg0XV9BldpLNpuXQz3DLFLk=
Subject key identifier:   80:AF:C7:06:91:74:91:2E:41:FE:64:F7:33:3D:02:73:56:50:D1:46
Certificate issuer:       /CN=8174f9e0234527f23fb0bcfd7cea896897ec3191
Certificate serial:       0C7CB1
Authority key identifier: FD:9C:B9:83:74:37:2D:36:5A:88:25:24:4D:C8:2A:CE:E1:EE:26:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8174f9e0234527f23fb0bcfd7cea896897ec3191.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e292cf36-d052-443b-ac4b-7b4ba73bc218/e82e58916b7574bf062fe94cdc3a54ef63adfe50.roa
Signing time:             Tue 27 Jun 2023 14:29:52 +0000
ROA not before:           Mon 26 Jun 2023 14:29:52 +0000
ROA not after:            Fri 27 Jun 2025 14:29:52 +0000
asID:                     27754
IP address blocks:        200.47.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/e292cf36-d052-443b-ac4b-7b4ba73bc218/8174f9e0234527f23fb0bcfd7cea896897ec3191.crl
                          rsync://repository.lacnic.net/rpki/lacnic/e292cf36-d052-443b-ac4b-7b4ba73bc218/8174f9e0234527f23fb0bcfd7cea896897ec3191.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8174f9e0234527f23fb0bcfd7cea896897ec3191.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Feb 2024 21:42:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 818353 (0xc7cb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8174f9e0234527f23fb0bcfd7cea896897ec3191
        Validity
            Not Before: Jun 26 14:29:52 2023 GMT
            Not After : Jun 27 14:29:52 2025 GMT
        Subject: CN=e82e58916b7574bf062fe94cdc3a54ef63adfe50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2a:1b:8e:ce:90:79:88:e1:5d:70:67:7b:59:
                    da:c7:28:4d:c4:00:71:4c:5f:02:d1:90:e1:ad:e8:
                    d1:eb:e1:f4:41:de:7e:50:64:1b:f0:bd:96:2d:b9:
                    57:05:f1:84:4a:a9:ba:36:8b:ce:6b:06:ab:fc:42:
                    ea:09:fa:81:01:a3:6b:f8:fd:13:1e:5e:75:d2:ef:
                    fd:2d:2b:be:84:33:f2:0e:aa:5e:58:5b:a9:c5:7f:
                    4f:07:45:20:1b:83:ce:1f:8e:99:20:35:64:fb:22:
                    a2:c4:6f:12:b1:24:b3:86:f3:51:5d:a1:90:1d:8d:
                    78:62:e8:dc:7b:29:cd:13:1b:9f:c3:09:04:bf:b6:
                    77:37:5a:85:4e:38:30:51:9c:90:aa:4e:fe:b2:0a:
                    6a:10:7a:63:7f:ef:9c:e3:79:6d:b2:12:3a:7b:9e:
                    f9:35:96:42:3f:1c:73:2e:4f:ac:be:21:3b:dd:ad:
                    d0:66:13:e5:a2:8c:b8:ae:fe:05:1c:08:1e:bd:e2:
                    49:7b:c9:f1:57:5c:27:4f:ad:7f:18:41:4e:ea:e7:
                    f1:0d:aa:23:24:f5:34:14:ca:02:31:c2:ee:02:b1:
                    62:2e:6f:79:52:82:b5:23:d1:7e:e5:39:88:a0:aa:
                    82:05:24:d5:03:05:a1:5b:2a:fd:2f:c7:c6:c1:9f:
                    4b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AF:C7:06:91:74:91:2E:41:FE:64:F7:33:3D:02:73:56:50:D1:46
            X509v3 Authority Key Identifier:
                keyid:FD:9C:B9:83:74:37:2D:36:5A:88:25:24:4D:C8:2A:CE:E1:EE:26:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8174f9e0234527f23fb0bcfd7cea896897ec3191.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e292cf36-d052-443b-ac4b-7b4ba73bc218/e82e58916b7574bf062fe94cdc3a54ef63adfe50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e292cf36-d052-443b-ac4b-7b4ba73bc218/8174f9e0234527f23fb0bcfd7cea896897ec3191.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.47.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:3e:9b:57:3e:86:9b:63:bf:b8:f8:c2:ab:d1:16:5e:e0:e5:
         88:78:c9:a7:ac:2c:b6:a4:21:08:ba:30:e8:77:d9:d9:7c:fa:
         bc:98:53:44:e7:6e:e4:89:a8:09:65:42:ac:65:3c:ce:12:45:
         d9:bd:5d:3b:75:af:d6:60:10:81:eb:1f:9e:5b:54:e7:8b:75:
         c9:85:ae:9e:50:b8:a4:4d:77:e6:ad:f4:91:03:27:6f:6e:74:
         26:06:fa:e9:03:29:e6:68:98:63:b5:9c:52:fc:e5:64:73:fe:
         1f:bf:68:42:6a:59:11:9b:9d:1e:fc:06:04:69:96:16:b2:c9:
         42:43:03:28:64:cb:61:1d:d7:8f:81:44:48:13:82:4d:56:e2:
         46:bb:ff:dd:51:f0:eb:6e:79:38:28:c2:82:09:df:85:90:75:
         ae:2e:51:6d:9f:70:d8:90:5f:fc:2e:10:9f:d8:4c:3d:aa:68:
         05:68:03:4e:1d:53:3c:c2:c2:21:1f:6b:76:82:2a:c1:14:f6:
         31:bc:c4:87:30:56:fe:0e:df:4d:fe:e4:2b:54:fb:4c:d1:f8:
         e2:76:22:6b:82:7e:24:f4:9b:01:b2:8a:90:a2:1e:23:c9:6e:
         51:2d:8c:8f:d6:a3:74:a1:33:e1:13:c2:d8:e4:db:a5:78:12:
         b0:fd:9b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 25 02:19:07 2024 by rpki-client on console-fra.rpki-client.org