Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed0559f7-9630-4165-aa7a-9034c44f0cad/60050059e89f0aab9bb36878073f79d66d343697.roa
File:                     60050059e89f0aab9bb36878073f79d66d343697.roa (raw, json)
Hash identifier:          sDgWstuNgbcwptdLlxa4tKJG5m14EWNRGRoZI+LhLeM=
Subject key identifier:   75:3B:BA:22:2E:01:A0:A9:DB:DA:5A:46:27:DB:EF:6D:D9:48:99:EC
Certificate issuer:       /CN=c9ba85997812752657dcc794aa26d9b349abd57a
Certificate serial:       0938
Authority key identifier: 12:DA:E3:FE:7E:3F:34:FF:D6:20:82:B1:FE:51:7F:C9:5B:39:39:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c9ba85997812752657dcc794aa26d9b349abd57a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed0559f7-9630-4165-aa7a-9034c44f0cad/60050059e89f0aab9bb36878073f79d66d343697.roa
Signing time:             Wed 27 Oct 2021 12:44:40 +0000
ROA not before:           Wed 27 Oct 2021 03:00:00 +0000
ROA not after:            Tue 27 Oct 2026 03:00:00 +0000
asID:                     266785
IP address blocks:        45.234.228.0/22 maxlen: 24
                          2803:80a0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ed0559f7-9630-4165-aa7a-9034c44f0cad/c9ba85997812752657dcc794aa26d9b349abd57a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ed0559f7-9630-4165-aa7a-9034c44f0cad/c9ba85997812752657dcc794aa26d9b349abd57a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c9ba85997812752657dcc794aa26d9b349abd57a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Apr 2024 05:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2360 (0x938)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9ba85997812752657dcc794aa26d9b349abd57a
        Validity
            Not Before: Oct 27 03:00:00 2021 GMT
            Not After : Oct 27 03:00:00 2026 GMT
        Subject: CN=60050059e89f0aab9bb36878073f79d66d343697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c8:b0:75:da:8f:74:19:fa:19:ab:d4:78:61:
                    c1:2a:3b:97:e5:73:c3:f3:b4:1a:1e:38:29:e4:9a:
                    cd:f1:3c:3a:1f:95:0c:2e:fc:c1:af:32:b4:67:60:
                    74:94:b2:a8:4d:53:07:03:5a:52:54:70:ef:0f:c1:
                    e1:02:b2:d0:88:6d:2f:7a:34:70:30:08:32:ac:38:
                    80:19:72:bb:5d:b2:c6:12:9a:e1:cb:98:b3:2f:9a:
                    c5:35:8d:35:f5:a5:4d:77:47:24:95:63:28:1d:19:
                    ee:b3:9c:03:2e:63:99:89:03:82:2e:6c:c5:f2:28:
                    cf:b0:1b:16:3c:72:bc:ef:1e:49:8a:e0:4a:88:1a:
                    50:a8:d3:0c:b5:8d:e2:91:ff:17:80:18:3e:5f:a0:
                    6d:8f:e9:c6:35:b3:9d:80:b0:d0:65:20:ee:1d:27:
                    74:78:65:9c:89:0f:a6:60:49:60:50:d1:ba:d7:ab:
                    4a:de:fa:8a:6d:2f:d0:5f:00:45:9b:ad:fe:22:3e:
                    56:78:c5:1a:09:78:cb:ca:dc:fc:d9:c1:24:c4:61:
                    07:96:8c:de:45:eb:cd:bc:4d:6d:87:2b:e2:c5:b1:
                    38:3c:f2:bf:e9:00:8e:bc:1e:bb:7a:09:8a:e5:b2:
                    5a:be:d7:47:d7:f7:db:79:d3:6e:34:5c:d9:c9:a0:
                    c0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3B:BA:22:2E:01:A0:A9:DB:DA:5A:46:27:DB:EF:6D:D9:48:99:EC
            X509v3 Authority Key Identifier:
                keyid:12:DA:E3:FE:7E:3F:34:FF:D6:20:82:B1:FE:51:7F:C9:5B:39:39:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c9ba85997812752657dcc794aa26d9b349abd57a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed0559f7-9630-4165-aa7a-9034c44f0cad/60050059e89f0aab9bb36878073f79d66d343697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed0559f7-9630-4165-aa7a-9034c44f0cad/c9ba85997812752657dcc794aa26d9b349abd57a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.228.0/22
                IPv6:
                  2803:80a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:aa:4c:2c:a0:8f:e7:21:47:95:2d:e5:d2:b2:2b:8f:c9:d5:
         49:58:05:f5:c3:f5:7d:b1:00:ff:16:55:00:64:e8:62:14:c8:
         b2:5f:9e:be:53:71:74:88:8b:d4:9f:a9:2a:62:66:9a:4f:4a:
         a5:af:b5:58:44:79:52:68:2c:65:38:09:37:b1:93:8d:74:cb:
         26:12:73:2d:28:79:12:9a:11:3b:0e:40:09:6e:fe:55:da:b8:
         35:19:c0:fb:ae:37:ec:fd:f5:08:c5:35:cf:86:75:fb:99:d7:
         fc:20:64:7b:35:d2:50:4f:6b:e5:76:1c:5c:f2:ad:2e:3f:a6:
         5b:30:c0:15:58:d3:5a:5b:ab:5e:a5:58:1a:9c:b0:07:1a:3a:
         52:85:cf:28:36:a1:fe:01:0c:43:d9:7a:64:73:5d:75:2a:69:
         3f:1e:e2:be:7f:e5:ae:e1:95:b7:8a:4b:d0:6f:e6:21:89:79:
         12:fa:c2:81:e5:60:3a:4d:7c:1b:93:2b:58:10:7b:65:19:56:
         9a:23:bb:40:17:cf:3c:ad:83:cb:54:ab:34:5e:ec:ac:8b:a1:
         ea:da:51:ab:ec:a3:d8:96:82:90:3e:f2:1b:6c:c0:c0:45:11:
         0c:fa:7e:5b:52:39:02:6d:92:b1:19:8a:69:b8:36:b2:30:6b:
         84:04:80:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 08:39:26 2024 by rpki-client on console-ams.rpki-client.org