Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ee5acfc9-e56e-464d-8621-b53e63ad0c5e/ee38818e0a61a76db9b8354208fb707fc8b3b3c9.roa
File:                     ee38818e0a61a76db9b8354208fb707fc8b3b3c9.roa (raw, json)
Hash identifier:          ZOb9K471KOzmwkj7NXciEP+uGjG5FAHXI2MO3U0Vf5Y=
Subject key identifier:   8C:30:74:F6:FE:F5:E9:DE:44:25:7D:D4:8E:1A:27:27:0B:B4:02:27
Certificate issuer:       /CN=e6713d1a769f8d56ff7a6a1f360adfa08db3e3ba
Certificate serial:       065099
Authority key identifier: F3:DC:12:CD:8D:C8:69:8E:B0:89:77:42:7B:6C:08:56:F3:A5:27:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6713d1a769f8d56ff7a6a1f360adfa08db3e3ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ee5acfc9-e56e-464d-8621-b53e63ad0c5e/ee38818e0a61a76db9b8354208fb707fc8b3b3c9.roa
Signing time:             Mon 24 Apr 2023 18:04:33 +0000
ROA not before:           Sun 23 Apr 2023 18:04:33 +0000
ROA not after:            Thu 24 Apr 2025 18:04:33 +0000
asID:                     272806
IP address blocks:        45.68.29.0/24 maxlen: 24
                          45.68.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ee5acfc9-e56e-464d-8621-b53e63ad0c5e/e6713d1a769f8d56ff7a6a1f360adfa08db3e3ba.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ee5acfc9-e56e-464d-8621-b53e63ad0c5e/e6713d1a769f8d56ff7a6a1f360adfa08db3e3ba.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6713d1a769f8d56ff7a6a1f360adfa08db3e3ba.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Feb 2024 20:21:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413849 (0x65099)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6713d1a769f8d56ff7a6a1f360adfa08db3e3ba
        Validity
            Not Before: Apr 23 18:04:33 2023 GMT
            Not After : Apr 24 18:04:33 2025 GMT
        Subject: CN=ee38818e0a61a76db9b8354208fb707fc8b3b3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:20:0d:f4:7d:7c:24:ae:56:c6:d5:e6:47:d5:
                    ef:09:55:4e:20:2f:1f:c3:dd:0b:80:4b:15:6e:6e:
                    c0:ad:17:40:61:ca:9b:6e:c9:a7:6c:24:8f:0f:e8:
                    0a:fb:5d:29:5f:43:93:96:c3:49:ea:50:f0:28:26:
                    49:ea:0a:72:d1:2e:dd:65:7e:ba:e0:63:81:af:0f:
                    e8:4c:91:89:b0:6f:df:8a:c3:28:64:96:35:fc:b6:
                    4a:99:ea:93:6d:00:97:90:7f:da:23:3d:77:1b:99:
                    d0:eb:81:1a:1a:3d:e4:f9:07:0b:41:50:47:9b:88:
                    a0:68:6c:5a:c8:ac:96:f5:b4:08:ba:75:83:d0:e0:
                    00:ec:ad:a9:69:93:96:18:9d:74:fd:b1:a3:6c:12:
                    bd:0e:fa:b9:b5:07:98:c9:2f:78:e7:43:77:28:23:
                    50:24:0c:5b:94:8b:07:91:4a:2a:a2:bd:c3:19:35:
                    dc:d9:58:71:b2:25:01:d6:29:16:f5:54:df:f3:c5:
                    4a:a6:26:e1:62:9d:84:8a:a1:dc:72:0e:02:6e:9f:
                    ea:4d:bf:44:14:1a:b7:e8:71:6f:0a:ed:8d:ac:8f:
                    2f:05:6d:aa:95:35:1b:95:57:33:47:3a:4b:93:d5:
                    e8:42:0c:f9:b8:90:50:6c:e1:9c:97:d7:cc:1b:45:
                    7d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:30:74:F6:FE:F5:E9:DE:44:25:7D:D4:8E:1A:27:27:0B:B4:02:27
            X509v3 Authority Key Identifier:
                keyid:F3:DC:12:CD:8D:C8:69:8E:B0:89:77:42:7B:6C:08:56:F3:A5:27:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6713d1a769f8d56ff7a6a1f360adfa08db3e3ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ee5acfc9-e56e-464d-8621-b53e63ad0c5e/ee38818e0a61a76db9b8354208fb707fc8b3b3c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ee5acfc9-e56e-464d-8621-b53e63ad0c5e/e6713d1a769f8d56ff7a6a1f360adfa08db3e3ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.29.0/24
                  45.68.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:37:e8:aa:2f:59:94:90:38:5e:ce:a2:34:b4:10:a8:e9:14:
         b4:36:8f:19:28:9b:20:6e:77:93:71:96:2a:73:65:fe:d4:b2:
         5f:c4:60:36:df:ae:29:02:a4:bb:84:70:89:e0:86:a1:70:5b:
         56:18:a9:79:0d:6e:7c:f2:ef:86:a0:7d:d4:af:f2:c9:f7:71:
         96:2f:c6:df:42:04:10:5b:3e:aa:ba:95:7c:e7:2c:4b:5b:24:
         b2:5f:71:90:74:ac:bb:a5:60:99:7c:4c:9a:12:ad:da:be:d6:
         79:09:f4:f3:86:fd:7a:f5:0c:79:0d:b3:9f:fb:fb:e6:f4:8f:
         6c:16:4c:a3:b4:66:95:45:5d:84:6b:65:1e:bf:fc:13:d3:43:
         a4:5a:20:e5:fc:32:aa:08:d3:90:25:3c:03:d9:3f:14:46:d0:
         e3:4e:27:b3:95:c5:6e:b1:11:1e:11:43:d6:41:3d:d3:52:f9:
         38:5f:f7:e1:89:ff:ff:2e:8e:54:e4:50:52:b8:b7:26:a8:54:
         b1:7c:92:09:d1:34:11:8a:1e:cd:a8:77:f6:2c:13:21:77:68:
         07:03:4e:3c:52:64:b3:58:f3:d0:27:ef:b4:98:2c:6d:6d:42:
         fb:d0:1a:b4:43:38:c1:86:31:16:1e:75:35:ce:31:6f:55:45:
         1f:19:48:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 05:06:49 2024 by rpki-client on console-ams.rpki-client.org