Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f0db25fe-5ae9-4102-8def-52788714a792/6ff94a4d3baf293375ab1eb60e215299b7ef835c.roa
File:                     6ff94a4d3baf293375ab1eb60e215299b7ef835c.roa (raw, json)
Hash identifier:          ZCc82M9Z52M6QpXxVilqCpS+u17BffuCnLMwesIExQA=
Subject key identifier:   49:11:C2:9E:31:8D:75:B1:00:A3:BB:0A:09:BF:F3:A4:2B:E7:90:9F
Certificate issuer:       /CN=22c5e4e4d526c6f8e1a2e5ba8feeb0b50daa111e
Certificate serial:       0CE3A5
Authority key identifier: F4:7C:3F:47:EE:43:14:77:57:45:DF:04:67:B1:C5:D5:33:42:10:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22c5e4e4d526c6f8e1a2e5ba8feeb0b50daa111e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f0db25fe-5ae9-4102-8def-52788714a792/6ff94a4d3baf293375ab1eb60e215299b7ef835c.roa
Signing time:             Wed 24 Mar 2021 14:36:16 +0000
ROA not before:           Wed 24 Mar 2021 14:36:16 +0000
ROA not after:            Tue 24 Mar 2026 14:36:16 +0000
asID:                     3549
IP address blocks:        181.224.160.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/f0db25fe-5ae9-4102-8def-52788714a792/22c5e4e4d526c6f8e1a2e5ba8feeb0b50daa111e.crl
                          rsync://repository.lacnic.net/rpki/lacnic/f0db25fe-5ae9-4102-8def-52788714a792/22c5e4e4d526c6f8e1a2e5ba8feeb0b50daa111e.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22c5e4e4d526c6f8e1a2e5ba8feeb0b50daa111e.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 844709 (0xce3a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c5e4e4d526c6f8e1a2e5ba8feeb0b50daa111e
        Validity
            Not Before: Mar 24 14:36:16 2021 GMT
            Not After : Mar 24 14:36:16 2026 GMT
        Subject: CN=6ff94a4d3baf293375ab1eb60e215299b7ef835c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cb:1b:c9:b4:03:fe:8c:12:06:a2:91:b8:b5:
                    54:ff:02:18:8e:63:9c:8f:29:c7:56:20:12:96:9e:
                    37:5e:28:5e:6c:25:d5:f4:4a:46:46:c1:e7:88:6b:
                    30:f3:87:d2:c4:5d:6a:90:eb:9f:a0:2e:e7:ac:7d:
                    65:56:8b:2b:aa:c7:d8:a0:49:16:34:47:7a:97:64:
                    eb:c2:89:2e:a1:01:65:78:ef:6a:12:82:e6:98:e4:
                    36:8c:fd:90:be:c2:fe:ed:d5:a1:9b:1f:a8:67:3d:
                    9f:06:0d:56:71:e3:00:1c:da:47:4b:d6:2d:09:ec:
                    83:23:bd:46:6e:61:e7:52:a0:fc:f2:6b:2c:ce:0d:
                    09:05:56:7a:32:ef:e3:a0:c0:74:33:04:2e:b2:b0:
                    aa:66:21:be:77:45:24:65:3a:23:15:be:ec:4a:0b:
                    91:8b:ed:e2:0f:a0:42:79:5a:6b:f5:92:80:3a:0d:
                    ce:45:ef:fa:ad:13:ed:1d:1f:80:37:27:bf:e8:b9:
                    11:42:c0:03:05:e2:69:69:ed:86:de:34:78:42:a0:
                    c6:2a:d9:8c:24:17:dd:74:e4:b2:5e:3f:a1:0d:c3:
                    ee:e6:26:11:56:c2:13:44:da:c8:aa:86:a9:00:ab:
                    d3:70:be:ea:9b:5b:04:7b:a6:af:75:75:70:3c:66:
                    4c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:11:C2:9E:31:8D:75:B1:00:A3:BB:0A:09:BF:F3:A4:2B:E7:90:9F
            X509v3 Authority Key Identifier:
                keyid:F4:7C:3F:47:EE:43:14:77:57:45:DF:04:67:B1:C5:D5:33:42:10:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22c5e4e4d526c6f8e1a2e5ba8feeb0b50daa111e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f0db25fe-5ae9-4102-8def-52788714a792/6ff94a4d3baf293375ab1eb60e215299b7ef835c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f0db25fe-5ae9-4102-8def-52788714a792/22c5e4e4d526c6f8e1a2e5ba8feeb0b50daa111e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:6c:5e:66:8b:1d:d7:d1:dc:80:f2:73:c0:84:19:ac:f2:5b:
         a8:78:63:51:82:c5:75:e0:c4:6d:9a:8c:ec:1b:e7:59:e7:4e:
         80:d9:20:e1:ad:8f:6a:cd:de:22:84:45:43:6e:e4:55:e0:3e:
         be:9b:4a:93:40:a7:90:52:e2:fb:69:b3:dd:a5:fa:6c:ab:4c:
         37:16:d0:01:47:a0:bd:b5:38:39:d1:17:4b:10:0f:ef:09:e9:
         d7:ab:33:42:dd:de:d7:69:c2:39:cb:5c:4e:f9:ed:cc:05:fe:
         93:3a:61:8e:fd:ce:f9:09:60:e0:ac:3f:c0:21:66:7d:67:b2:
         a0:79:f9:b3:51:bc:5f:72:95:8b:f6:03:4e:8b:e1:cd:b6:4c:
         51:7b:9d:88:a6:d1:56:49:29:18:60:f1:af:c0:1f:72:bd:94:
         4b:39:01:25:79:67:0c:d0:39:96:e9:93:e4:7e:cb:d5:f0:34:
         7e:f3:8b:ff:87:3c:df:57:4c:dd:53:d5:d7:f3:03:2b:d0:97:
         c5:e3:cc:e4:6a:ae:e1:d0:d3:2b:2b:4c:fd:43:c3:d6:e4:f1:
         14:71:4a:f6:8b:f7:c7:69:4a:67:ab:47:88:3e:56:ad:47:9a:
         b4:4d:3d:2e:c4:bd:f8:78:52:01:8c:0a:2d:51:92:ca:79:e6:
         ba:88:5a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 22:20:33 2024 by rpki-client on console-fra.rpki-client.org