Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f1fa2e93-a962-426d-9d01-69e6bf49a50f/18262415fa54a16881f0058bf225e20ad59c1106.roa
File:                     18262415fa54a16881f0058bf225e20ad59c1106.roa (raw, json)
Hash identifier:          NEvGrbm/BFfrnIVWgxzSDj9IyWdluseTTpl2G7SU5Ok=
Subject key identifier:   89:B1:13:86:8B:0A:15:3A:19:AA:86:6D:9E:44:20:30:E9:BF:43:47
Certificate issuer:       /CN=838d7a4980d338c0fda0998cecd06d6224ebf6b4
Certificate serial:       043E93
Authority key identifier: 67:56:6D:06:C5:4F:55:BF:30:77:A7:E3:E6:22:CD:A9:E3:CA:BF:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/838d7a4980d338c0fda0998cecd06d6224ebf6b4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f1fa2e93-a962-426d-9d01-69e6bf49a50f/18262415fa54a16881f0058bf225e20ad59c1106.roa
Signing time:             Wed 24 Mar 2021 14:29:15 +0000
ROA not before:           Wed 24 Mar 2021 14:29:15 +0000
ROA not after:            Tue 24 Mar 2026 14:29:15 +0000
asID:                     270077
IP address blocks:        179.48.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/f1fa2e93-a962-426d-9d01-69e6bf49a50f/838d7a4980d338c0fda0998cecd06d6224ebf6b4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/f1fa2e93-a962-426d-9d01-69e6bf49a50f/838d7a4980d338c0fda0998cecd06d6224ebf6b4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/838d7a4980d338c0fda0998cecd06d6224ebf6b4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Mar 2023 02:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278163 (0x43e93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=838d7a4980d338c0fda0998cecd06d6224ebf6b4
        Validity
            Not Before: Mar 24 14:29:15 2021 GMT
            Not After : Mar 24 14:29:15 2026 GMT
        Subject: CN=18262415fa54a16881f0058bf225e20ad59c1106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e6:fd:83:01:fa:06:0a:50:67:30:80:0e:10:
                    c2:b3:08:99:bc:22:7b:91:bf:3b:64:b2:f1:7a:3a:
                    c7:cd:36:00:4f:0f:5e:02:a1:91:5b:1c:92:91:0e:
                    5f:dc:23:90:ee:6f:70:15:a4:2e:d3:b4:11:2a:f8:
                    cf:7b:e8:f4:0d:0c:45:a0:3a:86:31:9c:fc:ca:50:
                    3e:c5:7c:ab:57:70:54:5c:93:3f:55:7d:97:ac:b7:
                    c8:4b:ec:5e:1a:c5:30:12:a4:cc:47:39:95:08:8e:
                    fe:2b:86:f9:f8:92:86:b4:29:7b:70:7d:b1:6d:01:
                    c0:94:90:68:c3:a4:35:b4:93:ac:86:02:30:83:a1:
                    cc:08:cf:a3:20:de:82:74:a5:46:4f:47:d0:09:3d:
                    b6:eb:ba:d5:ff:a0:ea:78:a3:d8:fc:ea:87:9a:63:
                    e8:df:c2:9f:b1:89:0c:56:bc:ea:31:1d:52:df:2f:
                    0c:49:d8:da:5f:75:7f:fd:1b:40:84:d4:4f:31:fa:
                    76:77:e5:4e:2d:98:a4:be:cb:98:54:a0:89:62:37:
                    ea:f8:c1:5c:68:39:b4:b9:9f:c0:6a:a1:63:78:31:
                    99:36:5e:4e:96:bf:cc:33:39:27:cf:c1:c5:02:8f:
                    11:68:89:bf:35:62:4e:36:86:d5:48:5e:c7:01:8b:
                    34:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                89:B1:13:86:8B:0A:15:3A:19:AA:86:6D:9E:44:20:30:E9:BF:43:47
            X509v3 Authority Key Identifier: 
                keyid:67:56:6D:06:C5:4F:55:BF:30:77:A7:E3:E6:22:CD:A9:E3:CA:BF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/838d7a4980d338c0fda0998cecd06d6224ebf6b4.cer

            Subject Information Access: 
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f1fa2e93-a962-426d-9d01-69e6bf49a50f/18262415fa54a16881f0058bf225e20ad59c1106.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f1fa2e93-a962-426d-9d01-69e6bf49a50f/838d7a4980d338c0fda0998cecd06d6224ebf6b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:c5:cf:64:01:6a:84:3c:1e:4f:6f:f3:19:76:56:2b:ad:a2:
         77:ce:be:26:0e:62:3f:96:a7:cd:82:2a:cc:1b:3f:7a:fd:2d:
         00:1a:ac:11:79:30:98:ee:a5:c1:0f:27:09:18:52:11:92:01:
         b1:c7:61:21:71:61:97:24:09:a6:50:6e:12:06:30:52:97:72:
         31:18:c7:7d:f7:51:51:c6:63:32:3a:ef:88:dc:bd:47:01:18:
         90:e8:4b:f1:69:f3:8b:0f:a6:f4:62:aa:c6:76:63:c1:45:b3:
         49:d9:90:03:3d:e5:a9:b1:9a:c0:8a:c8:91:e5:25:8c:fe:68:
         23:6b:38:e3:b3:e6:37:78:39:ce:37:c7:7e:9d:df:6a:8d:ec:
         44:2d:ae:28:9f:f7:89:aa:47:79:a1:bb:e7:df:df:dd:8c:59:
         81:06:b5:19:ec:59:7c:30:9d:8d:9e:7e:67:71:21:88:ef:ea:
         e6:0b:5b:33:8c:66:1d:f6:c8:9d:42:5a:ce:08:0d:ea:de:e7:
         d0:f7:b4:c6:8a:98:7e:a3:96:e9:f8:50:5b:c2:a0:3c:1d:46:
         63:10:70:2d:53:3b:48:17:b7:db:17:0d:80:ec:87:d3:15:12:
         c7:5f:61:e4:e2:99:6d:f7:d6:e9:8d:f5:a9:5c:41:2d:cc:4d:
         6c:b7:f0:22
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBD6TMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDgz
OGQ3YTQ5ODBkMzM4YzBmZGEwOTk4Y2VjZDA2ZDYyMjRlYmY2YjQwHhcNMjEwMzI0
MTQyOTE1WhcNMjYwMzI0MTQyOTE1WjAzMTEwLwYDVQQDEygxODI2MjQxNWZhNTRh
MTY4ODFmMDA1OGJmMjI1ZTIwYWQ1OWMxMTA2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgeb9gwH6BgpQZzCADhDCswiZvCJ7kb87ZLLxejrHzTYATw9e
AqGRWxySkQ5f3COQ7m9wFaQu07QRKvjPe+j0DQxFoDqGMZz8ylA+xXyrV3BUXJM/
VX2XrLfIS+xeGsUwEqTMRzmVCI7+K4b5+JKGtCl7cH2xbQHAlJBow6Q1tJOshgIw
g6HMCM+jIN6CdKVGT0fQCT2267rV/6DqeKPY/OqHmmPo38KfsYkMVrzqMR1S3y8M
SdjaX3V//RtAhNRPMfp2d+VOLZikvsuYVKCJYjfq+MFcaDm0uZ/AaqFjeDGZNl5O
lr/MMzknz8HFAo8RaIm/NWJONobVSF7HAYs05wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFImxE4aLChU6GaqGbZ5EIDDpv0NHMB8GA1UdIwQYMBaAFGdWbQbFT1W/MHen
4+Yizanjyr9fMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODM4ZDdh
NDk4MGQzMzhjMGZkYTA5OThjZWNkMDZkNjIyNGViZjZiNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjFmYTJlOTMtYTk2Mi00MjZkLTlkMDEtNjllNmJm
NDlhNTBmLzE4MjYyNDE1ZmE1NGExNjg4MWYwMDU4YmYyMjVlMjBhZDU5YzExMDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMWZhMmU5My1hOTYyLTQyNmQtOWQwMS02OWU2
YmY0OWE1MGYvODM4ZDdhNDk4MGQzMzhjMGZkYTA5OThjZWNkMDZkNjIyNGViZjZi
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEArMwjDANBgkqhkiG9w0BAQsFAAOCAQEAYcXPZAFqhDweT2/z
GXZWK62id86+Jg5iP5anzYIqzBs/ev0tABqsEXkwmO6lwQ8nCRhSEZIBscdhIXFh
lyQJplBuEgYwUpdyMRjHffdRUcZjMjrviNy9RwEYkOhL8Wnziw+m9GKqxnZjwUWz
SdmQAz3lqbGawIrIkeUljP5oI2s447PmN3g5zjfHfp3fao3sRC2uKJ/3iapHeaG7
59/f3YxZgQa1GexZfDCdjZ5+Z3EhiO/q5gtbM4xmHfbInUJazggN6t7n0Pe0xoqY
fqOW6fhQW8KgPB1GYxBwLVM7SBe32xcNgOyH0xUSx19h5OKZbffW6Y31qVxBLcxN
bLfwIg==
-----END CERTIFICATE-----
Generated at Wed Mar 15 11:35:24 2023 by rpki-client on console-ams.rpki-client.org