Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fbfd274c-4240-49f5-97fc-0691a7968e63/7f45540396e9a0fb3cf73ec6673e96f0b7eededa.roa
File:                     7f45540396e9a0fb3cf73ec6673e96f0b7eededa.roa (raw, json)
Hash identifier:          b1WyprUZ4yslIlN3QAm/jvZGpU+aGqTwcRNZfHHF1hw=
Subject key identifier:   EC:04:1F:F3:96:E1:52:79:D2:03:D6:D7:07:80:DE:52:5A:D3:D7:29
Certificate issuer:       /CN=916dc4971b2eb6e54e3aede8f95dbd507bde921b
Certificate serial:       0A33B6
Authority key identifier: 65:CD:F0:35:9B:09:96:A9:65:7A:30:44:B9:87:D0:30:A9:E0:87:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/916dc4971b2eb6e54e3aede8f95dbd507bde921b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fbfd274c-4240-49f5-97fc-0691a7968e63/7f45540396e9a0fb3cf73ec6673e96f0b7eededa.roa
Signing time:             Wed 24 Mar 2021 14:46:34 +0000
ROA not before:           Wed 24 Mar 2021 14:46:33 +0000
ROA not after:            Tue 24 Mar 2026 14:46:33 +0000
asID:                     264637
IP address blocks:        45.187.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/fbfd274c-4240-49f5-97fc-0691a7968e63/916dc4971b2eb6e54e3aede8f95dbd507bde921b.crl
                          rsync://repository.lacnic.net/rpki/lacnic/fbfd274c-4240-49f5-97fc-0691a7968e63/916dc4971b2eb6e54e3aede8f95dbd507bde921b.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/916dc4971b2eb6e54e3aede8f95dbd507bde921b.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 03:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 668598 (0xa33b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916dc4971b2eb6e54e3aede8f95dbd507bde921b
        Validity
            Not Before: Mar 24 14:46:33 2021 GMT
            Not After : Mar 24 14:46:33 2026 GMT
        Subject: CN=7f45540396e9a0fb3cf73ec6673e96f0b7eededa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:35:c3:ac:49:41:83:bc:aa:13:85:0b:0b:07:
                    a1:dd:e4:06:27:3e:ae:3e:d4:40:fc:44:ab:16:fb:
                    50:c2:54:17:c3:ac:39:d2:04:04:98:15:da:7f:5c:
                    4b:05:36:3f:32:80:f6:c6:30:d1:73:78:bd:a1:6d:
                    6a:a6:cd:84:2d:1e:32:f6:c1:c9:38:c4:09:1f:de:
                    15:a8:99:50:f5:4e:ed:ba:c3:b0:5d:7d:6c:4c:06:
                    6f:d2:3e:22:db:54:76:9e:01:75:74:b1:db:d5:db:
                    3c:9b:b2:c1:0b:59:92:95:3e:16:7b:08:bd:3c:e0:
                    7d:05:8c:4a:0b:70:38:63:14:a2:aa:1d:15:bf:f5:
                    df:50:33:bf:a4:2c:82:fd:58:74:ec:b1:04:b9:7a:
                    b6:a5:db:05:27:21:e6:c7:31:cc:bd:7a:99:a8:69:
                    c0:af:76:1a:33:e0:1a:87:90:3e:b9:17:4b:ce:1c:
                    95:d4:b7:9a:95:4c:e4:cf:8d:1c:7f:50:8c:6b:c2:
                    12:fd:a7:04:e9:b8:5e:68:7a:f0:bc:80:a4:06:9b:
                    f6:c7:6e:cf:5b:ee:c2:5a:64:6e:17:6a:c9:8e:03:
                    ff:69:e8:ef:31:a5:a3:a3:ef:8a:97:6b:03:f5:55:
                    31:35:ca:84:38:07:40:9e:7b:8d:f5:aa:06:a3:0e:
                    b5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:04:1F:F3:96:E1:52:79:D2:03:D6:D7:07:80:DE:52:5A:D3:D7:29
            X509v3 Authority Key Identifier:
                keyid:65:CD:F0:35:9B:09:96:A9:65:7A:30:44:B9:87:D0:30:A9:E0:87:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/916dc4971b2eb6e54e3aede8f95dbd507bde921b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fbfd274c-4240-49f5-97fc-0691a7968e63/7f45540396e9a0fb3cf73ec6673e96f0b7eededa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fbfd274c-4240-49f5-97fc-0691a7968e63/916dc4971b2eb6e54e3aede8f95dbd507bde921b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:a6:77:7d:40:26:7b:45:68:b0:50:0d:74:aa:8c:85:ca:e0:
         96:1a:e3:f2:54:30:2e:43:1c:37:07:c7:8c:5f:15:63:ba:05:
         02:aa:63:14:93:16:3f:57:38:36:3b:3b:b2:80:65:60:c5:25:
         ef:54:33:ce:e5:e0:f6:00:0c:93:84:98:00:4a:1c:ce:77:2d:
         46:f0:46:6f:6d:e1:31:d7:2d:3b:7c:53:b5:43:3e:ba:20:46:
         37:32:20:8c:bf:a9:26:99:a7:1e:92:de:e6:3b:1e:25:6d:a7:
         4d:6b:21:ae:fb:f4:dd:6d:24:5d:ad:3c:85:8f:9a:39:f3:9f:
         c4:59:b7:ba:56:64:43:56:39:02:f9:d8:78:76:8d:0b:36:eb:
         ec:9f:87:23:d7:84:19:7a:fb:44:48:b6:ac:33:f5:5c:f5:eb:
         47:56:3a:2e:07:e9:84:8b:84:db:3f:87:91:77:76:a2:57:8e:
         4f:fc:ac:f6:15:59:09:ec:b7:51:44:34:40:dc:a6:61:cf:7e:
         97:45:97:40:d5:c6:b8:56:3f:ff:2e:b4:48:71:f9:b3:6b:a2:
         9c:6d:18:a4:24:f4:99:36:c9:ef:35:c1:89:ad:a7:bd:dc:46:
         08:c5:1c:33:b4:8c:2f:d6:ad:0a:8e:28:ff:8c:37:0a:ab:7e:
         cd:5f:9d:c8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCjO2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkx
NmRjNDk3MWIyZWI2ZTU0ZTNhZWRlOGY5NWRiZDUwN2JkZTkyMWIwHhcNMjEwMzI0
MTQ0NjMzWhcNMjYwMzI0MTQ0NjMzWjAzMTEwLwYDVQQDEyg3ZjQ1NTQwMzk2ZTlh
MGZiM2NmNzNlYzY2NzNlOTZmMGI3ZWVkZWRhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4jXDrElBg7yqE4ULCweh3eQGJz6uPtRA/ESrFvtQwlQXw6w5
0gQEmBXaf1xLBTY/MoD2xjDRc3i9oW1qps2ELR4y9sHJOMQJH94VqJlQ9U7tusOw
XX1sTAZv0j4i21R2ngF1dLHb1ds8m7LBC1mSlT4Wewi9POB9BYxKC3A4YxSiqh0V
v/XfUDO/pCyC/Vh07LEEuXq2pdsFJyHmxzHMvXqZqGnAr3YaM+Aah5A+uRdLzhyV
1LealUzkz40cf1CMa8IS/acE6bheaHrwvICkBpv2x27PW+7CWmRuF2rJjgP/aejv
MaWjo++Kl2sD9VUxNcqEOAdAnnuN9aoGow61DwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOwEH/OW4VJ50gPW1weA3lJa09cpMB8GA1UdIwQYMBaAFGXN8DWbCZapZXow
RLmH0DCp4IfSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTE2ZGM0
OTcxYjJlYjZlNTRlM2FlZGU4Zjk1ZGJkNTA3YmRlOTIxYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmJmZDI3NGMtNDI0MC00OWY1LTk3ZmMtMDY5MWE3
OTY4ZTYzLzdmNDU1NDAzOTZlOWEwZmIzY2Y3M2VjNjY3M2U5NmYwYjdlZWRlZGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mYmZkMjc0Yy00MjQwLTQ5ZjUtOTdmYy0wNjkx
YTc5NjhlNjMvOTE2ZGM0OTcxYjJlYjZlNTRlM2FlZGU4Zjk1ZGJkNTA3YmRlOTIx
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC270zANBgkqhkiG9w0BAQsFAAOCAQEAPqZ3fUAme0VosFAN
dKqMhcrglhrj8lQwLkMcNwfHjF8VY7oFAqpjFJMWP1c4Njs7soBlYMUl71QzzuXg
9gAMk4SYAEocznctRvBGb23hMdctO3xTtUM+uiBGNzIgjL+pJpmnHpLe5jseJW2n
TWshrvv03W0kXa08hY+aOfOfxFm3ulZkQ1Y5AvnYeHaNCzbr7J+HI9eEGXr7REi2
rDP1XPXrR1Y6LgfphIuE2z+HkXd2oleOT/ys9hVZCey3UUQ0QNymYc9+l0WXQNXG
uFY//y60SHH5s2uinG0YpCT0mTbJ7zXBia2nvdxGCMUcM7SML9atCo4o/4w3Cqt+
zV+dyA==
-----END CERTIFICATE-----
Generated at Thu Mar 28 08:36:11 2024 by rpki-client on console-fra.rpki-client.org