Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/3230312e3232322e34342e302f32322d3234203d3e20323731373833.roa
File:                     3230312e3232322e34342e302f32322d3234203d3e20323731373833.roa (raw, json)
Hash identifier:          cgFYAyknPlXoXn4t078HubLX8H9sgttopRZvBABXFrA=
Subject key identifier:   28:F8:A3:83:3D:66:45:2E:43:68:7F:CE:5E:06:4D:18:2A:88:36:2A
Certificate issuer:       /CN=C3D02995E170CE622F60579EB13D9DD037B46A52
Certificate serial:       5FEA12CD653B8D35EB8A09931DEC3E71BB3556C9
Authority key identifier: C3:D0:29:95:E1:70:CE:62:2F:60:57:9E:B1:3D:9D:D0:37:B4:6A:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3D02995E170CE622F60579EB13D9DD037B46A52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/3230312e3232322e34342e302f32322d3234203d3e20323731373833.roa
Signing time:             Tue 05 Mar 2024 17:47:55 +0000
ROA not before:           Tue 05 Mar 2024 17:42:55 +0000
ROA not after:            Tue 04 Mar 2025 17:47:55 +0000
asID:                     271783
IP address blocks:        201.222.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/C3D02995E170CE622F60579EB13D9DD037B46A52.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/C3D02995E170CE622F60579EB13D9DD037B46A52.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3D02995E170CE622F60579EB13D9DD037B46A52.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 26 May 2024 01:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ea:12:cd:65:3b:8d:35:eb:8a:09:93:1d:ec:3e:71:bb:35:56:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3D02995E170CE622F60579EB13D9DD037B46A52
        Validity
            Not Before: Mar  5 17:42:55 2024 GMT
            Not After : Mar  4 17:47:55 2025 GMT
        Subject: CN=28F8A3833D66452E43687FCE5E064D182A88362A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0a:f0:c2:bd:82:a4:0f:60:2b:89:56:d4:39:
                    99:8a:95:80:16:4f:61:ee:31:87:c9:60:42:2f:34:
                    11:d3:54:78:ea:0c:dc:78:86:77:ad:14:34:2e:f1:
                    2b:84:33:6f:c1:db:e9:27:11:6f:e7:9f:b9:d1:a2:
                    48:32:40:a4:90:2a:88:e4:51:36:7c:2a:c2:61:da:
                    4a:8f:b8:d2:ad:f2:2f:05:b0:0f:33:8f:1b:cd:d7:
                    e4:7c:c2:53:42:33:f9:b3:be:bd:e1:b1:b7:2e:36:
                    ed:83:d5:90:0f:aa:17:e8:bd:40:10:7f:70:c2:eb:
                    27:9f:82:3c:8a:d5:9d:f8:0c:21:05:e3:61:08:78:
                    6e:5b:23:c4:1f:24:a8:3c:37:ee:d5:4c:93:39:35:
                    08:e8:62:46:f7:f8:0c:25:23:3f:36:b3:cc:dd:65:
                    a5:f2:c9:aa:b9:22:8f:38:8b:09:0d:24:66:47:29:
                    17:08:c2:9e:7f:fe:48:98:28:65:0f:7e:d7:95:69:
                    0c:0b:f7:7b:34:e6:d7:13:28:db:f4:57:1a:60:41:
                    be:76:6c:96:f5:8d:2f:d0:49:c3:3d:8f:79:7b:47:
                    f6:2c:51:e1:19:47:0d:bc:33:41:4f:d8:28:ae:da:
                    2e:13:86:e0:12:a2:7f:de:25:8a:41:dc:e1:3e:05:
                    b5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F8:A3:83:3D:66:45:2E:43:68:7F:CE:5E:06:4D:18:2A:88:36:2A
            X509v3 Authority Key Identifier:
                keyid:C3:D0:29:95:E1:70:CE:62:2F:60:57:9E:B1:3D:9D:D0:37:B4:6A:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/C3D02995E170CE622F60579EB13D9DD037B46A52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3D02995E170CE622F60579EB13D9DD037B46A52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/3230312e3232322e34342e302f32322d3234203d3e20323731373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:24:7f:86:f8:d0:a8:65:8f:96:85:bc:b8:8a:66:d0:06:b4:
         77:ad:60:de:67:39:3e:e5:71:cb:84:cf:9c:6b:63:61:a0:e6:
         2b:22:8d:e9:27:e5:8c:27:f4:1c:df:46:49:bc:52:bf:1d:66:
         2c:d5:6e:d3:b8:01:bf:07:7d:1b:d9:11:fe:88:ec:a9:47:9a:
         60:b9:eb:55:aa:26:4e:b4:71:f7:8e:b4:8f:03:d1:49:a2:f3:
         2d:92:2a:98:d9:87:56:93:3e:69:f1:4a:52:61:b5:d5:a1:5c:
         dc:7d:2e:17:1d:6d:27:f3:ae:be:ff:d1:0a:c1:4a:87:13:96:
         c6:67:de:8d:fc:60:9a:ff:29:f1:2e:3a:50:d1:fe:de:0a:c5:
         7b:88:c6:03:82:8f:a2:d6:d2:da:75:ae:87:b4:e0:e5:bd:6d:
         94:66:26:08:ff:b0:c0:99:82:b5:06:27:b9:83:50:45:6e:87:
         fb:f0:bf:81:4e:08:d3:1d:bf:9e:5c:95:8d:55:fa:30:71:2d:
         d3:ee:83:a9:14:5e:3a:7b:9f:fa:c2:de:70:ec:95:aa:31:56:
         4a:9b:1b:3e:29:a9:79:17:6a:0d:53:9b:29:ad:67:96:71:36:
         fb:fd:40:aa:15:8c:67:59:78:cc:9a:17:3f:54:8c:6a:6c:cb:
         83:41:5d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 12:40:17 2024 by rpki-client on console-fra.rpki-client.org