Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3232372e302f32342d3234203d3e20323731393034.roa
File:                     3230312e3233342e3232372e302f32342d3234203d3e20323731393034.roa (raw, json)
Hash identifier:          mY4P0tmis+mi8OR7ROWbjuvJeGsOcC4tfjJNIVK6k70=
Subject key identifier:   93:AC:9C:17:97:8D:72:F1:90:C7:25:13:CD:8C:5A:DF:CB:5F:C9:48
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       76716033BEB4C3B6F0E9AD9DB2E91E7ECB332EC9
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3232372e302f32342d3234203d3e20323731393034.roa
Signing time:             Tue 05 Mar 2024 18:00:37 +0000
ROA not before:           Tue 05 Mar 2024 17:55:37 +0000
ROA not after:            Tue 04 Mar 2025 18:00:37 +0000
asID:                     271904
IP address blocks:        201.234.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 31 May 2024 02:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:71:60:33:be:b4:c3:b6:f0:e9:ad:9d:b2:e9:1e:7e:cb:33:2e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:37 2024 GMT
            Not After : Mar  4 18:00:37 2025 GMT
        Subject: CN=93AC9C17978D72F190C72513CD8C5ADFCB5FC948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6f:ea:bd:de:a7:ce:02:f0:5d:e5:98:ca:40:
                    da:d4:7b:95:20:f6:61:8f:7b:7d:cb:ab:56:81:81:
                    7e:c8:3b:59:91:1d:77:76:46:d0:4a:bc:0a:e1:35:
                    e0:b1:54:74:95:00:c7:58:ac:72:0f:4e:39:16:22:
                    9d:d3:e9:32:c5:7b:4a:e0:0a:ed:89:52:64:15:d0:
                    1a:1d:dc:09:03:39:10:05:f5:a0:8b:4c:a6:bc:4b:
                    8c:48:96:b3:b5:c6:19:09:10:b2:b8:ba:6f:43:2b:
                    55:89:0e:ef:45:4f:33:87:fa:64:ee:3e:19:02:86:
                    ad:fb:e6:c0:50:29:6b:ab:78:65:67:b5:b5:f2:45:
                    1c:0b:72:80:04:77:d5:5d:1b:3d:c8:86:7e:4a:b1:
                    35:4e:a7:af:14:0b:bd:29:de:0c:9b:96:8d:f8:ce:
                    22:cf:04:c8:bd:59:c2:38:b1:c9:4d:d5:b8:e3:05:
                    fa:2d:87:da:83:c9:b4:2a:e2:f6:40:7f:6b:43:ef:
                    b3:db:65:f2:42:3c:dd:42:ae:5f:a2:45:6f:94:b9:
                    50:69:4d:4d:2c:78:b8:10:d3:43:78:f9:26:95:6f:
                    81:bb:c0:7e:54:8f:c4:32:ff:13:2c:86:11:c0:fd:
                    2e:18:9a:ae:84:ff:fb:ed:99:3f:70:07:64:fb:47:
                    36:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AC:9C:17:97:8D:72:F1:90:C7:25:13:CD:8C:5A:DF:CB:5F:C9:48
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3232372e302f32342d3234203d3e20323731393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:4c:bd:b8:81:8e:6a:f5:cf:9f:f0:81:f6:78:42:99:3f:38:
         61:c8:b4:2b:9c:09:8a:fd:42:30:e1:02:02:63:29:d7:c7:c8:
         b9:89:25:1b:b9:ad:15:5b:1a:e8:af:63:60:45:d6:e7:2c:7a:
         67:80:c7:9f:0a:4d:c5:e7:06:a4:51:92:1f:25:42:ef:c1:a3:
         58:50:3f:15:08:ee:cf:b0:61:4b:61:c5:8d:27:a5:10:29:54:
         fe:11:d7:12:cc:82:c9:6f:20:52:bf:d5:27:85:e8:62:24:7a:
         33:47:2e:92:39:ad:5e:a9:f6:a5:75:e9:15:6f:23:ea:43:53:
         c1:ba:d3:d0:4f:92:2d:a2:97:e6:85:94:92:1d:ff:7b:11:3f:
         0b:1e:e1:d3:c7:3a:ca:2d:89:9e:75:81:3e:10:14:18:7c:09:
         da:bf:3a:c7:0f:64:be:68:39:68:74:50:09:cb:51:b8:54:8f:
         71:aa:2d:5c:25:ec:f2:c4:78:a5:c8:82:e1:ef:15:1c:81:b3:
         d7:37:fe:ef:53:4f:0f:39:18:29:b1:4c:a5:f8:39:c5:ac:a2:
         ab:e5:ab:31:30:e3:62:7a:df:40:cd:e3:c8:af:ed:9e:c0:f7:
         41:8e:6b:20:fb:7a:7c:e7:d1:3d:5d:72:45:e2:0c:24:05:99:
         7b:6d:19:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 02:25:47 2024 by rpki-client on console-ams.rpki-client.org