Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/3230312e3134382e3231322e302f32322d3234203d3e203631343636.roa
File:                     3230312e3134382e3231322e302f32322d3234203d3e203631343636.roa (raw, json)
Hash identifier:          MF9CY+c6F3oxpvVkSvfQ1IOtkAu20odlL8QyIDi6xqk=
Subject key identifier:   EB:37:8C:DF:AC:49:B8:CE:5F:97:62:3F:A3:8E:4C:20:1A:30:A6:98
Certificate issuer:       /CN=B3AC8703592539ADD492A1BDC08E997B67459567
Certificate serial:       2B26349F4A5A2B1E714E3741A1F64FF515514822
Authority key identifier: B3:AC:87:03:59:25:39:AD:D4:92:A1:BD:C0:8E:99:7B:67:45:95:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AC8703592539ADD492A1BDC08E997B67459567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/3230312e3134382e3231322e302f32322d3234203d3e203631343636.roa
Signing time:             Tue 05 Mar 2024 17:49:10 +0000
ROA not before:           Tue 05 Mar 2024 17:44:10 +0000
ROA not after:            Tue 04 Mar 2025 17:49:10 +0000
asID:                     61466
IP address blocks:        201.148.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/B3AC8703592539ADD492A1BDC08E997B67459567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/B3AC8703592539ADD492A1BDC08E997B67459567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AC8703592539ADD492A1BDC08E997B67459567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:26:34:9f:4a:5a:2b:1e:71:4e:37:41:a1:f6:4f:f5:15:51:48:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3AC8703592539ADD492A1BDC08E997B67459567
        Validity
            Not Before: Mar  5 17:44:10 2024 GMT
            Not After : Mar  4 17:49:10 2025 GMT
        Subject: CN=EB378CDFAC49B8CE5F97623FA38E4C201A30A698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fe:ad:2c:1e:db:53:e1:6c:b2:6e:87:61:2e:
                    96:56:d7:60:f1:00:c6:0a:7e:b7:53:fe:41:c7:f8:
                    23:38:46:3a:bd:28:0d:8c:04:3d:0f:ff:d4:b2:d2:
                    94:04:dd:b2:95:22:17:92:40:e9:c7:e7:eb:b9:ab:
                    a5:6d:87:c2:49:b8:60:7c:d2:e4:3d:1c:6d:8d:e1:
                    a7:af:dd:ac:ce:5b:39:f7:ab:80:43:08:4b:cb:07:
                    04:09:86:67:a4:61:5f:46:f1:00:28:57:2a:db:d5:
                    e9:fe:02:5c:f3:2a:2b:ce:97:6e:57:a3:f6:3f:b4:
                    50:dc:06:0a:3b:5a:8d:e5:e4:4c:26:dd:60:ca:3b:
                    64:8b:07:31:9a:1e:aa:8a:64:51:5d:4e:2e:bf:c1:
                    29:52:08:d8:94:30:20:06:a5:b1:33:99:e7:3a:09:
                    8d:c1:83:d0:13:ca:31:8b:8e:25:cb:74:3c:c0:6d:
                    2f:dc:10:0b:ee:dc:21:4b:cb:3a:15:fd:6c:c0:8f:
                    97:ce:c9:2a:8b:2e:c2:09:0c:bb:32:8c:d1:5a:de:
                    45:55:57:a2:05:5a:e8:9b:b4:b4:d3:a9:36:98:80:
                    43:69:92:b0:ab:67:ac:bd:be:92:d4:4f:6f:27:b1:
                    c9:8c:e1:b7:69:b7:2e:86:55:85:e6:f7:fd:68:1d:
                    02:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:37:8C:DF:AC:49:B8:CE:5F:97:62:3F:A3:8E:4C:20:1A:30:A6:98
            X509v3 Authority Key Identifier:
                keyid:B3:AC:87:03:59:25:39:AD:D4:92:A1:BD:C0:8E:99:7B:67:45:95:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/B3AC8703592539ADD492A1BDC08E997B67459567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AC8703592539ADD492A1BDC08E997B67459567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/3230312e3134382e3231322e302f32322d3234203d3e203631343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:10:0b:2d:b5:e8:93:05:cd:24:83:ff:77:ce:d7:52:91:9c:
         ad:e2:eb:d8:8f:b3:06:80:f9:0d:a8:b2:78:c6:b3:67:2e:e1:
         d6:53:f9:c1:24:4d:2e:d1:e1:57:f1:b6:a7:1e:7e:d4:d8:b5:
         f0:9c:07:37:9f:19:bd:e0:6c:7d:e2:cf:9a:df:ae:8d:1f:a0:
         01:22:e5:d9:52:1c:57:76:66:6e:f5:e9:1f:7e:ee:6c:ab:1b:
         85:1e:27:27:c7:6f:b2:6b:5d:b7:d6:8f:e9:9f:45:e9:31:bb:
         16:13:d6:1f:74:98:bc:24:fe:a2:b0:45:fc:29:dd:8b:9a:57:
         b5:bf:95:ad:c8:6f:27:a2:a7:41:66:ca:15:cd:2e:06:28:aa:
         30:eb:e6:4e:a6:c3:94:cf:1e:0b:97:71:d1:53:e5:81:a0:30:
         37:c1:53:34:fd:a8:29:e4:6f:d8:84:e8:31:ee:8c:e6:3f:ed:
         84:06:4c:e2:28:d7:44:2c:e2:0d:6f:f0:e4:00:28:9f:bd:1e:
         95:cb:92:95:02:82:d9:f6:06:69:e6:88:f5:49:4e:8a:30:27:
         e8:b2:f0:2d:91:6e:3a:ec:c4:35:ef:7f:2f:47:0c:61:b5:9f:
         f6:8e:ad:bb:bc:f9:f3:7e:1e:88:f9:49:2a:4d:24:15:ab:de:
         eb:b6:ef:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:00 2024 by rpki-client on console-ams.rpki-client.org