Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/3230312e3135392e34362e302f32332d3234203d3e20323730313138.roa
File:                     3230312e3135392e34362e302f32332d3234203d3e20323730313138.roa (raw, json)
Hash identifier:          wakucmu736kzLe/lb3EExL0ilM2iQf7sYAzC2jVj67g=
Subject key identifier:   A4:9C:F5:74:24:C4:61:80:2D:F7:46:8A:23:A0:EC:6E:46:D0:10:8F
Certificate issuer:       /CN=7066D598BBBAB42A965098E6208D6AB7BD0740D6
Certificate serial:       7FB9667758DA45E3AF5913DE0BFC7D6524249C11
Authority key identifier: 70:66:D5:98:BB:BA:B4:2A:96:50:98:E6:20:8D:6A:B7:BD:07:40:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/3230312e3135392e34362e302f32332d3234203d3e20323730313138.roa
Signing time:             Tue 05 Mar 2024 18:20:22 +0000
ROA not before:           Tue 05 Mar 2024 18:15:22 +0000
ROA not after:            Tue 04 Mar 2025 18:20:22 +0000
asID:                     270118
IP address blocks:        201.159.46.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b9:66:77:58:da:45:e3:af:59:13:de:0b:fc:7d:65:24:24:9c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7066D598BBBAB42A965098E6208D6AB7BD0740D6
        Validity
            Not Before: Mar  5 18:15:22 2024 GMT
            Not After : Mar  4 18:20:22 2025 GMT
        Subject: CN=A49CF57424C461802DF7468A23A0EC6E46D0108F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:19:e5:ab:b7:9e:1b:98:95:ea:9b:c1:aa:ef:
                    6c:c0:96:5a:9d:73:c9:b0:59:fb:1a:91:23:99:43:
                    54:11:4c:ad:33:2d:0b:d6:94:a2:05:2f:49:63:d5:
                    b3:37:ba:38:d8:b6:28:4e:7f:d8:bf:84:3e:4c:b1:
                    ab:66:73:69:5c:42:f9:b3:1e:9d:38:58:f8:11:db:
                    f4:68:30:01:6b:91:e4:10:be:c6:6f:3c:85:23:f5:
                    b2:50:64:c2:22:2b:26:cf:3c:fa:9a:01:ce:61:1c:
                    96:a2:5a:1d:db:32:3a:cd:70:9d:a7:a9:23:88:45:
                    38:a0:f6:5a:e2:75:61:09:3f:9c:7f:ff:12:07:73:
                    8b:1a:8c:18:df:f1:da:92:0f:cd:c5:e9:70:af:9a:
                    9a:42:62:de:cc:8f:07:c2:d5:92:bc:19:0d:4f:64:
                    cb:29:8a:66:72:4d:e3:85:76:57:b9:68:87:51:48:
                    fe:6b:d0:81:e9:03:e8:db:a4:c6:78:17:eb:d4:1d:
                    a6:4b:72:1b:4b:a5:cb:27:2c:3f:33:76:be:7c:82:
                    de:df:33:67:16:a3:5e:50:98:4d:96:a9:26:24:b8:
                    ad:2b:84:88:0f:3a:f3:d7:ef:78:e1:97:14:82:3c:
                    01:47:90:25:3c:0b:7c:cb:c0:41:f9:b0:5a:65:39:
                    77:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9C:F5:74:24:C4:61:80:2D:F7:46:8A:23:A0:EC:6E:46:D0:10:8F
            X509v3 Authority Key Identifier:
                keyid:70:66:D5:98:BB:BA:B4:2A:96:50:98:E6:20:8D:6A:B7:BD:07:40:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7066D598BBBAB42A965098E6208D6AB7BD0740D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272F092A75BD0846536D3BEE5324BCB694670AD89D90C846635905835368D231/0/3230312e3135392e34362e302f32332d3234203d3e20323730313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:2c:73:40:cd:3e:33:92:4f:3e:e6:c3:db:d9:41:a3:a4:4b:
         40:9b:4b:c3:90:18:5b:7e:91:c6:60:7c:05:75:9d:c9:f9:3e:
         0f:6d:d0:dc:8a:b4:c6:9f:f8:90:f9:20:cd:3b:4c:bb:ff:6e:
         4e:01:67:7c:f3:31:f8:40:51:37:a7:c1:f6:d3:24:a6:51:fb:
         e1:b8:1f:c6:c4:78:f1:81:23:17:0e:90:92:02:9a:39:5b:81:
         2b:d9:31:79:e3:2e:45:be:34:d5:04:18:2f:ea:40:ee:a4:18:
         af:a2:84:e0:0e:9b:96:a6:0a:d6:5b:77:46:20:98:11:20:7e:
         0d:75:9e:60:75:0f:41:fd:f1:92:30:92:81:43:49:47:df:1f:
         a6:8e:c8:3a:44:78:db:82:7a:ea:86:74:00:bc:ef:9b:35:30:
         ac:76:e3:56:ef:9c:da:67:94:a2:ba:81:e3:52:92:34:fa:01:
         ef:6b:81:28:9c:9c:04:15:1e:a3:3c:59:4a:ba:0a:0a:5f:33:
         26:1f:dd:e2:4d:52:9b:08:60:25:e7:1b:45:2a:43:f6:ca:a4:
         60:3c:0b:9d:f3:d5:f1:5c:2d:70:3f:27:a7:67:49:6a:22:0b:
         48:04:7f:81:a0:10:49:2e:89:e0:97:17:e6:29:bc:97:9d:b0:
         6b:86:3b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org