Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/3230312e3232322e36302e302f32322d3232203d3e203532343534.roa
File:                     3230312e3232322e36302e302f32322d3232203d3e203532343534.roa (raw, json)
Hash identifier:          Jz81QEEEdxUl50J4cHtjOXqcH+OUsDu/PWdSJqMvvy0=
Subject key identifier:   82:1D:81:F1:F0:FF:05:BA:61:86:02:FC:C3:71:38:F1:DA:68:94:81
Certificate issuer:       /CN=EB962D020BCD0C8EC8D36618D22902E2E350CD44
Certificate serial:       79973C701276E1CC94D80C31D33062364414D095
Authority key identifier: EB:96:2D:02:0B:CD:0C:8E:C8:D3:66:18:D2:29:02:E2:E3:50:CD:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/3230312e3232322e36302e302f32322d3232203d3e203532343534.roa
Signing time:             Tue 04 Feb 2025 20:06:05 +0000
ROA not before:           Tue 04 Feb 2025 20:01:05 +0000
ROA not after:            Tue 03 Feb 2026 20:06:05 +0000
asID:                     52454
IP address blocks:        201.222.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.crl
                          rsync://repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:97:3c:70:12:76:e1:cc:94:d8:0c:31:d3:30:62:36:44:14:d0:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB962D020BCD0C8EC8D36618D22902E2E350CD44
        Validity
            Not Before: Feb  4 20:01:05 2025 GMT
            Not After : Feb  3 20:06:05 2026 GMT
        Subject: CN=821D81F1F0FF05BA618602FCC37138F1DA689481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:78:3a:cf:33:f0:81:84:b7:5e:6d:83:47:2e:
                    75:f5:6c:32:e5:c8:91:2f:ec:f7:8d:ac:1f:1c:d7:
                    2c:26:8d:31:16:8f:ba:22:f6:a9:49:35:f3:d8:69:
                    05:ad:8d:c9:dc:41:e9:aa:e8:e4:ea:12:22:98:0c:
                    b1:5b:78:65:3c:a8:c5:2e:b2:ff:39:98:e5:3f:e0:
                    30:1b:10:2e:75:8c:6e:46:28:fc:db:27:d4:5c:cd:
                    b3:b6:98:38:70:77:30:ca:79:c1:b4:9f:fc:9a:a8:
                    ab:bc:57:62:4c:85:d8:5e:83:5a:ce:17:85:62:e7:
                    f1:9c:fe:c4:4e:10:e2:88:9b:0d:e6:cc:c7:34:91:
                    4f:d8:16:8b:aa:19:96:0c:64:ac:cc:23:5f:c4:b1:
                    f5:42:6a:4d:dc:19:9a:6b:64:f0:04:f9:5e:d4:58:
                    0f:a3:c3:92:20:c5:46:c6:c4:9c:3c:40:64:fb:e1:
                    cf:83:a7:8b:50:e2:60:73:46:51:a5:9a:d1:f4:9d:
                    b6:0f:39:cb:22:73:00:f3:b7:14:30:63:f6:96:8a:
                    55:b0:85:8d:cb:a4:6f:0e:53:2e:8a:77:03:4c:1d:
                    63:51:08:af:3d:a4:0a:7f:29:e8:96:4a:9b:a3:40:
                    31:29:8a:fd:85:d6:c1:c1:79:f1:41:d7:2d:dd:40:
                    2b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1D:81:F1:F0:FF:05:BA:61:86:02:FC:C3:71:38:F1:DA:68:94:81
            X509v3 Authority Key Identifier:
                keyid:EB:96:2D:02:0B:CD:0C:8E:C8:D3:66:18:D2:29:02:E2:E3:50:CD:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/3230312e3232322e36302e302f32322d3232203d3e203532343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:4c:c9:fc:b1:b0:05:61:2e:5f:f9:cd:2b:5c:8c:22:45:17:
         97:f8:bb:bf:77:ea:8d:86:59:07:07:6b:a1:f3:47:4e:ac:ff:
         71:d2:77:f2:fc:64:c9:29:01:f8:00:5b:28:43:56:7c:07:69:
         30:61:ef:18:a6:41:b2:3d:e6:3c:a7:91:e2:31:70:25:44:9b:
         97:8b:ab:d6:f1:4e:b1:a2:8a:5a:c7:24:a3:85:e8:96:b7:67:
         9f:4f:f4:f4:13:d2:a9:e5:65:90:55:d2:36:4f:30:10:9c:78:
         60:0d:72:4b:0a:50:55:74:65:99:25:57:e6:c6:15:da:69:6e:
         54:f3:97:dd:e4:32:5c:f2:5a:e4:2c:80:40:58:84:99:82:62:
         29:e8:ef:8e:97:bf:dc:91:a4:e9:d2:11:43:6b:07:c7:7d:0a:
         74:20:17:e3:98:b3:8e:e5:66:3a:96:1c:3f:29:94:e4:c3:48:
         4a:76:dc:ab:39:e4:f6:85:41:e5:27:1c:b4:9b:98:37:7b:dd:
         9a:b6:39:b5:eb:c6:10:0b:61:88:dc:ea:da:f3:1d:12:9b:b6:
         20:93:02:88:34:21:06:5c:a8:49:a7:8a:5c:82:8e:53:5b:53:
         51:88:8b:f1:b3:29:a1:1c:db:da:dc:45:bb:27:56:0f:21:32:
         79:86:d5:39
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUeZc8cBJ24cyU2Awx0zBiNkQU0JUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI5NjJEMDIwQkNEMEM4RUM4RDM2NjE4RDIyOTAyRTJF
MzUwQ0Q0NDAeFw0yNTAyMDQyMDAxMDVaFw0yNjAyMDMyMDA2MDVaMDMxMTAvBgNV
BAMTKDgyMUQ4MUYxRjBGRjA1QkE2MTg2MDJGQ0MzNzEzOEYxREE2ODk0ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7eDrPM/CBhLdebYNHLnX1bDLl
yJEv7PeNrB8c1ywmjTEWj7oi9qlJNfPYaQWtjcncQemq6OTqEiKYDLFbeGU8qMUu
sv85mOU/4DAbEC51jG5GKPzbJ9RczbO2mDhwdzDKecG0n/yaqKu8V2JMhdheg1rO
F4Vi5/Gc/sROEOKImw3mzMc0kU/YFouqGZYMZKzMI1/EsfVCak3cGZprZPAE+V7U
WA+jw5IgxUbGxJw8QGT74c+Dp4tQ4mBzRlGlmtH0nbYPOcsicwDztxQwY/aWilWw
hY3LpG8OUy6KdwNMHWNRCK89pAp/KeiWSpujQDEpiv2F1sHBefFB1y3dQCvBAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUgh2B8fD/BbphhgL8w3E48dpolIEwHwYDVR0j
BBgwFoAU65YtAgvNDI7I02YY0ikC4uNQzUQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MkU0MkM3ODFEQkI3NUEyODVEQkI3QjZGQTgzRjA3NTIy
RTZEQkVFQjVGNUE1QzRCMTkyOEIyMTk3NUY1QkFDLzAvRUI5NjJEMDIwQkNEMEM4
RUM4RDM2NjE4RDIyOTAyRTJFMzUwQ0Q0NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQjk2MkQwMjBCQ0QwQzhFQzhE
MzY2MThEMjI5MDJFMkUzNTBDRDQ0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDJFNDJDNzgxREJCNzVBMjg1REJCN0I2RkE4M0YwNzUyMkU2REJFRUI1
RjVBNUM0QjE5MjhCMjE5NzVGNUJBQy8wLzMyMzAzMTJlMzIzMjMyMmUzNjMwMmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzMjM0MzUzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsnePDAN
BgkqhkiG9w0BAQsFAAOCAQEAZUzJ/LGwBWEuX/nNK1yMIkUXl/i7v3fqjYZZBwdr
ofNHTqz/cdJ38vxkySkB+ABbKENWfAdpMGHvGKZBsj3mPKeR4jFwJUSbl4ur1vFO
saKKWscko4Xolrdnn0/09BPSqeVlkFXSNk8wEJx4YA1ySwpQVXRlmSVX5sYV2mlu
VPOX3eQyXPJa5CyAQFiEmYJiKejvjpe/3JGk6dIRQ2sHx30KdCAX45izjuVmOpYc
PymU5MNISnbcqznk9oVB5ScctJuYN3vdmrY5tevGEAthiNzq2vMdEpu2IJMCiDQh
BlyoSaeKXIKOU1tTUYiL8bMpoRzb2txFuydWDyEyeYbVOQ==
-----END CERTIFICATE-----
Generated at Wed Apr 23 06:18:29 2025 by rpki-client