Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/3230312e3232322e36302e302f32322d3232203d3e203532343534.roa
File:                     3230312e3232322e36302e302f32322d3232203d3e203532343534.roa (raw, json)
Hash identifier:          fIKk/PwTZ61f1F7e42mLWU+WtnORmeocXa7GK9N8toM=
Subject key identifier:   A3:7B:5C:D6:F8:BB:F5:82:2A:A1:92:FA:92:AD:E2:70:8F:9D:E5:7E
Certificate issuer:       /CN=EB962D020BCD0C8EC8D36618D22902E2E350CD44
Certificate serial:       74DF24F98368A42C8BF4A272CCE9DDE43113E7A2
Authority key identifier: EB:96:2D:02:0B:CD:0C:8E:C8:D3:66:18:D2:29:02:E2:E3:50:CD:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/3230312e3232322e36302e302f32322d3232203d3e203532343534.roa
Signing time:             Tue 05 Mar 2024 18:16:08 +0000
ROA not before:           Tue 05 Mar 2024 18:11:08 +0000
ROA not after:            Tue 04 Mar 2025 18:16:08 +0000
asID:                     52454
IP address blocks:        201.222.60.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.crl
                          rsync://repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:df:24:f9:83:68:a4:2c:8b:f4:a2:72:cc:e9:dd:e4:31:13:e7:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB962D020BCD0C8EC8D36618D22902E2E350CD44
        Validity
            Not Before: Mar  5 18:11:08 2024 GMT
            Not After : Mar  4 18:16:08 2025 GMT
        Subject: CN=A37B5CD6F8BBF5822AA192FA92ADE2708F9DE57E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:99:44:29:05:a8:ae:50:2a:e2:9a:c8:73:ad:
                    c6:05:f2:b0:25:06:01:bb:23:93:5f:48:a3:c2:23:
                    40:1e:56:49:fe:dc:bd:55:d2:de:f5:b9:40:1b:d9:
                    0e:c0:32:49:77:11:27:83:c8:51:4f:ab:98:23:24:
                    8c:b0:5a:22:d4:9c:fa:4c:8f:4c:b8:03:73:63:0d:
                    8d:69:c1:4c:ed:54:77:41:fb:b5:48:d4:da:a9:ce:
                    d3:79:d3:02:3d:d1:e1:8f:c2:72:40:89:93:7a:70:
                    3d:5b:ff:0e:cf:81:b4:fd:ec:47:6d:93:e0:23:22:
                    c6:bf:d5:16:7d:9a:8e:d2:21:4e:a0:ff:b5:01:3f:
                    e5:f0:33:93:c5:10:33:b5:25:69:98:46:8c:1a:2e:
                    53:93:c4:d2:11:d6:c9:8d:9a:69:a5:36:24:bb:b3:
                    bd:b9:67:d0:e0:3e:83:9d:12:dd:07:24:89:23:d9:
                    28:4a:4a:4b:ba:8a:f0:97:63:42:38:a1:61:c3:01:
                    ab:8f:81:a2:13:2e:e8:8b:10:d3:ac:95:27:c7:d6:
                    31:01:06:cf:62:62:95:14:16:51:b6:81:d8:3c:76:
                    e3:2d:ba:1c:99:b1:40:87:17:fe:e1:e7:2f:fc:66:
                    52:ba:2a:f7:3e:2c:9c:00:10:60:38:58:f4:d5:2c:
                    b5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7B:5C:D6:F8:BB:F5:82:2A:A1:92:FA:92:AD:E2:70:8F:9D:E5:7E
            X509v3 Authority Key Identifier:
                keyid:EB:96:2D:02:0B:CD:0C:8E:C8:D3:66:18:D2:29:02:E2:E3:50:CD:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB962D020BCD0C8EC8D36618D22902E2E350CD44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/42E42C781DBB75A285DBB7B6FA83F07522E6DBEEB5F5A5C4B1928B21975F5BAC/0/3230312e3232322e36302e302f32322d3232203d3e203532343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:57:db:26:05:ca:07:80:01:67:28:49:33:a5:54:9f:56:6d:
         ea:cc:f8:a4:3e:3a:f3:ed:55:40:cb:ae:80:10:47:3c:17:75:
         02:af:b4:ba:af:7e:56:6e:06:af:0b:66:06:21:89:82:45:c5:
         7e:80:a5:4b:e9:30:1f:7a:47:7f:81:28:8a:0f:79:03:c5:f3:
         0c:28:95:ce:36:b4:f1:29:af:a3:a4:ae:b1:bd:42:fa:80:0e:
         d0:4d:dc:17:52:3f:55:94:2a:61:b1:3b:e4:45:47:e0:1e:28:
         cb:c8:d4:78:df:62:3e:c3:c4:ed:82:29:11:63:53:85:d9:3c:
         d0:b5:ca:52:d9:1f:61:51:6c:58:b3:45:5b:c7:a6:11:66:1e:
         87:01:89:8a:4d:c8:03:fa:fb:44:a7:5c:62:c5:40:70:b0:fe:
         b6:6e:bd:3f:15:c2:d6:99:b7:cd:c2:95:69:83:11:49:26:6d:
         00:20:f1:89:28:02:c3:38:0a:8d:c3:65:5e:c8:4e:8e:27:00:
         59:ff:bf:e4:84:ca:36:19:60:85:6b:16:d7:4b:dd:17:36:51:
         50:e2:f2:7c:b8:1c:43:fa:ac:5e:21:1b:21:08:9a:01:07:0c:
         a8:68:d5:a1:93:f4:97:95:ad:dc:dd:3d:e4:eb:e2:48:b2:f4:
         cb:89:0a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:27 2024 by rpki-client on console-ams.rpki-client.org