Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4EE5618D921FE644C72698F1D709BDC4FB4B210B4EA756236EE4E6BFD33EE40A/0/3230312e3133392e3231332e302f32342d3234203d3e20323635353534.roa
File:                     3230312e3133392e3231332e302f32342d3234203d3e20323635353534.roa (raw, json)
Hash identifier:          Lry3/1j7Q2XzLz+d9AmMLhGE/ZFsAPrg1782D8Md2QQ=
Subject key identifier:   ED:7A:CC:E0:04:ED:7A:04:3F:37:0E:54:15:FF:41:C2:95:BA:69:CD
Certificate issuer:       /CN=222B3CF3CD749CFD33A071A688E449758651F5AE
Certificate serial:       12EA55EF99EBD813D23805B44FCC262325D5E638
Authority key identifier: 22:2B:3C:F3:CD:74:9C:FD:33:A0:71:A6:88:E4:49:75:86:51:F5:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/222B3CF3CD749CFD33A071A688E449758651F5AE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4EE5618D921FE644C72698F1D709BDC4FB4B210B4EA756236EE4E6BFD33EE40A/0/3230312e3133392e3231332e302f32342d3234203d3e20323635353534.roa
Signing time:             Tue 05 Mar 2024 18:03:12 +0000
ROA not before:           Tue 05 Mar 2024 17:58:12 +0000
ROA not after:            Tue 04 Mar 2025 18:03:12 +0000
asID:                     265554
IP address blocks:        201.139.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4EE5618D921FE644C72698F1D709BDC4FB4B210B4EA756236EE4E6BFD33EE40A/0/222B3CF3CD749CFD33A071A688E449758651F5AE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4EE5618D921FE644C72698F1D709BDC4FB4B210B4EA756236EE4E6BFD33EE40A/0/222B3CF3CD749CFD33A071A688E449758651F5AE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/222B3CF3CD749CFD33A071A688E449758651F5AE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ea:55:ef:99:eb:d8:13:d2:38:05:b4:4f:cc:26:23:25:d5:e6:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=222B3CF3CD749CFD33A071A688E449758651F5AE
        Validity
            Not Before: Mar  5 17:58:12 2024 GMT
            Not After : Mar  4 18:03:12 2025 GMT
        Subject: CN=ED7ACCE004ED7A043F370E5415FF41C295BA69CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d2:39:2f:ed:c0:b5:6b:ba:6c:b5:19:b3:3a:
                    50:3d:b5:d7:a7:03:c9:dc:88:7e:d5:a0:69:4e:fd:
                    9e:e4:6e:0d:b1:58:8c:2a:01:5c:04:4a:b7:94:42:
                    e3:81:06:e6:86:f7:b1:dd:2f:0e:38:71:dd:31:16:
                    bc:e6:77:54:38:f7:19:6e:54:4f:80:ab:a3:90:e9:
                    fa:89:d0:28:34:19:03:ba:58:59:f3:a1:b5:8b:26:
                    94:d6:26:5c:87:66:43:40:88:a0:34:16:28:02:2f:
                    02:af:4f:51:34:88:9f:83:3d:d2:b1:cc:76:cc:fb:
                    af:58:e5:c7:1f:ee:ef:60:ee:49:aa:85:0b:54:d3:
                    e8:9e:d0:81:57:6b:69:05:cd:53:ca:dd:26:82:97:
                    21:9a:95:d9:2d:02:a5:e1:7f:72:05:53:70:d2:60:
                    bb:da:58:e6:35:53:9d:d4:fa:5b:8d:ac:e3:65:79:
                    5c:23:bb:32:ed:cb:91:6c:47:d2:41:a2:74:f9:a5:
                    59:f3:d8:d8:d6:e4:66:fe:60:39:db:5a:83:1c:d0:
                    d5:ac:3a:1a:d4:6c:be:34:da:82:70:e4:23:57:3a:
                    8d:ea:22:1a:11:a8:7a:21:59:ff:59:9a:71:4c:e2:
                    24:40:2e:4c:96:54:41:cc:d6:7d:52:28:16:d4:b8:
                    64:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7A:CC:E0:04:ED:7A:04:3F:37:0E:54:15:FF:41:C2:95:BA:69:CD
            X509v3 Authority Key Identifier:
                keyid:22:2B:3C:F3:CD:74:9C:FD:33:A0:71:A6:88:E4:49:75:86:51:F5:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4EE5618D921FE644C72698F1D709BDC4FB4B210B4EA756236EE4E6BFD33EE40A/0/222B3CF3CD749CFD33A071A688E449758651F5AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/222B3CF3CD749CFD33A071A688E449758651F5AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4EE5618D921FE644C72698F1D709BDC4FB4B210B4EA756236EE4E6BFD33EE40A/0/3230312e3133392e3231332e302f32342d3234203d3e20323635353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:fe:af:b5:7f:bf:81:1b:0a:eb:a6:56:a3:e8:1b:34:13:09:
         64:4b:25:89:3e:ce:94:5c:31:12:13:73:93:5f:ef:17:9c:2a:
         45:9a:50:00:f7:57:d2:4b:a6:e1:06:5c:2d:82:82:87:6a:20:
         fd:90:f4:88:57:7a:2c:df:b4:69:ab:79:14:8a:ae:27:da:30:
         b6:70:e1:8e:a7:e8:4f:b1:8e:45:62:89:27:cd:16:a5:a0:d1:
         4a:41:74:7d:8f:03:3e:44:e7:98:d5:1c:eb:32:de:31:b1:4a:
         cd:5b:17:8b:6f:87:d8:d2:17:1e:29:07:fc:fb:d7:41:cd:3a:
         5c:81:7c:ed:ab:7b:99:d3:cb:12:e7:26:d5:8f:e9:2e:13:32:
         21:67:57:75:17:a3:bb:9f:4f:70:bd:fe:db:d4:3d:28:ba:e5:
         c4:0b:5a:a5:01:cc:99:31:64:9c:8c:3f:7e:2c:7f:3d:86:ef:
         f0:bc:8f:9b:8a:ae:1f:e5:05:af:96:e4:4b:d7:69:45:08:9e:
         bb:f4:24:af:0e:14:07:cf:4b:87:6f:de:a9:ca:c8:11:78:2d:
         23:87:05:ec:8e:60:46:39:03:c5:de:4b:bd:3f:78:78:85:42:
         26:ab:5a:dc:c9:3b:f3:86:9b:49:cf:3c:be:43:48:48:e0:27:
         e6:7f:b3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org