Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/596A89FD132EAD65D72620CA847240E50CFA9C071E093DFED5A5E042C466659C/0/3230312e3232322e34312e302f32342d3234203d3e20323731373832.roa
File:                     3230312e3232322e34312e302f32342d3234203d3e20323731373832.roa (raw, json)
Hash identifier:          64m3EwRQCK895wJZzg6kLeEf5+f5ctnP94VXiAQ0PSI=
Subject key identifier:   F1:39:E2:B3:76:0E:EA:27:55:CD:03:DB:8B:AC:D4:38:A1:70:B6:17
Certificate issuer:       /CN=F02DCCDD304DCCE58FE027F11108F440B11FD910
Certificate serial:       292FB29646417138B4F8DBDD6B9D5ABBE07C9D8B
Authority key identifier: F0:2D:CC:DD:30:4D:CC:E5:8F:E0:27:F1:11:08:F4:40:B1:1F:D9:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F02DCCDD304DCCE58FE027F11108F440B11FD910.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/596A89FD132EAD65D72620CA847240E50CFA9C071E093DFED5A5E042C466659C/0/3230312e3232322e34312e302f32342d3234203d3e20323731373832.roa
Signing time:             Tue 05 Mar 2024 17:44:07 +0000
ROA not before:           Tue 05 Mar 2024 17:39:07 +0000
ROA not after:            Tue 04 Mar 2025 17:44:07 +0000
asID:                     271782
IP address blocks:        201.222.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/596A89FD132EAD65D72620CA847240E50CFA9C071E093DFED5A5E042C466659C/0/F02DCCDD304DCCE58FE027F11108F440B11FD910.crl
                          rsync://repository.lacnic.net/rpki/lacnic/596A89FD132EAD65D72620CA847240E50CFA9C071E093DFED5A5E042C466659C/0/F02DCCDD304DCCE58FE027F11108F440B11FD910.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F02DCCDD304DCCE58FE027F11108F440B11FD910.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2f:b2:96:46:41:71:38:b4:f8:db:dd:6b:9d:5a:bb:e0:7c:9d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F02DCCDD304DCCE58FE027F11108F440B11FD910
        Validity
            Not Before: Mar  5 17:39:07 2024 GMT
            Not After : Mar  4 17:44:07 2025 GMT
        Subject: CN=F139E2B3760EEA2755CD03DB8BACD438A170B617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:53:92:b9:15:8f:77:14:5c:dd:80:6b:21:d0:
                    55:94:a4:15:ca:4e:c8:3c:10:01:ab:18:e3:b4:cf:
                    95:31:ab:bf:19:01:a4:df:a3:5b:e9:1d:a1:3e:17:
                    15:c3:2c:0e:6f:38:8a:f2:a5:73:64:51:b0:34:ef:
                    4c:41:0f:28:a9:68:20:24:50:4d:3c:a2:bf:95:e4:
                    57:36:74:b8:d3:31:73:98:a3:f0:27:62:d0:f6:37:
                    94:ce:5f:75:b0:90:aa:8d:07:58:5c:6d:20:70:f4:
                    56:6d:18:91:52:1d:5d:cc:d4:ff:d4:ef:cf:7e:38:
                    2a:59:21:c1:15:4c:57:9d:99:71:ba:d4:b3:0e:8f:
                    0f:69:f8:db:fc:b5:ca:f6:44:f3:af:44:16:e7:48:
                    cc:9d:14:da:10:19:f6:7d:4d:a6:86:03:e0:e0:09:
                    eb:60:56:a9:f5:c1:21:dc:2d:0b:ae:eb:80:53:b7:
                    7e:a2:d7:70:f8:ab:7b:61:00:d6:70:93:d7:65:ee:
                    88:53:fb:e5:62:01:fa:57:60:50:bc:c2:0d:81:71:
                    a5:bc:33:fe:fd:db:1f:03:9b:2e:3e:44:ad:8a:f7:
                    1d:cb:b6:3d:68:4f:25:d4:c7:de:ec:d8:c4:f7:59:
                    19:dd:62:1e:6a:c5:ac:1a:ac:42:c5:8b:04:0d:c3:
                    29:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:39:E2:B3:76:0E:EA:27:55:CD:03:DB:8B:AC:D4:38:A1:70:B6:17
            X509v3 Authority Key Identifier:
                keyid:F0:2D:CC:DD:30:4D:CC:E5:8F:E0:27:F1:11:08:F4:40:B1:1F:D9:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/596A89FD132EAD65D72620CA847240E50CFA9C071E093DFED5A5E042C466659C/0/F02DCCDD304DCCE58FE027F11108F440B11FD910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F02DCCDD304DCCE58FE027F11108F440B11FD910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/596A89FD132EAD65D72620CA847240E50CFA9C071E093DFED5A5E042C466659C/0/3230312e3232322e34312e302f32342d3234203d3e20323731373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:0d:79:67:7e:38:8e:12:6b:59:a2:76:30:20:5f:00:18:cc:
         92:28:6d:b3:0d:45:64:00:c7:f6:41:06:6b:bb:be:dd:2d:db:
         33:a9:42:dd:43:09:aa:53:0d:cd:c8:1b:86:e7:00:3c:ca:ce:
         06:43:95:5c:4a:af:16:c5:27:1c:c4:53:28:d0:fc:91:99:be:
         dd:53:f2:b2:d1:0f:1e:1d:7a:3b:7a:e4:51:42:11:6f:97:2f:
         96:85:a1:40:11:a2:a1:7d:76:46:68:48:48:b4:c7:5b:88:e3:
         32:4d:c8:e2:f1:a5:6b:a3:da:7d:01:74:c2:be:03:4d:86:91:
         f1:4f:d0:1c:62:5e:f3:12:f0:a0:f6:f2:a4:90:13:b2:b1:0c:
         df:5d:a6:8b:b6:8d:8d:32:73:3b:c4:c0:6b:3a:af:b4:f7:ec:
         f6:f9:34:b1:0c:51:7f:00:97:2f:33:de:f2:6e:b8:5c:1a:b3:
         9e:35:c2:72:a0:f3:33:6a:ab:0e:43:6c:f6:1c:7e:24:c7:91:
         84:74:26:06:6e:98:dc:0e:22:27:87:36:11:a4:75:27:0e:fe:
         9c:a5:f0:e1:2e:77:c0:de:e6:f8:e8:ba:e5:55:b3:09:67:37:
         b1:be:0d:ec:dc:9f:f3:1f:65:d6:84:b7:9c:ed:7b:87:55:e3:
         bd:0d:a3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 08:01:27 2024 by rpki-client on console-fra.rpki-client.org