Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS272113.roa
File:                     AS272113.roa (raw, json)
Hash identifier:          Xu343ZAapHY17z6hzFn/63k3+NL0iia63mwlrjJ0tX4=
Subject key identifier:   80:9A:59:BF:A9:EA:5F:82:D9:DC:E3:C0:85:65:EF:3E:9E:FE:2F:10
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       1380FF5955FA10E849D0950E97B7157211733576
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS272113.roa
Signing time:             Tue 05 Mar 2024 18:07:57 +0000
ROA not before:           Tue 05 Mar 2024 18:02:57 +0000
ROA not after:            Tue 04 Mar 2025 18:07:57 +0000
asID:                     272113
IP address blocks:        186.56.60.0/24 maxlen: 24
                          201.251.242.0/24 maxlen: 24
                          201.254.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:80:ff:59:55:fa:10:e8:49:d0:95:0e:97:b7:15:72:11:73:35:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Mar  5 18:02:57 2024 GMT
            Not After : Mar  4 18:07:57 2025 GMT
        Subject: CN=809A59BFA9EA5F82D9DCE3C08565EF3E9EFE2F10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e0:7f:68:73:6e:f0:bf:fb:fe:7b:fd:5e:23:
                    06:53:43:8e:da:57:13:67:ce:d9:26:c2:4d:80:cd:
                    7c:de:d0:23:21:46:42:4b:7c:45:81:42:84:41:6e:
                    c9:84:1f:5e:da:c1:db:17:a6:bb:62:3e:1a:00:39:
                    8f:7f:5e:d4:a1:f1:e1:d7:b0:de:ad:7d:3f:ca:ee:
                    93:22:4d:69:85:eb:3b:50:af:86:89:a7:ff:60:a3:
                    99:7d:51:12:f0:1d:0c:1a:c5:b6:9d:21:0c:03:14:
                    4b:fb:9b:a8:5d:2c:db:fb:00:3f:d3:a5:74:ae:40:
                    62:e8:6f:06:ef:6a:54:dd:6a:47:8c:02:b7:68:ea:
                    ba:94:35:66:e0:5d:6c:a2:4e:bf:6d:93:d1:92:ed:
                    ee:ce:da:79:59:73:52:85:c1:8f:a8:b9:b9:0e:82:
                    c4:85:48:2a:2e:aa:4f:03:a9:1e:8a:95:d0:98:41:
                    04:e5:f6:51:1a:6a:d3:03:a2:dd:18:06:7b:4c:99:
                    b9:31:2b:4a:3c:28:34:e0:46:a9:75:e7:47:d9:b3:
                    8f:38:a3:2a:df:a4:f1:f5:05:15:7e:81:c6:7b:1e:
                    13:15:a0:1e:ad:37:ce:29:9b:99:0c:1b:c7:6f:e9:
                    a3:fe:83:97:9c:39:23:95:5d:b0:74:99:25:40:bc:
                    50:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9A:59:BF:A9:EA:5F:82:D9:DC:E3:C0:85:65:EF:3E:9E:FE:2F:10
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS272113.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.56.60.0/24
                  201.251.242.0/24
                  201.254.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:4e:a4:16:0f:16:54:6c:1b:f3:90:91:95:29:3f:89:55:ce:
         f5:82:63:42:12:61:00:f7:d7:16:e8:0b:82:4d:0d:53:97:4d:
         f0:69:21:07:c4:9e:83:55:62:80:fc:a8:7a:bc:79:38:b9:c9:
         0b:c1:48:a6:b4:aa:fc:97:1d:0f:83:e1:b8:8c:91:d3:17:d4:
         d3:d6:2d:b0:d7:23:a5:9c:2c:a9:ed:b7:48:ad:09:8a:92:ad:
         54:86:09:64:14:bc:76:d5:08:2c:9c:74:33:17:60:d5:30:aa:
         01:0c:9b:d9:c3:42:db:b6:aa:b5:cc:06:cd:f9:55:be:94:d0:
         d3:c9:57:a3:d9:2c:98:48:84:63:14:eb:50:9e:00:7b:93:5b:
         18:39:99:1d:c9:1e:3b:5c:18:b0:c7:ac:b3:de:3c:20:95:71:
         42:02:1d:77:5f:d2:71:6c:f5:14:0d:14:7c:9c:ef:9d:22:af:
         75:7b:a8:6b:c0:5d:cb:94:09:45:19:80:cb:04:c8:0d:98:d2:
         b9:9a:f8:9d:95:7d:a5:f2:f3:d6:68:f8:28:e6:65:28:8b:eb:
         bc:13:2d:b7:5e:12:a5:6b:d2:2a:5b:95:fe:01:96:1f:b0:d8:
         51:39:c8:36:a8:f1:ee:57:12:28:e1:ff:dd:59:f4:65:29:8b:
         68:05:87:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:23 2024 by rpki-client on console-ams.rpki-client.org