Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS60725.roa
File:                     AS60725.roa (raw, json)
Hash identifier:          OecHffXIYGY4ZBPtZUe0itjBRaLrSb+c/ehctSHHF7A=
Subject key identifier:   5B:CE:96:56:EB:76:8C:6E:15:76:66:83:7A:29:7B:AC:2E:63:0F:32
Certificate issuer:       /CN=B6F8E7D0BF951583E0959B2A92A8920330CEBE59
Certificate serial:       6A81A93C0EF7889E6DFCF674AA4B050A8DC61BAE
Authority key identifier: B6:F8:E7:D0:BF:95:15:83:E0:95:9B:2A:92:A8:92:03:30:CE:BE:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS60725.roa
Signing time:             Tue 05 Mar 2024 17:44:49 +0000
ROA not before:           Tue 05 Mar 2024 17:39:49 +0000
ROA not after:            Tue 04 Mar 2025 17:44:49 +0000
asID:                     60725
IP address blocks:        181.196.0.0/22 maxlen: 24
                          181.211.208.0/21 maxlen: 24
                          181.211.248.0/22 maxlen: 24
                          190.214.76.0/22 maxlen: 24
                          190.214.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.crl
                          rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:81:a9:3c:0e:f7:88:9e:6d:fc:f6:74:aa:4b:05:0a:8d:c6:1b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F8E7D0BF951583E0959B2A92A8920330CEBE59
        Validity
            Not Before: Mar  5 17:39:49 2024 GMT
            Not After : Mar  4 17:44:49 2025 GMT
        Subject: CN=5BCE9656EB768C6E157666837A297BAC2E630F32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9f:77:3c:a7:87:e9:d2:f2:06:d5:58:3b:66:
                    20:41:07:05:e0:7b:43:af:e4:d7:90:61:50:1a:a9:
                    ad:25:ad:3d:ff:c6:30:f2:b6:05:8f:78:ee:98:e9:
                    6d:9d:35:93:cf:7a:5c:74:76:45:20:5a:b5:1c:8c:
                    e3:aa:ba:59:c3:88:5d:47:a9:ac:01:6b:1c:7a:0a:
                    7e:ec:d1:cd:67:70:3d:a4:d7:a7:86:c4:32:55:76:
                    26:59:6e:aa:39:35:55:69:7c:78:4b:c7:ab:c8:67:
                    85:3a:30:14:1b:a1:12:5e:98:57:88:77:d3:09:2c:
                    f6:af:c6:12:86:e3:d6:0a:b1:4e:77:ff:14:fd:c1:
                    40:74:25:fc:6b:41:fb:87:2e:7a:6a:8c:bc:92:cb:
                    d3:63:fb:32:45:41:f1:35:c7:e1:7e:ae:31:85:28:
                    8c:f1:84:c9:18:b1:1a:61:c8:e3:fc:cf:95:9a:83:
                    5c:9e:a9:e5:d9:c6:e5:ae:e9:8c:f6:9e:d9:ec:ba:
                    37:43:a3:6b:0b:5d:1d:e1:61:04:f4:54:5e:99:95:
                    f3:21:55:76:a2:4f:65:56:d9:80:a1:2f:51:a5:da:
                    2a:55:a6:75:77:74:47:a6:99:a9:41:46:27:56:a2:
                    b3:7c:19:98:70:f9:0c:8f:e0:65:5e:36:4a:40:0d:
                    5b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CE:96:56:EB:76:8C:6E:15:76:66:83:7A:29:7B:AC:2E:63:0F:32
            X509v3 Authority Key Identifier:
                keyid:B6:F8:E7:D0:BF:95:15:83:E0:95:9B:2A:92:A8:92:03:30:CE:BE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS60725.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.196.0.0/22
                  181.211.208.0/21
                  181.211.248.0/22
                  190.214.76.0/22
                  190.214.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:1e:2c:9b:b6:a9:2f:6c:34:b0:6d:86:02:fa:74:c6:b3:91:
         fe:c3:a3:28:5b:5c:43:fc:41:fd:6d:7d:42:09:59:6c:d7:34:
         f5:d4:f7:da:5f:24:66:c6:2f:3f:53:b5:84:1c:5c:94:ce:d9:
         5e:df:45:14:de:92:77:df:73:41:fb:71:ff:62:a5:4f:29:09:
         41:ef:10:92:c6:a1:d3:5c:16:7c:8d:7f:93:1e:76:6d:8f:70:
         66:ed:86:0b:27:b0:ab:74:3c:da:de:b1:7c:d3:83:b7:e4:93:
         38:6e:ce:61:cc:03:a3:12:bf:40:05:c1:01:87:b7:57:9a:fb:
         88:9b:28:27:4c:d1:29:a5:3b:b5:f7:84:31:dc:64:f8:26:40:
         66:a6:f5:a9:e5:62:5d:37:92:7e:e8:c4:21:97:66:72:16:61:
         7e:d0:58:28:21:b8:1c:d4:52:a7:1e:ee:e0:1c:4e:7d:94:a4:
         e9:2e:a6:42:cc:e2:10:44:0f:9f:73:94:22:65:68:ef:59:8b:
         4c:07:be:9b:be:b6:39:fb:77:43:ff:5d:14:c1:d8:af:84:86:
         c5:9d:67:2e:37:fe:57:42:24:95:a8:66:bc:35:26:22:61:75:
         41:d3:bb:cf:ba:37:05:ac:d9:df:8d:3d:09:cf:4c:ed:b8:08:
         96:a6:76:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org