Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e36302e302f32322d3234203d3e2037303439.roa
File:                     3230302e35392e36302e302f32322d3234203d3e2037303439.roa (raw, json)
Hash identifier:          QkBbhKoP/NSdvCsuQ54PnYZZcu1X23uktABNT2E2gvo=
Subject key identifier:   7B:BF:66:EF:5A:FB:86:C1:01:25:F5:C7:30:B7:DA:B2:02:87:31:40
Certificate issuer:       /CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
Certificate serial:       582A3EFDDB7DFBBC6D6AC7F16F7AFD97BBB19E36
Authority key identifier: A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e36302e302f32322d3234203d3e2037303439.roa
Signing time:             Tue 05 Mar 2024 17:46:58 +0000
ROA not before:           Tue 05 Mar 2024 17:41:58 +0000
ROA not after:            Tue 04 Mar 2025 17:46:58 +0000
asID:                     7049
IP address blocks:        200.59.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:2a:3e:fd:db:7d:fb:bc:6d:6a:c7:f1:6f:7a:fd:97:bb:b1:9e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6ACAC8EFF6DF8432618C600B74CDC544FED94B7
        Validity
            Not Before: Mar  5 17:41:58 2024 GMT
            Not After : Mar  4 17:46:58 2025 GMT
        Subject: CN=7BBF66EF5AFB86C10125F5C730B7DAB202873140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c5:4b:2b:18:b0:48:95:82:8d:d8:0b:18:1c:
                    ab:8e:44:2b:7c:0b:9a:24:70:32:22:12:f4:18:a9:
                    a5:24:73:d1:9a:c0:03:48:4f:87:07:a2:5a:f9:77:
                    f8:d7:ec:9c:ef:b8:9e:74:89:0b:a8:3a:9e:2d:75:
                    f0:10:1c:dd:e8:0e:b3:26:56:31:12:dc:77:85:39:
                    62:6a:33:7a:7d:d2:0b:c5:72:97:94:45:a7:5c:61:
                    e9:29:35:c7:de:f4:28:fa:ea:84:99:ef:2d:72:a7:
                    c9:a5:73:fe:52:9a:9a:63:8c:c3:b7:62:cf:c9:ce:
                    75:be:9e:d3:3d:7b:9f:50:28:e9:42:0e:5d:04:f4:
                    76:ee:e2:6b:68:30:85:2e:c6:a3:73:9e:58:b9:fb:
                    26:77:7e:29:74:0a:96:43:8e:48:55:02:21:ed:0e:
                    7e:2d:1e:3b:cb:02:0e:97:64:b1:7b:20:ea:79:10:
                    3d:30:55:76:64:a1:80:3d:37:97:5b:98:f3:30:4a:
                    4a:6d:5f:38:8d:aa:8f:be:41:55:49:20:11:24:7f:
                    a5:70:3d:0b:7e:ec:dc:1e:5e:d5:c1:5f:aa:25:41:
                    55:ee:4c:15:33:3b:63:51:a2:68:8d:54:16:65:ab:
                    37:02:8e:d3:be:8c:11:5a:8f:36:2b:01:6e:d9:d7:
                    d5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BF:66:EF:5A:FB:86:C1:01:25:F5:C7:30:B7:DA:B2:02:87:31:40
            X509v3 Authority Key Identifier:
                keyid:A6:AC:AC:8E:FF:6D:F8:43:26:18:C6:00:B7:4C:DC:54:4F:ED:94:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6ACAC8EFF6DF8432618C600B74CDC544FED94B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/975F2EEDC3CDC8A47ECBC63AEED537E5CEA54C721A90E76254B29FF4DC3F7F23/0/3230302e35392e36302e302f32322d3234203d3e2037303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         dd:f0:9c:1b:a4:c5:fe:ad:8b:2c:34:f2:0b:88:6d:9f:45:c1:
         88:af:39:9a:33:2b:18:08:30:42:94:ee:f8:21:5d:02:7e:99:
         a5:b7:b5:58:c6:c7:57:16:e6:9d:8d:e6:15:f1:35:c3:6f:d5:
         cc:bd:74:62:47:28:71:2a:c7:94:46:a8:04:71:a9:94:fa:62:
         f7:ec:96:e5:cd:b8:1c:aa:53:97:10:fd:10:2d:dc:7a:6b:40:
         ec:62:3e:e0:97:c6:80:df:3f:82:d2:7b:5d:7b:cd:33:a3:89:
         38:dc:cf:be:8e:c0:af:d9:9e:95:7f:c0:6b:65:5a:4a:de:f4:
         70:01:01:a5:0f:64:a0:eb:82:05:b0:83:2b:45:95:62:1a:df:
         3c:ee:b9:17:65:13:ec:69:7f:8a:65:2f:34:e8:1a:e7:12:2f:
         0e:4d:36:b4:2f:fe:9b:6b:94:c3:a2:79:2b:1d:1b:80:96:12:
         40:c3:e6:da:d0:87:c3:9f:32:36:e0:5d:26:f8:b8:fe:ef:1d:
         8d:36:b3:87:c1:81:d6:24:79:ff:d7:7a:54:79:29:30:cd:d4:
         e9:d3:bd:3a:4f:d8:5b:21:ad:32:c9:7a:31:79:65:95:fe:ae:
         02:f1:a3:c6:0f:40:2a:d9:7c:08:45:0d:0a:9e:4b:34:4a:1d:
         a5:a0:91:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 08:19:51 2024 by rpki-client on console-ams.rpki-client.org