Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e31322e302f32342d3234203d3e203237383636.roa
File:                     3230312e3231372e31322e302f32342d3234203d3e203237383636.roa (raw, json)
Hash identifier:          11vYANjEQuyz+YCTPM9nqWYwjMrjTrmCyaZ6SC8KSE8=
Subject key identifier:   85:7E:94:B1:6E:1B:F1:7E:0A:A5:C1:BA:07:32:E3:89:5D:B8:99:4A
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       01004D9C58E4DDECC808C26BA4CB0E954594251C
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e31322e302f32342d3234203d3e203237383636.roa
Signing time:             Tue 05 Mar 2024 18:20:41 +0000
ROA not before:           Tue 05 Mar 2024 18:15:41 +0000
ROA not after:            Tue 04 Mar 2025 18:20:41 +0000
asID:                     27866
IP address blocks:        201.217.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:00:4d:9c:58:e4:dd:ec:c8:08:c2:6b:a4:cb:0e:95:45:94:25:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Mar  5 18:15:41 2024 GMT
            Not After : Mar  4 18:20:41 2025 GMT
        Subject: CN=857E94B16E1BF17E0AA5C1BA0732E3895DB8994A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:25:4f:ec:0d:84:f9:4b:cc:8b:57:3f:55:71:
                    71:3a:e4:f4:ed:60:7b:ee:77:68:e0:a7:12:35:de:
                    55:2a:6b:0b:1f:14:3b:d1:b5:1d:36:36:12:0f:e4:
                    7e:47:73:67:41:ee:d3:a6:74:b8:3b:66:b9:a9:08:
                    ba:e9:9e:fd:21:0d:af:eb:fd:c4:45:37:bd:5c:76:
                    7d:80:cf:3f:10:cb:4a:94:c7:ed:cf:3e:7a:cc:66:
                    4d:30:0a:9a:30:bd:87:b8:63:68:ac:fd:b0:5f:15:
                    d1:2b:8e:b9:c6:5d:b1:ec:16:c6:1a:d1:04:a6:d0:
                    f9:66:69:ce:e4:1b:c8:80:c7:25:58:2d:16:84:ac:
                    10:5d:5a:21:d7:86:1e:ad:d0:47:86:a3:7f:38:f0:
                    37:89:b3:b0:1a:3e:0f:45:6f:99:30:2b:6d:82:50:
                    96:65:ab:54:e1:04:b3:60:47:47:5e:e7:0c:37:d3:
                    2d:d5:94:0a:3f:ad:d2:62:5a:8a:4f:40:8e:aa:20:
                    b1:90:a8:fa:b9:a6:1f:b3:87:6a:b9:a2:aa:e2:7e:
                    dc:83:f1:ca:bc:d8:47:87:3a:a7:5b:12:d6:11:2f:
                    a9:e2:df:25:53:fa:7c:a4:36:90:15:86:9a:c8:67:
                    9e:8d:86:24:7f:25:00:b5:60:22:20:c6:a6:03:30:
                    f7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7E:94:B1:6E:1B:F1:7E:0A:A5:C1:BA:07:32:E3:89:5D:B8:99:4A
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e31322e302f32342d3234203d3e203237383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:41:51:fd:3e:b1:ba:ed:5b:84:cc:cf:0b:36:ce:de:fe:4f:
         c8:4f:48:fd:b7:ce:ec:05:fd:e3:3e:fd:df:7f:26:36:4e:92:
         27:3f:06:f9:ce:fb:1c:81:40:56:87:3a:6c:ca:9f:6b:32:c7:
         96:41:3d:c6:ae:8b:38:f2:5a:17:c7:0b:bf:6e:e4:6f:18:f1:
         a5:e3:4b:5d:29:35:3d:53:37:b4:63:54:08:5b:7f:a7:e1:55:
         ec:e8:ff:3a:21:0d:59:31:d9:9a:1f:c1:04:8f:09:f9:07:8f:
         0e:67:65:fd:a6:b9:c2:77:5a:18:f3:21:4d:a4:c4:e6:83:8a:
         7b:48:fa:b4:84:29:93:39:38:ff:c9:ad:ef:fb:4d:3f:98:03:
         b5:89:85:b9:2e:64:2b:3d:e1:3f:ce:21:1b:e7:ca:9e:8f:d7:
         39:a4:69:47:dd:55:d8:bd:bc:f4:cf:43:b2:d2:cc:2c:5f:ec:
         40:c5:a0:b8:fa:a7:5a:d1:95:5a:00:29:a7:f7:25:85:cd:88:
         59:f6:be:96:e7:11:75:0a:09:2a:27:42:d3:9c:6f:5c:43:d9:
         b9:cc:b6:9e:2b:bb:ca:07:b8:10:2c:8b:1d:b5:77:b4:b1:cf:
         b9:38:a3:a0:ff:8b:4c:48:22:95:67:fd:bd:c2:5d:b9:97:9e:
         52:b2:36:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:10 2024 by rpki-client on console-ams.rpki-client.org