Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34302e302f32322d3234203d3e203237373638.roa
File:                     3230312e3231372e34302e302f32322d3234203d3e203237373638.roa (raw, json)
Hash identifier:          8zb26B72PmgOplAz1zuElu+OhscMQhNMScVYQaxNtno=
Subject key identifier:   D5:54:7B:F4:B6:FA:A0:34:4E:0D:81:32:CA:17:EA:71:95:95:24:E0
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       22C31F60509173F58B41F5DD30D216009B60A2D6
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34302e302f32322d3234203d3e203237373638.roa
Signing time:             Tue 05 Mar 2024 18:20:39 +0000
ROA not before:           Tue 05 Mar 2024 18:15:39 +0000
ROA not after:            Tue 04 Mar 2025 18:20:39 +0000
asID:                     27768
IP address blocks:        201.217.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c3:1f:60:50:91:73:f5:8b:41:f5:dd:30:d2:16:00:9b:60:a2:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Mar  5 18:15:39 2024 GMT
            Not After : Mar  4 18:20:39 2025 GMT
        Subject: CN=D5547BF4B6FAA0344E0D8132CA17EA71959524E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ad:76:3a:36:8e:8c:87:71:ed:9f:07:d1:3b:
                    23:20:bc:77:4b:6c:73:ab:bb:df:e7:6e:8c:e6:a5:
                    25:ff:92:b0:b2:35:c2:b4:a4:ac:07:a6:32:f7:2b:
                    ac:03:80:b6:a1:df:5e:23:82:50:d9:0c:e3:fa:62:
                    5c:5a:e5:1f:4e:38:58:e2:12:d8:68:18:0d:64:c7:
                    e7:b9:1b:a1:0b:72:59:34:29:e5:16:99:8e:08:35:
                    86:3f:a5:37:1d:23:b0:43:9c:a1:ca:63:9e:73:d9:
                    79:07:c5:fb:37:8e:20:53:1c:2d:60:d1:6f:02:b6:
                    4e:79:5d:4d:c6:d5:1c:1e:fc:f9:03:b1:63:e3:ab:
                    f8:3d:6d:2e:ce:52:5e:1b:23:c9:e0:bd:06:61:42:
                    a6:8b:29:b4:a7:9b:00:d7:b5:68:09:21:bf:40:46:
                    7f:1f:49:7f:a9:61:3a:14:c8:29:35:70:86:4a:d6:
                    64:07:91:6f:2b:41:15:22:b8:87:a7:1c:a7:b7:41:
                    09:78:fd:cc:ef:33:19:69:0c:3d:09:27:2e:1d:54:
                    de:dc:55:7e:d1:ca:4b:df:b1:d5:08:83:35:e2:81:
                    30:f6:c4:c1:5e:43:1a:c0:3b:6a:53:cf:40:67:91:
                    36:cc:d1:d6:27:a8:53:1c:fe:ed:e1:f4:7d:c9:e3:
                    03:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:54:7B:F4:B6:FA:A0:34:4E:0D:81:32:CA:17:EA:71:95:95:24:E0
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34302e302f32322d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:93:a8:89:8a:16:45:3d:7e:44:6c:0b:74:0c:26:fb:6c:df:
         eb:17:02:41:5d:9d:83:65:7f:85:45:47:fd:82:78:40:ef:83:
         8f:94:a3:e7:0a:08:3a:5d:f9:e4:e0:5a:92:c2:5f:8f:79:16:
         ba:e2:9d:13:ab:62:6f:80:f7:fe:94:0c:39:00:98:f8:c4:be:
         b7:a4:e3:c2:13:16:b6:ce:a3:b8:10:0b:43:19:43:44:5b:19:
         8a:d5:22:f7:5e:ba:70:04:8c:39:a6:3d:2f:e6:f9:cf:71:a4:
         4c:34:1b:95:d9:57:91:74:36:44:ee:ab:3f:a3:18:9b:a7:84:
         46:ae:3f:4f:fe:6f:c2:67:bc:36:f6:ed:77:13:d7:ae:90:27:
         c6:9e:bd:a2:9e:42:91:37:b9:d4:a4:67:b2:53:1f:e1:d3:eb:
         48:e1:ff:32:af:05:8c:d3:c2:3c:8e:c2:55:17:fb:e9:92:97:
         66:78:b9:ae:ea:3c:f3:cd:0a:8b:44:05:0f:77:b7:05:00:67:
         de:2d:d1:f0:e3:cb:e1:40:04:76:60:4f:47:8e:7f:cd:d9:89:
         e3:78:eb:75:03:62:d3:89:da:a4:b2:7c:8b:c2:12:57:ff:12:
         ed:54:06:1b:8a:6c:e9:85:91:ce:14:7d:2f:df:11:62:0f:69:
         a9:48:f4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:10 2024 by rpki-client on console-ams.rpki-client.org