Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8D6F35AF303AB4E57B8441B217295BE92CF56ADA4F5F96D96A22B53693E1E5A/0/3230312e3232322e34302e302f32342d3234203d3e20323733303830.roa
File:                     3230312e3232322e34302e302f32342d3234203d3e20323733303830.roa (raw, json)
Hash identifier:          MyM+wbDzXWSo1qkpFWqwPv9AQ6tHTmdBjYvAXD8igMc=
Subject key identifier:   A8:BB:F6:BD:77:AF:78:CA:B7:59:39:A5:A8:34:CB:CC:47:25:92:78
Certificate issuer:       /CN=F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234
Certificate serial:       6C647DAECE177196E35D20815A4070D111EE87DF
Authority key identifier: F6:8F:BD:9C:74:CC:60:A7:AB:5E:2F:EB:7F:22:24:47:D1:D1:F2:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8D6F35AF303AB4E57B8441B217295BE92CF56ADA4F5F96D96A22B53693E1E5A/0/3230312e3232322e34302e302f32342d3234203d3e20323733303830.roa
Signing time:             Tue 05 Mar 2024 18:15:16 +0000
ROA not before:           Tue 05 Mar 2024 18:10:16 +0000
ROA not after:            Tue 04 Mar 2025 18:15:16 +0000
asID:                     273080
IP address blocks:        201.222.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8D6F35AF303AB4E57B8441B217295BE92CF56ADA4F5F96D96A22B53693E1E5A/0/F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8D6F35AF303AB4E57B8441B217295BE92CF56ADA4F5F96D96A22B53693E1E5A/0/F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:64:7d:ae:ce:17:71:96:e3:5d:20:81:5a:40:70:d1:11:ee:87:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234
        Validity
            Not Before: Mar  5 18:10:16 2024 GMT
            Not After : Mar  4 18:15:16 2025 GMT
        Subject: CN=A8BBF6BD77AF78CAB75939A5A834CBCC47259278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ca:62:44:37:a8:0c:1d:5e:7a:56:25:39:3a:
                    8f:90:41:41:0c:92:77:94:f9:1b:7c:f1:03:81:e2:
                    a3:9a:94:72:19:46:9c:6a:b2:ef:32:d0:0c:bf:a6:
                    c7:d3:e3:ab:79:4a:a4:aa:5d:a2:65:1c:6a:c0:60:
                    48:2b:ba:71:70:87:9e:00:8c:3f:5d:82:c2:c2:74:
                    72:26:6d:ab:bd:b0:ac:a7:ed:72:40:13:6c:f2:7c:
                    b4:9d:77:63:c5:48:40:93:b2:a5:11:c7:3d:42:68:
                    0f:0f:93:4f:82:66:1b:6e:ff:de:da:d3:36:a9:8d:
                    6e:e8:6d:93:a5:46:d5:a9:41:40:44:8a:c8:cb:5b:
                    4d:33:9d:91:2b:5a:b1:94:9d:78:41:b7:67:8f:ee:
                    b3:55:e4:55:15:5d:b6:a1:1b:dc:9a:d1:c7:c8:ae:
                    33:41:f9:b6:0d:3d:d4:a2:5d:4e:4b:06:5d:72:90:
                    dc:a1:a8:d1:0e:05:3f:50:f2:b3:2b:86:cc:88:9b:
                    a7:c9:2b:c8:59:e6:cb:ca:62:c8:e4:fc:0e:28:77:
                    73:6c:9a:a5:50:1e:8e:4e:bf:5c:8a:4d:19:dc:fd:
                    8e:bc:5a:67:40:13:75:3b:60:72:b0:4e:f4:e9:e4:
                    e7:15:64:97:3b:3d:51:71:70:4c:62:d1:7f:b8:73:
                    b4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BB:F6:BD:77:AF:78:CA:B7:59:39:A5:A8:34:CB:CC:47:25:92:78
            X509v3 Authority Key Identifier:
                keyid:F6:8F:BD:9C:74:CC:60:A7:AB:5E:2F:EB:7F:22:24:47:D1:D1:F2:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8D6F35AF303AB4E57B8441B217295BE92CF56ADA4F5F96D96A22B53693E1E5A/0/F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8D6F35AF303AB4E57B8441B217295BE92CF56ADA4F5F96D96A22B53693E1E5A/0/3230312e3232322e34302e302f32342d3234203d3e20323733303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:5e:cc:f4:dd:4b:cf:df:0e:ab:94:c5:5a:d7:c4:ec:80:76:
         3a:b6:4b:ff:59:4e:14:92:43:03:43:e2:d9:d6:ff:6a:b1:a4:
         a4:68:b5:bc:0c:87:9c:39:d6:38:4a:71:01:1c:e0:04:f4:1c:
         1b:bb:1c:32:da:9f:40:36:03:40:00:bd:52:fc:cb:eb:c2:ed:
         66:e7:d2:0b:3d:c1:00:30:8c:ac:30:78:33:d1:1f:07:f1:96:
         6c:f4:28:e1:f4:80:3c:c2:3a:22:42:bf:cb:51:16:b0:fe:2f:
         e0:48:95:92:7d:b9:a7:16:37:db:d8:d2:af:94:d8:71:84:93:
         c4:f7:f5:1c:b6:7b:9d:01:0d:5d:03:52:06:ed:59:97:5f:76:
         65:19:8b:45:85:e6:19:35:a6:d7:f8:46:87:5e:8a:5d:67:32:
         97:1f:30:19:63:98:15:ee:3f:29:d2:fb:1b:9a:f8:fd:36:6e:
         f1:ea:55:86:c5:89:d5:2f:8b:a6:d8:97:dc:03:77:27:3a:e5:
         f9:6c:17:fe:24:bd:17:d9:3f:03:6f:d7:ab:81:1d:f2:73:ea:
         b5:13:3f:00:1c:35:c7:8a:81:a1:b5:23:c9:ea:bf:cd:a9:9d:
         ae:69:10:3a:52:1c:93:24:db:5c:af:e3:28:c6:f1:f2:f7:1b:
         3c:dd:51:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:11 2024 by rpki-client on console-ams.rpki-client.org