Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/3133312e3235352e36302e302f32322d3234203d3e20323633363939.roa
File:                     3133312e3235352e36302e302f32322d3234203d3e20323633363939.roa (raw, json)
Hash identifier:          /KMasbqDvXgLtfGHyNY4xOKkw1HwWQFqcxJTpIuIEJA=
Subject key identifier:   CD:DB:2F:B9:EC:CD:C9:77:8D:8D:9C:42:F2:61:4F:7B:71:E3:6E:0F
Certificate issuer:       /CN=5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F
Certificate serial:       045A4C13626384CA294B5C4F1853514BE1D18798
Authority key identifier: 5E:40:F5:09:D8:EC:34:62:F8:B8:D1:E2:2D:50:FF:EE:08:48:A4:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/3133312e3235352e36302e302f32322d3234203d3e20323633363939.roa
Signing time:             Tue 05 Mar 2024 17:55:41 +0000
ROA not before:           Tue 05 Mar 2024 17:50:41 +0000
ROA not after:            Tue 04 Mar 2025 17:55:41 +0000
asID:                     263699
IP address blocks:        131.255.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5a:4c:13:62:63:84:ca:29:4b:5c:4f:18:53:51:4b:e1:d1:87:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F
        Validity
            Not Before: Mar  5 17:50:41 2024 GMT
            Not After : Mar  4 17:55:41 2025 GMT
        Subject: CN=CDDB2FB9ECCDC9778D8D9C42F2614F7B71E36E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:d3:21:bf:80:f6:12:6c:d6:e8:9a:46:10:
                    a1:1d:2e:01:a3:fc:1c:2c:dd:4a:b2:c8:32:6e:9a:
                    f9:e2:ce:66:83:63:ac:e9:96:07:29:8b:38:a6:f2:
                    a1:7a:d1:7b:4d:a8:4f:88:21:6d:5a:be:0f:af:41:
                    ba:aa:90:94:e3:aa:76:30:be:4c:48:35:db:74:c0:
                    80:c2:62:6b:20:a6:89:8a:26:cf:af:e0:1b:70:05:
                    ec:3f:da:48:37:e7:3c:97:ee:a7:89:38:db:df:a3:
                    97:2e:fd:7e:29:aa:9a:e6:6e:11:bf:51:20:57:68:
                    63:9e:cf:ed:3c:ef:70:e4:c4:dc:2d:49:d8:76:ac:
                    9c:ee:2c:05:ed:43:6e:95:41:24:38:b4:66:96:af:
                    a1:f7:43:fd:71:6c:01:0b:25:ea:dc:b0:76:aa:47:
                    2c:0a:82:8f:b4:69:10:81:66:7b:79:dc:22:63:44:
                    b9:1c:e4:2a:a0:8e:a2:42:6e:9b:e7:22:79:c9:00:
                    cb:eb:b5:8e:40:ea:77:a8:59:a2:d2:70:52:7e:0f:
                    2c:e0:a2:54:eb:36:b0:4d:af:1a:db:78:6c:37:1a:
                    57:2d:76:46:da:a4:d1:8c:85:e3:d2:e1:7c:21:70:
                    b8:14:7d:97:4b:f6:03:4d:d2:21:39:22:9d:f5:73:
                    35:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DB:2F:B9:EC:CD:C9:77:8D:8D:9C:42:F2:61:4F:7B:71:E3:6E:0F
            X509v3 Authority Key Identifier:
                keyid:5E:40:F5:09:D8:EC:34:62:F8:B8:D1:E2:2D:50:FF:EE:08:48:A4:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E40F509D8EC3462F8B8D1E22D50FFEE0848A41F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DADF6F2635782C95EA66F8DD5DB0E82E1AFA021F7BFD5F93A49B990278F350A5/0/3133312e3235352e36302e302f32322d3234203d3e20323633363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d8:73:2c:72:4b:d3:4b:e0:83:af:79:ca:58:97:01:c3:60:83:
         07:80:6b:1d:d0:b4:ce:bd:a0:38:1e:81:5b:28:59:75:a5:32:
         ff:b2:57:96:20:57:1b:3b:cc:4e:07:b9:96:08:20:ad:57:eb:
         08:33:3e:d8:76:d9:e7:a7:1d:b7:4c:1a:32:88:13:cb:95:32:
         82:25:b1:0c:b5:01:66:0a:04:be:11:ef:8d:34:29:d1:d3:4b:
         a2:7b:8b:62:7d:68:31:ae:03:00:2f:cd:f6:a1:6d:60:0a:f1:
         57:a9:03:6c:a0:38:51:36:ce:90:a4:61:6d:d8:4a:84:a8:a9:
         84:20:39:c5:3e:e9:57:95:e5:d0:a9:53:12:5b:c4:2b:67:47:
         05:0b:38:53:19:6e:de:c5:22:89:84:60:4e:8d:ea:90:90:5a:
         6d:db:b0:80:b4:86:fb:5b:9f:e0:f4:1a:8a:19:4d:27:03:8a:
         02:5c:e8:84:5b:57:91:fb:e1:4f:34:a4:8e:4d:bd:c2:83:dc:
         81:d0:c5:02:d9:7c:0a:1b:13:cd:c9:68:67:cd:03:7f:01:af:
         e5:4f:1d:96:94:55:b5:bb:dd:de:64:21:c4:2f:d3:ef:96:ce:
         26:7d:70:50:83:96:09:e2:66:95:a0:fb:a9:b0:b0:2f:49:c3:
         75:12:6f:48
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUBFpME2JjhMopS1xPGFNRS+HRh5gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUU0MEY1MDlEOEVDMzQ2MkY4QjhEMUUyMkQ1MEZGRUUw
ODQ4QTQxRjAeFw0yNDAzMDUxNzUwNDFaFw0yNTAzMDQxNzU1NDFaMDMxMTAvBgNV
BAMTKENEREIyRkI5RUNDREM5Nzc4RDhEOUM0MkYyNjE0RjdCNzFFMzZFMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuG9Mhv4D2EmzW6JpGEKEdLgGj
/Bws3UqyyDJumvnizmaDY6zplgcpizim8qF60XtNqE+IIW1avg+vQbqqkJTjqnYw
vkxINdt0wIDCYmsgpomKJs+v4BtwBew/2kg35zyX7qeJONvfo5cu/X4pqprmbhG/
USBXaGOez+0873DkxNwtSdh2rJzuLAXtQ26VQSQ4tGaWr6H3Q/1xbAELJercsHaq
RywKgo+0aRCBZnt53CJjRLkc5CqgjqJCbpvnInnJAMvrtY5A6neoWaLScFJ+Dyzg
olTrNrBNrxrbeGw3GlctdkbapNGMhePS4XwhcLgUfZdL9gNN0iE5Ip31czU9AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUzdsvuezNyXeNjZxC8mFPe3Hjbg8wHwYDVR0j
BBgwFoAUXkD1CdjsNGL4uNHiLVD/7ghIpB8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQURGNkYyNjM1NzgyQzk1RUE2NkY4REQ1REIwRTgyRTFB
RkEwMjFGN0JGRDVGOTNBNDlCOTkwMjc4RjM1MEE1LzAvNUU0MEY1MDlEOEVDMzQ2
MkY4QjhEMUUyMkQ1MEZGRUUwODQ4QTQxRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RTQwRjUwOUQ4RUMzNDYyRjhC
OEQxRTIyRDUwRkZFRTA4NDhBNDFGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREFERjZGMjYzNTc4MkM5NUVBNjZGOERENURCMEU4MkUxQUZBMDIxRjdC
RkQ1RjkzQTQ5Qjk5MDI3OEYzNTBBNS8wLzMxMzMzMTJlMzIzNTM1MmUzNjMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzYzOTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg/88
MA0GCSqGSIb3DQEBCwUAA4IBAQDYcyxyS9NL4IOvecpYlwHDYIMHgGsd0LTOvaA4
HoFbKFl1pTL/sleWIFcbO8xOB7mWCCCtV+sIMz7Ydtnnpx23TBoyiBPLlTKCJbEM
tQFmCgS+Ee+NNCnR00uie4tifWgxrgMAL832oW1gCvFXqQNsoDhRNs6QpGFt2EqE
qKmEIDnFPulXleXQqVMSW8QrZ0cFCzhTGW7exSKJhGBOjeqQkFpt27CAtIb7W5/g
9BqKGU0nA4oCXOiEW1eR++FPNKSOTb3Cg9yB0MUC2XwKGxPNyWhnzQN/Aa/lTx2W
lFW1u93eZCHEL9Pvls4mfXBQg5YJ4maVoPupsLAvScN1Em9I
-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:01 2024 by rpki-client on console-ams.rpki-client.org