Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3134302e302f32332d3234203d3e203232333638.roa
File:                     3230312e3232312e3134302e302f32332d3234203d3e203232333638.roa (raw, json)
Hash identifier:          Le+/f5548wW4s0Jaq4vLW9BAMCIKWQQXDSGRo9iN+YU=
Subject key identifier:   1F:40:6A:79:82:06:C9:A8:7C:E7:BE:74:E1:0B:3D:3D:A6:55:CE:30
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       4590233ADDE5E8DE6958971C337C1D03AD797BFC
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3134302e302f32332d3234203d3e203232333638.roa
Signing time:             Tue 05 Mar 2024 18:05:59 +0000
ROA not before:           Tue 05 Mar 2024 18:00:59 +0000
ROA not after:            Tue 04 Mar 2025 18:05:59 +0000
asID:                     22368
IP address blocks:        201.221.140.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:90:23:3a:dd:e5:e8:de:69:58:97:1c:33:7c:1d:03:ad:79:7b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Mar  5 18:00:59 2024 GMT
            Not After : Mar  4 18:05:59 2025 GMT
        Subject: CN=1F406A798206C9A87CE7BE74E10B3D3DA655CE30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7b:da:00:72:bb:27:22:25:d3:23:78:14:ea:
                    74:2b:54:a5:f6:dd:e6:cf:30:cf:bb:16:43:91:ff:
                    5a:51:e3:d8:6c:43:a8:94:cf:8a:ec:ff:4c:b7:63:
                    fe:3c:0b:2c:7b:f9:e9:0d:75:0e:6d:16:12:f3:33:
                    66:76:7d:25:71:c1:6e:12:1c:dc:a4:5a:85:fc:d6:
                    59:b5:ab:4e:06:3d:c2:07:21:8d:83:44:a9:4b:f2:
                    35:c1:3e:d9:e2:45:e5:8f:56:2d:74:5f:b5:cc:63:
                    5c:fe:ba:16:90:bc:50:fd:56:71:ef:66:bf:6f:a5:
                    e8:a4:27:7d:9b:63:82:47:fd:08:bd:64:07:f8:3a:
                    33:4e:be:84:e1:26:50:19:1f:10:5b:f4:51:67:fe:
                    9b:d7:6b:0d:96:bf:d4:89:71:88:9b:62:ad:5c:75:
                    a4:0c:38:c4:b4:aa:64:47:85:fb:ff:49:89:62:cd:
                    f6:05:35:c4:f9:46:4b:da:18:d3:33:2d:db:22:4b:
                    71:42:e6:c8:18:86:64:09:20:0a:d6:06:65:73:88:
                    4a:00:4d:4d:2f:08:d7:a9:17:6e:92:12:ed:88:b6:
                    e2:a7:64:b5:af:da:62:24:30:56:9d:5c:5b:31:dd:
                    c3:48:4e:4d:5e:d8:0d:96:e5:98:e2:d6:55:af:34:
                    a0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:40:6A:79:82:06:C9:A8:7C:E7:BE:74:E1:0B:3D:3D:A6:55:CE:30
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3134302e302f32332d3234203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:47:b3:29:6b:32:6b:bb:0f:71:a8:cc:59:d6:05:03:6c:13:
         62:06:0b:8a:7e:ab:f2:da:1e:0c:89:7c:31:9e:33:19:0f:81:
         04:e7:4e:d1:44:54:cc:f7:83:0e:9f:65:df:ca:02:31:f5:2d:
         9e:af:7f:03:14:bd:66:c2:31:0f:ca:bf:6f:14:aa:06:8b:53:
         d2:55:b9:4d:d4:81:ba:cf:2b:af:99:ce:20:39:64:f5:4b:c4:
         48:1e:4c:be:bb:3b:9a:fe:18:bb:1e:1b:0d:b7:71:d9:e8:f0:
         b7:89:6c:38:c0:61:cb:1d:c1:88:84:8a:ae:71:f2:c7:c1:b9:
         85:13:2e:c2:d1:57:c3:3c:02:03:a9:96:fa:60:77:95:6c:46:
         b8:e1:11:31:64:8b:0e:58:b7:4f:7f:96:e6:3d:f2:89:bd:76:
         44:19:26:9b:a0:c4:d2:6f:76:f7:87:6a:31:1f:d4:ea:00:e8:
         31:2f:92:27:9e:f9:5e:e3:f7:51:fa:5b:f2:ab:55:c0:76:11:
         b7:00:5d:b4:ec:d2:f2:90:b7:35:da:cf:c4:6c:98:79:c5:e6:
         2b:7c:e9:83:70:76:64:51:ac:c7:26:df:b8:d6:6c:ba:55:39:
         b6:80:7d:de:03:55:d2:fd:4d:93:78:b2:81:cf:a7:45:20:37:
         df:8c:61:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 12:45:22 2024 by rpki-client on console-fra.rpki-client.org