Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0627D59BE184F8B29796A2BEBD56A14B047EEA593DB9E0A4508C5E3EFE594FED/0/3137372e37342e3130302e302f32322d3234203d3e20323731393437.roa
File:                     3137372e37342e3130302e302f32322d3234203d3e20323731393437.roa (raw, json)
Hash identifier:          eAZfNn4nqU51dCO7AapIH+jaRRJrkxY1vOfv4F/INfk=
Subject key identifier:   B8:1E:37:4B:8D:D5:55:7E:E6:25:69:C6:08:A6:66:F7:BE:7E:5C:4F
Certificate issuer:       /CN=F9368AF94C94EE2BA9F2475A45784CF8CEC616B7
Certificate serial:       57B5F15878B7A9A60ABFFA1D4CE57D75F6FF2F71
Authority key identifier: F9:36:8A:F9:4C:94:EE:2B:A9:F2:47:5A:45:78:4C:F8:CE:C6:16:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9368AF94C94EE2BA9F2475A45784CF8CEC616B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0627D59BE184F8B29796A2BEBD56A14B047EEA593DB9E0A4508C5E3EFE594FED/0/3137372e37342e3130302e302f32322d3234203d3e20323731393437.roa
Signing time:             Tue 05 Mar 2024 18:06:53 +0000
ROA not before:           Tue 05 Mar 2024 18:01:53 +0000
ROA not after:            Tue 04 Mar 2025 18:06:53 +0000
asID:                     271947
IP address blocks:        177.74.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0627D59BE184F8B29796A2BEBD56A14B047EEA593DB9E0A4508C5E3EFE594FED/0/F9368AF94C94EE2BA9F2475A45784CF8CEC616B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0627D59BE184F8B29796A2BEBD56A14B047EEA593DB9E0A4508C5E3EFE594FED/0/F9368AF94C94EE2BA9F2475A45784CF8CEC616B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9368AF94C94EE2BA9F2475A45784CF8CEC616B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b5:f1:58:78:b7:a9:a6:0a:bf:fa:1d:4c:e5:7d:75:f6:ff:2f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9368AF94C94EE2BA9F2475A45784CF8CEC616B7
        Validity
            Not Before: Mar  5 18:01:53 2024 GMT
            Not After : Mar  4 18:06:53 2025 GMT
        Subject: CN=B81E374B8DD5557EE62569C608A666F7BE7E5C4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:17:58:e5:5c:5f:7a:cf:55:29:09:bb:50:c2:
                    cf:9a:73:84:98:b5:cd:17:30:2b:d1:6c:b5:f5:13:
                    62:56:98:ec:1a:fb:7c:0b:cb:31:fa:8e:b2:0d:33:
                    24:5e:d3:7d:c1:48:80:bf:58:82:78:d0:83:17:8b:
                    0a:9a:3d:40:7b:d8:84:a0:48:24:83:39:f8:73:95:
                    bc:d4:fb:62:a1:63:74:e8:aa:cd:a8:ea:41:fe:92:
                    a1:03:e7:20:e2:ca:f6:8e:72:08:92:02:c4:4a:50:
                    7a:d2:64:74:34:94:bf:73:db:c7:9c:3d:90:2b:dd:
                    ec:cb:37:a7:bf:b6:e0:65:0d:bc:02:9f:c1:5b:d8:
                    03:f5:81:72:e7:56:49:7c:c8:2f:cf:24:1d:75:1f:
                    f3:cc:27:29:43:94:92:5e:dd:52:ef:b6:28:7d:87:
                    de:0f:5c:3f:2a:fa:3b:ab:63:36:10:f1:96:33:70:
                    0f:fe:a4:6c:d5:f8:5b:3b:5f:e4:09:11:93:29:5e:
                    68:0a:8d:50:dc:15:55:d8:ef:ce:2c:36:27:38:dd:
                    bc:4d:5a:ca:58:96:21:a9:39:ce:4e:b9:d9:79:6b:
                    de:ba:6b:82:47:85:63:68:49:1c:3c:80:2f:c6:ea:
                    0f:e9:04:94:f5:06:c5:d6:63:fd:81:de:87:5e:f7:
                    fc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1E:37:4B:8D:D5:55:7E:E6:25:69:C6:08:A6:66:F7:BE:7E:5C:4F
            X509v3 Authority Key Identifier:
                keyid:F9:36:8A:F9:4C:94:EE:2B:A9:F2:47:5A:45:78:4C:F8:CE:C6:16:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0627D59BE184F8B29796A2BEBD56A14B047EEA593DB9E0A4508C5E3EFE594FED/0/F9368AF94C94EE2BA9F2475A45784CF8CEC616B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9368AF94C94EE2BA9F2475A45784CF8CEC616B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0627D59BE184F8B29796A2BEBD56A14B047EEA593DB9E0A4508C5E3EFE594FED/0/3137372e37342e3130302e302f32322d3234203d3e20323731393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:a7:be:c5:d5:81:d8:9f:cd:e6:7d:76:d8:0b:ca:4e:a6:2a:
         5f:be:e9:f2:e2:43:99:5c:66:1c:70:8c:40:b4:c4:6f:29:88:
         80:da:67:ae:83:0c:92:0d:3c:48:78:0c:1d:d2:d8:b5:92:fd:
         d7:79:3e:e0:cb:02:dd:6d:a5:7c:46:7c:e6:8e:c2:10:b2:98:
         87:84:bd:c5:55:b2:62:59:00:a6:22:28:7a:2c:e6:e8:af:e5:
         a7:35:3c:fa:0b:e0:15:87:32:f7:a3:54:39:ea:d3:b8:23:4b:
         93:4a:fa:1d:12:62:20:e0:25:2c:30:a1:60:6e:19:94:e1:91:
         26:83:f4:e5:e4:77:8a:7e:7e:78:fe:59:70:9f:4b:e6:13:c1:
         28:51:57:62:2a:6b:0c:04:bf:c2:13:bc:ae:38:85:f2:66:91:
         0d:b7:81:ff:ac:0a:cc:a9:20:54:e5:e0:26:d1:4f:ed:13:b7:
         63:86:d3:5a:4f:94:cf:d0:4c:2c:d7:b6:23:83:d2:2b:d4:9e:
         77:ee:e7:d0:47:98:94:2b:2f:75:24:4e:64:e2:93:ea:15:32:
         9a:0e:da:8d:f2:e4:96:b5:fd:be:de:25:a1:34:4e:de:fe:de:
         59:dc:fa:ea:6d:8f:0c:74:df:74:84:a9:ad:8a:14:b3:d9:52:
         02:0b:6d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:34 2024 by rpki-client on console-ams.rpki-client.org