Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/135269C8F045B34BA90C220DCF4BFB4E07D36616F1E344BCCA762FF8C89B7D6D/0/3137372e33372e34302e302f32322d3234203d3e20323639393638.roa
File:                     3137372e33372e34302e302f32322d3234203d3e20323639393638.roa (raw, json)
Hash identifier:          s5E+50Qc4g9frf0evZszCBLbPBqO90YJDv9L80MK7Ms=
Subject key identifier:   72:44:45:13:BF:BC:C6:CB:A0:B5:16:27:1B:13:46:2B:EC:BA:48:87
Certificate issuer:       /CN=EAD2502C78405A42EC2C9FEF1E578B5FA16B75E0
Certificate serial:       319958DCFE5C00A4CAC30F2F866CC0084F40CD89
Authority key identifier: EA:D2:50:2C:78:40:5A:42:EC:2C:9F:EF:1E:57:8B:5F:A1:6B:75:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EAD2502C78405A42EC2C9FEF1E578B5FA16B75E0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/135269C8F045B34BA90C220DCF4BFB4E07D36616F1E344BCCA762FF8C89B7D6D/0/3137372e33372e34302e302f32322d3234203d3e20323639393638.roa
Signing time:             Tue 05 Mar 2024 18:13:36 +0000
ROA not before:           Tue 05 Mar 2024 18:08:36 +0000
ROA not after:            Tue 04 Mar 2025 18:13:36 +0000
asID:                     269968
IP address blocks:        177.37.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/135269C8F045B34BA90C220DCF4BFB4E07D36616F1E344BCCA762FF8C89B7D6D/0/EAD2502C78405A42EC2C9FEF1E578B5FA16B75E0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/135269C8F045B34BA90C220DCF4BFB4E07D36616F1E344BCCA762FF8C89B7D6D/0/EAD2502C78405A42EC2C9FEF1E578B5FA16B75E0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EAD2502C78405A42EC2C9FEF1E578B5FA16B75E0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 17:25:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:99:58:dc:fe:5c:00:a4:ca:c3:0f:2f:86:6c:c0:08:4f:40:cd:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAD2502C78405A42EC2C9FEF1E578B5FA16B75E0
        Validity
            Not Before: Mar  5 18:08:36 2024 GMT
            Not After : Mar  4 18:13:36 2025 GMT
        Subject: CN=72444513BFBCC6CBA0B516271B13462BECBA4887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2b:54:b7:ba:0c:d2:26:fe:93:f5:b8:c3:f2:
                    59:3c:b2:07:e6:28:59:01:77:35:79:32:e1:55:d9:
                    c9:f1:d9:ac:20:e9:5a:58:fc:19:90:fc:dd:c8:ca:
                    bc:f8:56:44:05:31:51:cd:8f:2d:8e:68:f5:6f:ce:
                    20:00:f4:ff:5a:d2:7f:ef:9e:da:1c:dd:12:54:bb:
                    7c:ec:68:81:d6:11:0d:fa:ae:8a:0c:53:31:63:59:
                    ff:5a:97:47:17:6f:90:ec:5d:a8:c5:03:bd:a7:2b:
                    15:5e:b7:03:18:33:9b:c2:1d:4c:e2:f4:9a:11:6b:
                    ab:00:27:cd:82:55:96:7b:fc:a0:02:c9:a0:76:76:
                    93:f4:65:a9:f5:ae:6b:56:55:f4:c5:a5:42:4f:65:
                    da:1a:4c:6d:72:3a:5b:68:51:31:16:7d:70:85:f3:
                    d2:82:c2:10:19:58:7c:e0:53:5a:bd:a4:07:4f:eb:
                    fb:ed:81:30:4a:a5:3d:4a:91:75:47:7a:6c:57:0f:
                    f4:31:36:f3:dd:3d:b3:e2:60:21:5f:d8:cd:81:96:
                    9a:57:df:96:c9:53:b6:39:51:e5:f5:fa:01:bd:0b:
                    d6:c2:b2:84:02:6e:78:39:f0:88:a0:68:75:3e:a9:
                    5c:e3:d3:28:19:db:e9:a3:61:a8:84:bc:ea:b3:27:
                    34:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:44:45:13:BF:BC:C6:CB:A0:B5:16:27:1B:13:46:2B:EC:BA:48:87
            X509v3 Authority Key Identifier:
                keyid:EA:D2:50:2C:78:40:5A:42:EC:2C:9F:EF:1E:57:8B:5F:A1:6B:75:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/135269C8F045B34BA90C220DCF4BFB4E07D36616F1E344BCCA762FF8C89B7D6D/0/EAD2502C78405A42EC2C9FEF1E578B5FA16B75E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EAD2502C78405A42EC2C9FEF1E578B5FA16B75E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/135269C8F045B34BA90C220DCF4BFB4E07D36616F1E344BCCA762FF8C89B7D6D/0/3137372e33372e34302e302f32322d3234203d3e20323639393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:d0:16:a8:79:c0:52:18:3b:5f:3a:9a:f2:36:bc:2a:8f:01:
         d2:a1:27:3a:11:8a:37:77:84:4e:f1:f4:11:d7:35:ae:6b:96:
         15:dd:6e:0f:d5:c5:69:05:42:a4:cf:f3:2d:b2:df:08:d2:88:
         48:d2:72:c2:26:33:0e:93:9d:d5:42:a2:7c:82:09:8f:e7:f4:
         95:b9:b8:09:c1:56:b7:f4:71:b4:42:6e:bf:18:18:46:76:81:
         66:ae:95:03:db:95:f9:aa:16:f6:ea:ab:69:44:af:38:89:43:
         2e:f1:41:e8:64:ae:48:b5:08:63:49:64:6e:5c:04:53:9a:f6:
         a4:30:21:c1:4e:fd:fc:7c:a8:e1:26:96:5c:58:33:ad:ca:41:
         a2:f5:c7:e7:eb:2c:d1:be:2e:14:8f:6c:66:47:14:2e:16:d5:
         8d:01:22:e5:b1:06:35:59:30:16:f6:42:38:9a:36:41:bf:50:
         4f:e3:c1:5b:a3:91:58:d7:87:c7:34:7e:9d:22:24:8c:8c:47:
         73:f9:98:bb:73:70:7d:e1:d3:c2:50:07:75:ca:e7:0e:dc:d0:
         e9:99:fb:8c:cb:81:88:c4:62:35:90:9b:fe:7c:aa:27:1d:8f:
         48:30:b0:ef:d0:ac:fa:83:eb:06:11:b2:ce:7b:d9:01:2a:9f:
         d3:95:5e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 14:32:36 2024 by rpki-client on console-fra.rpki-client.org