Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B8734D14F6C398017F3DF4D71ECA11AD0BAFE191F1C6D609D3815F6EE2FB11E/0/3137372e3132362e33322e302f32322d3232203d3e20323731383032.roa
File:                     3137372e3132362e33322e302f32322d3232203d3e20323731383032.roa (raw, json)
Hash identifier:          Qz7eaLkF6wzu/JC8+T+7XnjE+niiDSUmY2VeGAsZO9I=
Subject key identifier:   C5:A6:0B:69:FE:3C:54:52:1D:00:B2:A0:EF:2D:77:FE:4F:DE:09:AB
Certificate issuer:       /CN=F54F6694D527A6831B6534FF31AE6F8C3BCCAADA
Certificate serial:       64C844D2541068FF3DC0508A9D81DC9D989C6B21
Authority key identifier: F5:4F:66:94:D5:27:A6:83:1B:65:34:FF:31:AE:6F:8C:3B:CC:AA:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F54F6694D527A6831B6534FF31AE6F8C3BCCAADA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B8734D14F6C398017F3DF4D71ECA11AD0BAFE191F1C6D609D3815F6EE2FB11E/0/3137372e3132362e33322e302f32322d3232203d3e20323731383032.roa
Signing time:             Tue 05 Mar 2024 17:43:37 +0000
ROA not before:           Tue 05 Mar 2024 17:38:37 +0000
ROA not after:            Tue 04 Mar 2025 17:43:37 +0000
asID:                     271802
IP address blocks:        177.126.32.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B8734D14F6C398017F3DF4D71ECA11AD0BAFE191F1C6D609D3815F6EE2FB11E/0/F54F6694D527A6831B6534FF31AE6F8C3BCCAADA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B8734D14F6C398017F3DF4D71ECA11AD0BAFE191F1C6D609D3815F6EE2FB11E/0/F54F6694D527A6831B6534FF31AE6F8C3BCCAADA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F54F6694D527A6831B6534FF31AE6F8C3BCCAADA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c8:44:d2:54:10:68:ff:3d:c0:50:8a:9d:81:dc:9d:98:9c:6b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F54F6694D527A6831B6534FF31AE6F8C3BCCAADA
        Validity
            Not Before: Mar  5 17:38:37 2024 GMT
            Not After : Mar  4 17:43:37 2025 GMT
        Subject: CN=C5A60B69FE3C54521D00B2A0EF2D77FE4FDE09AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:53:af:f4:09:fb:e0:2f:27:4b:15:96:06:b3:
                    a6:89:b2:7b:43:5a:9c:70:d0:28:2e:92:6b:02:f9:
                    84:d3:40:63:ad:8b:bd:a3:40:bb:9a:01:9d:cb:bb:
                    c6:0b:36:ee:3c:81:44:0c:35:e3:3d:21:93:56:64:
                    c7:a7:a6:6b:cb:1a:5f:c1:a6:90:77:f5:f6:c6:4e:
                    70:bd:8b:0a:7e:b0:bd:4f:65:8f:d3:62:e8:57:00:
                    af:22:e6:88:e8:b4:2a:8c:e5:f7:3c:69:79:e1:a9:
                    60:85:41:90:d8:92:30:7b:8b:7c:70:a4:fe:45:62:
                    7d:3c:43:49:b6:4b:aa:29:a0:cf:2b:11:2f:ba:b8:
                    51:26:61:b1:24:c1:43:c2:a5:2b:de:09:0e:5e:e5:
                    c4:c5:61:4f:13:95:62:05:0c:42:74:99:e4:9f:07:
                    18:92:31:f5:62:5a:34:1d:62:8a:41:23:7d:9e:f7:
                    f8:ee:92:5b:80:2b:c4:0b:b2:86:16:1d:c8:f8:38:
                    63:c0:5f:e0:ef:47:48:d7:df:85:32:22:d8:29:bf:
                    ce:0e:62:4d:e0:89:6e:a3:7e:8f:b8:77:b0:e4:8e:
                    83:07:b4:27:40:81:bd:84:4b:e2:fe:11:f9:c4:c2:
                    30:6b:2e:96:9a:db:42:1e:22:dd:a0:d0:94:a8:bf:
                    38:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A6:0B:69:FE:3C:54:52:1D:00:B2:A0:EF:2D:77:FE:4F:DE:09:AB
            X509v3 Authority Key Identifier:
                keyid:F5:4F:66:94:D5:27:A6:83:1B:65:34:FF:31:AE:6F:8C:3B:CC:AA:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B8734D14F6C398017F3DF4D71ECA11AD0BAFE191F1C6D609D3815F6EE2FB11E/0/F54F6694D527A6831B6534FF31AE6F8C3BCCAADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F54F6694D527A6831B6534FF31AE6F8C3BCCAADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B8734D14F6C398017F3DF4D71ECA11AD0BAFE191F1C6D609D3815F6EE2FB11E/0/3137372e3132362e33322e302f32322d3232203d3e20323731383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:14:f8:97:c3:77:6f:6b:08:35:39:cd:db:bf:74:b9:a4:64:
         80:cb:a0:5d:c5:d3:1a:15:26:3b:17:e9:30:bb:7c:ce:24:80:
         30:97:62:a6:90:8a:89:66:47:f8:11:11:e0:a3:e6:53:09:dd:
         c5:6e:30:7c:26:5d:52:0a:b9:28:e2:17:00:d9:76:e1:c6:b5:
         25:8b:c4:ac:15:3a:49:47:7d:1c:86:b1:dc:38:40:13:f2:e7:
         24:79:12:15:96:80:53:4b:f7:c9:d1:23:f9:e8:4b:a6:b8:aa:
         ab:fc:d0:b1:90:09:8b:0e:ec:b7:d8:e4:35:b8:4f:92:d8:8d:
         b5:d0:b4:21:59:6a:4c:8f:93:0a:5c:19:db:c0:f9:8e:1c:73:
         94:94:af:74:44:20:e2:c9:59:92:e7:86:f4:af:7e:67:8d:04:
         31:bb:97:5b:3a:36:5b:f4:48:8b:34:02:be:60:e2:0e:5a:a9:
         ed:0e:1e:1e:93:c0:87:84:6f:95:ae:57:39:d1:dd:9a:f2:e2:
         07:5a:cd:63:fd:66:5b:96:6f:8e:01:2f:02:4c:28:e6:b0:7b:
         8f:51:b7:2e:f2:bb:7c:12:e3:db:6f:ca:69:38:f2:b7:2b:59:
         67:9e:df:66:d6:c9:1d:0a:56:0e:7d:f6:6b:14:3f:27:7a:17:
         3d:e7:0b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:14 2024 by rpki-client on console-ams.rpki-client.org