Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3B74449D9A4BAAAE9B7522F651AA1156D0257EF8C613F79AC14D0DA3535A53E3/0/3138372e3130322e3230342e302f32322d3234203d3e20323730313133.roa
File:                     3138372e3130322e3230342e302f32322d3234203d3e20323730313133.roa (raw, json)
Hash identifier:          +V0mKbMiagg4nIuHqrlhB8Lhy8cdl/P9aDG6uDNxIco=
Subject key identifier:   7B:08:71:33:CE:50:E5:13:2F:75:14:F4:29:AD:F1:1F:54:9B:C2:D8
Certificate issuer:       /CN=6CA60F8C86AE97CFC070767C44A39A611589F61A
Certificate serial:       6B1246804DCEAA963898DF4E79D1D2EE736AE100
Authority key identifier: 6C:A6:0F:8C:86:AE:97:CF:C0:70:76:7C:44:A3:9A:61:15:89:F6:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CA60F8C86AE97CFC070767C44A39A611589F61A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3B74449D9A4BAAAE9B7522F651AA1156D0257EF8C613F79AC14D0DA3535A53E3/0/3138372e3130322e3230342e302f32322d3234203d3e20323730313133.roa
Signing time:             Wed 05 Jun 2024 02:55:00 +0000
ROA not before:           Wed 05 Jun 2024 02:50:00 +0000
ROA not after:            Wed 04 Jun 2025 02:55:00 +0000
asID:                     270113
IP address blocks:        187.102.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3B74449D9A4BAAAE9B7522F651AA1156D0257EF8C613F79AC14D0DA3535A53E3/0/6CA60F8C86AE97CFC070767C44A39A611589F61A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3B74449D9A4BAAAE9B7522F651AA1156D0257EF8C613F79AC14D0DA3535A53E3/0/6CA60F8C86AE97CFC070767C44A39A611589F61A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CA60F8C86AE97CFC070767C44A39A611589F61A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:12:46:80:4d:ce:aa:96:38:98:df:4e:79:d1:d2:ee:73:6a:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CA60F8C86AE97CFC070767C44A39A611589F61A
        Validity
            Not Before: Jun  5 02:50:00 2024 GMT
            Not After : Jun  4 02:55:00 2025 GMT
        Subject: CN=7B087133CE50E5132F7514F429ADF11F549BC2D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fc:67:a7:c2:00:a1:a5:fd:5d:66:34:17:94:
                    f3:55:8e:0f:b4:67:e9:07:2c:40:04:99:24:93:d5:
                    85:7f:bd:8c:03:76:71:42:1e:e2:34:d8:ad:42:6d:
                    9c:db:b6:43:b8:fe:bd:1e:a7:24:16:9a:f0:44:ad:
                    19:36:47:dd:8e:07:4b:cb:9d:93:60:1e:7b:8f:00:
                    91:16:77:42:5e:28:c8:50:cb:96:a1:64:80:e3:d7:
                    fc:10:bd:50:1a:e4:1f:3d:46:7c:30:83:74:7a:4f:
                    90:72:64:49:8c:aa:dc:8f:87:6d:c2:f3:d8:5e:c4:
                    07:c6:0c:2d:57:23:ec:08:10:4e:81:7f:fa:8a:1b:
                    83:5e:0a:f7:09:ff:43:2e:7d:b4:03:38:26:4d:6c:
                    8f:36:83:b5:65:d3:e9:d9:8f:f5:e0:db:d0:e8:4e:
                    31:33:5e:99:a3:0d:c5:9c:b7:df:6d:ef:d9:1b:29:
                    8c:cc:2d:c2:ef:8e:e3:59:de:a2:5d:0f:fd:39:12:
                    52:4e:56:42:a7:25:4c:57:20:c4:39:f1:ae:d3:3a:
                    aa:32:02:9a:0f:53:60:7b:90:7a:84:7e:a2:c6:fe:
                    b3:e5:b3:09:6c:21:d0:1a:6c:0d:1c:63:6a:9a:ec:
                    8b:3a:28:29:69:04:52:01:7b:6e:50:39:60:60:9f:
                    49:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:08:71:33:CE:50:E5:13:2F:75:14:F4:29:AD:F1:1F:54:9B:C2:D8
            X509v3 Authority Key Identifier:
                keyid:6C:A6:0F:8C:86:AE:97:CF:C0:70:76:7C:44:A3:9A:61:15:89:F6:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3B74449D9A4BAAAE9B7522F651AA1156D0257EF8C613F79AC14D0DA3535A53E3/0/6CA60F8C86AE97CFC070767C44A39A611589F61A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CA60F8C86AE97CFC070767C44A39A611589F61A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3B74449D9A4BAAAE9B7522F651AA1156D0257EF8C613F79AC14D0DA3535A53E3/0/3138372e3130322e3230342e302f32322d3234203d3e20323730313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:24:b5:a2:bc:b5:28:2f:e7:2f:85:a4:a0:f6:e3:4e:72:95:
         41:a7:ba:0f:54:ea:0b:93:b6:4e:22:5a:9c:0c:8f:ed:a7:90:
         96:c7:d7:8b:3c:9b:56:1c:3f:4c:ed:d3:dd:0b:f3:2c:de:fe:
         35:d6:82:fa:58:4b:4b:cf:9c:aa:25:5c:06:79:4f:41:d3:00:
         36:c6:67:a7:f1:a1:63:6f:05:0d:1c:13:3a:33:5e:36:0c:48:
         ec:e0:b6:4e:49:b4:cf:d7:ff:b2:8b:b1:b0:48:0c:32:d3:26:
         65:0c:9e:ec:c8:06:1a:65:68:42:6c:d6:c7:10:0e:c8:15:ae:
         8a:a2:d0:54:5d:70:58:7a:66:f2:8f:7d:02:3a:ee:26:d8:15:
         d7:5d:52:3f:da:d7:e5:c3:9c:24:31:67:13:90:e1:47:ed:f2:
         ff:d9:90:86:ca:b0:9c:0b:d5:79:da:8c:f1:90:49:e1:22:8a:
         0a:c1:2c:57:2a:04:a3:cf:9c:6c:db:ce:3a:ae:b8:5b:67:a6:
         34:64:a8:07:5e:ff:6f:62:e7:0e:57:a5:6b:68:80:3b:db:8e:
         24:49:cf:b1:dc:f5:0a:4b:f3:b5:fa:12:c9:85:a4:18:01:42:
         31:8e:a9:06:ad:56:cd:92:71:0a:3c:76:2e:78:23:4f:c3:bd:
         3f:51:1c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org