Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38342e302f32342d3234203d3e203238343332.roa
File:                     3137372e3132342e38342e302f32342d3234203d3e203238343332.roa (raw, json)
Hash identifier:          Xjpn6s/En9ysoFuWzcfNVXBIc+gfP9h2lwiuQwbX5zQ=
Subject key identifier:   0A:03:6F:B2:A7:AB:18:EC:B1:B0:BB:4B:A1:F4:88:77:4B:B2:9B:76
Certificate issuer:       /CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9
Certificate serial:       1595D4C4BB328D5B1339873752EB98A2C37F1EC8
Authority key identifier: 68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38342e302f32342d3234203d3e203238343332.roa
Signing time:             Tue 04 Feb 2025 18:55:45 +0000
ROA not before:           Tue 04 Feb 2025 18:50:45 +0000
ROA not after:            Tue 03 Feb 2026 18:55:45 +0000
asID:                     28432
IP address blocks:        177.124.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:95:d4:c4:bb:32:8d:5b:13:39:87:37:52:eb:98:a2:c3:7f:1e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9
        Validity
            Not Before: Feb  4 18:50:45 2025 GMT
            Not After : Feb  3 18:55:45 2026 GMT
        Subject: CN=0A036FB2A7AB18ECB1B0BB4BA1F488774BB29B76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c4:61:a4:c0:e9:6a:12:55:80:67:de:0a:b3:
                    a7:f7:eb:4d:e8:69:64:72:e0:ff:f7:9e:68:25:94:
                    fe:ab:c1:ae:fe:89:e1:46:92:11:6c:2a:20:ce:8f:
                    1a:f0:22:e4:86:bd:63:12:ea:3b:05:d6:7f:5e:78:
                    a3:a7:40:5b:b2:03:ec:d4:97:c5:73:7b:18:26:13:
                    14:24:84:bf:4f:3d:86:e2:4d:da:2f:fe:e8:b8:7b:
                    18:4d:31:18:85:de:77:28:1d:f3:2d:a0:0e:a4:4c:
                    d0:d6:b2:80:db:45:cc:49:3c:db:73:b0:f4:36:e8:
                    0b:84:5d:25:75:23:b9:34:44:bc:8d:aa:a4:6d:b9:
                    d5:b3:e7:70:1e:79:5d:23:aa:11:9c:d0:19:72:95:
                    cf:b0:72:a6:ba:e8:90:66:1f:84:9e:f7:30:25:a4:
                    c5:5b:72:9a:36:0a:af:a6:97:a3:0e:fb:53:a0:29:
                    13:e3:68:a4:c0:ea:e0:f2:db:b9:b2:be:c4:96:61:
                    ea:06:71:38:bb:b7:7d:16:77:98:63:ed:34:37:bd:
                    71:48:ba:bd:13:9f:a2:1a:be:17:c1:65:a9:4e:45:
                    d2:61:21:57:f9:dc:59:7e:27:03:a4:3a:a0:dc:6f:
                    12:f9:bb:9e:47:5b:5f:2f:9e:3b:3b:ca:22:79:51:
                    45:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:03:6F:B2:A7:AB:18:EC:B1:B0:BB:4B:A1:F4:88:77:4B:B2:9B:76
            X509v3 Authority Key Identifier:
                keyid:68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38342e302f32342d3234203d3e203238343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:ee:cf:3e:8c:3d:fc:da:bc:13:0a:b8:be:5f:3f:19:10:40:
         af:11:4f:17:69:6a:fd:ed:a7:85:b1:ad:41:88:0e:5a:84:fd:
         87:1a:e3:2b:7b:32:c1:ef:57:3c:d2:1a:f0:f4:25:48:93:a1:
         1c:cf:b3:ce:4e:1a:f8:f2:a7:b8:35:98:3d:2c:7e:77:13:56:
         3c:4e:32:e5:07:2a:33:07:e9:a6:b5:ee:37:6e:3e:24:34:c6:
         b6:fa:2d:bf:e6:2a:77:64:29:f0:85:45:ea:ad:65:c7:4f:2f:
         8e:a1:59:56:d9:0c:1b:e9:34:7b:f9:b7:f5:90:93:9b:c4:db:
         2f:88:78:c3:89:11:09:9b:88:c4:9b:4e:14:bf:42:03:5c:9c:
         61:41:e1:40:0c:ac:c7:b8:95:23:a4:ee:c4:bb:6d:5f:a2:e6:
         60:d1:cc:13:f5:03:88:5c:a7:55:3a:13:65:a7:51:51:b5:42:
         cd:8e:62:7b:28:f3:ae:27:6c:67:a9:f3:a0:79:b4:00:7b:c9:
         ad:4b:48:d9:44:18:41:54:5b:ed:b6:d0:7c:e3:09:1d:2b:f5:
         c5:6e:68:ed:2c:f9:32:b9:34:55:73:39:d1:81:6e:90:3a:8c:
         d6:bf:ca:75:bb:21:6b:54:31:18:a7:34:fa:d2:a9:61:df:4f:
         cc:e1:65:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:45 2025 by rpki-client