Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38342e302f32342d3234203d3e203238343332.roa
File:                     3137372e3132342e38342e302f32342d3234203d3e203238343332.roa (raw, json)
Hash identifier:          DWW0MS9EL4o7TU95kba2UeT7Ij9muaoZySbKHNmrsK0=
Subject key identifier:   CA:F3:6C:5A:B6:8A:8B:AC:26:FB:A8:0A:61:4D:B4:D8:9C:68:B8:32
Certificate issuer:       /CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9
Certificate serial:       6ADA380B044B56E27A54EF1C1E16AD7D84F672BD
Authority key identifier: 68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38342e302f32342d3234203d3e203238343332.roa
Signing time:             Tue 05 Mar 2024 18:23:43 +0000
ROA not before:           Tue 05 Mar 2024 18:18:43 +0000
ROA not after:            Tue 04 Mar 2025 18:23:43 +0000
asID:                     28432
IP address blocks:        177.124.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:da:38:0b:04:4b:56:e2:7a:54:ef:1c:1e:16:ad:7d:84:f6:72:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9
        Validity
            Not Before: Mar  5 18:18:43 2024 GMT
            Not After : Mar  4 18:23:43 2025 GMT
        Subject: CN=CAF36C5AB68A8BAC26FBA80A614DB4D89C68B832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:00:1a:dc:cc:0c:6a:fc:70:e8:11:a2:92:d1:
                    f2:20:7e:30:75:0c:ff:e0:cd:7c:a8:d1:85:55:7a:
                    e2:9d:88:29:3c:9a:e2:08:ce:fe:a4:fe:ee:80:c7:
                    61:bd:e4:9e:8f:70:5a:92:93:9b:45:a9:62:d3:6a:
                    8b:34:bc:23:f0:80:b2:66:e8:8e:36:40:60:62:7f:
                    7e:2d:b0:ef:d2:34:e7:16:e5:0a:bf:0b:67:30:a5:
                    b3:4e:b4:cd:b1:80:cb:ce:aa:4d:14:0b:14:94:9e:
                    1e:50:df:6e:ed:5c:40:03:d8:32:a3:86:cb:d8:d2:
                    ce:30:f1:ca:f0:42:e0:7b:cc:93:35:54:bc:52:e4:
                    c5:81:cc:f4:13:89:af:b8:b5:1b:cb:34:63:2a:23:
                    2c:91:91:27:58:00:d5:22:48:e9:ad:30:8f:cf:9f:
                    2b:f9:bb:90:f5:e2:8f:76:6a:31:4f:d8:68:67:60:
                    37:a4:0e:73:a3:4c:7b:c6:2e:20:ca:84:a2:ce:a4:
                    20:b3:0b:e1:dd:e0:9d:d7:81:ff:68:6a:fb:93:eb:
                    40:a7:05:b5:66:2c:65:de:24:d8:67:79:84:4b:e3:
                    ba:53:6c:c6:da:99:0f:48:75:81:9a:36:ff:99:6d:
                    1c:7a:6c:91:13:ae:19:00:e6:e7:c0:f0:83:a3:4e:
                    ff:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F3:6C:5A:B6:8A:8B:AC:26:FB:A8:0A:61:4D:B4:D8:9C:68:B8:32
            X509v3 Authority Key Identifier:
                keyid:68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38342e302f32342d3234203d3e203238343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:4f:7b:6b:24:84:f2:8d:c7:8d:13:98:89:75:1f:1a:53:12:
         f8:bd:cd:24:a8:51:92:df:50:e2:8d:59:de:50:af:4d:65:7f:
         e2:85:f1:87:8c:fc:4e:28:8f:74:d4:44:1e:2f:d5:68:be:66:
         6e:72:3c:53:57:da:ca:30:91:d3:a0:95:b6:44:e3:77:31:be:
         c7:a6:94:23:80:95:5e:bd:11:b5:06:3a:86:15:63:bd:2f:c8:
         de:16:58:5d:71:77:b5:c7:83:72:27:77:ed:b0:75:b2:63:7c:
         f5:e5:be:d0:af:8c:6b:8c:cf:24:d2:ee:a1:2f:c8:ae:50:61:
         65:3e:f6:75:df:52:a8:f3:49:f3:3a:74:bb:f5:1f:ff:92:e6:
         46:4b:28:ff:fb:96:b1:af:e7:9f:77:b4:eb:d2:a8:07:35:9a:
         4e:aa:55:25:87:65:58:e2:79:de:fc:67:9e:59:ec:75:c3:a6:
         0b:a6:ee:81:bf:51:7e:ce:68:48:d9:eb:13:a4:91:e5:43:2d:
         91:b8:1b:21:70:c9:70:0d:bd:d1:02:2e:dd:dd:a4:f6:91:30:
         80:bd:7b:5d:2c:89:f9:1b:7a:ed:5d:73:92:21:32:6f:e5:1b:
         1b:1b:0c:a7:81:2f:0a:5c:36:93:c6:2a:ce:b7:72:43:01:93:
         4f:a8:8f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 08:33:12 2024 by rpki-client on console-ams.rpki-client.org