Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38362e302f32342d3234203d3e203238343332.roa
File:                     3137372e3132342e38362e302f32342d3234203d3e203238343332.roa (raw, json)
Hash identifier:          8pY1toGsXrahUyChPa6O5C0oCDA84cukfBrLczJERSg=
Subject key identifier:   8F:2A:27:ED:76:DB:B1:5C:D9:59:76:97:C4:A4:42:76:17:0C:44:EA
Certificate issuer:       /CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9
Certificate serial:       5419667355DF81711FB652D22F08956E6D3FCFC1
Authority key identifier: 68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38362e302f32342d3234203d3e203238343332.roa
Signing time:             Tue 04 Feb 2025 18:55:45 +0000
ROA not before:           Tue 04 Feb 2025 18:50:45 +0000
ROA not after:            Tue 03 Feb 2026 18:55:45 +0000
asID:                     28432
IP address blocks:        177.124.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:19:66:73:55:df:81:71:1f:b6:52:d2:2f:08:95:6e:6d:3f:cf:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9
        Validity
            Not Before: Feb  4 18:50:45 2025 GMT
            Not After : Feb  3 18:55:45 2026 GMT
        Subject: CN=8F2A27ED76DBB15CD9597697C4A44276170C44EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:43:c9:b8:4b:42:4e:54:50:92:db:f4:2a:73:
                    c0:0d:19:cf:4d:f9:0e:41:83:41:86:33:6a:b6:9d:
                    e7:2c:0c:36:fb:67:48:81:37:e1:e8:94:79:54:de:
                    56:df:3c:db:1e:89:cf:67:8d:29:4c:07:a2:58:5e:
                    fc:34:51:d0:ee:95:ea:b0:13:ff:2c:d5:10:5f:49:
                    24:38:82:34:10:b3:3a:87:98:33:fd:7f:43:2c:83:
                    2e:bb:38:22:cc:52:e8:e7:aa:b8:97:70:55:52:01:
                    ad:53:7c:2b:8f:c2:78:15:62:36:11:3c:1e:b2:69:
                    e7:f5:d7:65:0b:24:2e:42:48:5a:45:e3:ea:a8:35:
                    2b:f6:49:43:10:2e:09:9e:65:2d:b7:8b:d4:83:c9:
                    1a:5a:14:ea:f3:21:78:5e:ea:51:fd:19:52:bb:cb:
                    53:f5:22:52:be:c3:66:33:36:50:db:cd:87:a1:fe:
                    5e:48:c8:44:f2:22:48:e4:01:c8:ea:a6:96:33:17:
                    61:bd:77:1e:b6:c0:8e:d8:3d:d7:65:32:39:aa:16:
                    d0:a6:8e:67:78:31:f8:7c:2e:8b:e1:c9:dd:17:3e:
                    63:e7:52:7e:7b:d0:6a:60:26:66:a2:30:ca:16:74:
                    00:a5:4a:c4:cb:b5:cb:3e:e2:a1:07:28:11:7d:6b:
                    59:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2A:27:ED:76:DB:B1:5C:D9:59:76:97:C4:A4:42:76:17:0C:44:EA
            X509v3 Authority Key Identifier:
                keyid:68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38362e302f32342d3234203d3e203238343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:2e:91:44:fe:45:92:93:ee:d9:83:10:2f:05:85:be:96:fd:
         6f:41:7c:33:de:bf:ed:f9:44:b9:72:46:1d:b0:83:9c:c4:af:
         e1:06:18:b3:13:1a:9c:23:e3:f7:0e:56:e8:d4:5d:79:3a:0e:
         5d:db:fb:21:88:c6:e4:bb:1a:b7:b5:e8:e8:f1:ac:a9:7a:cc:
         b0:24:d4:c9:b7:57:85:9d:e9:8f:8d:6d:15:05:e5:b1:4b:65:
         ba:10:d2:9e:52:5b:e4:61:5e:ca:d6:cd:29:1b:f4:54:e3:11:
         21:e5:09:75:ef:52:bf:70:be:9f:1a:7a:09:db:e2:65:0d:7d:
         d7:f0:f7:f0:82:cf:78:78:3b:ee:85:69:41:72:f5:fa:49:3c:
         a2:19:42:6b:a5:ee:d9:b0:25:56:a1:08:02:db:b5:77:39:15:
         b3:ed:35:e5:63:5a:a7:11:a9:74:14:ac:02:b1:e7:c9:fb:b8:
         16:0c:44:46:8e:4d:c8:ed:2e:d6:f4:66:84:ab:5b:32:e6:f2:
         ed:38:f6:ef:20:16:40:a3:92:a2:51:7c:6d:5b:fa:ac:37:18:
         7b:33:7a:ec:92:b8:54:6d:17:45:cd:be:1f:1e:e7:f9:23:7e:
         ac:33:08:68:a3:54:52:15:4c:db:95:d7:94:42:19:dc:26:61:
         e7:8f:69:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:02 2025 by rpki-client