Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38372e302f32342d3234203d3e20323730313532.roa
File:                     3137372e3132342e38372e302f32342d3234203d3e20323730313532.roa (raw, json)
Hash identifier:          w3pe6/RyMd+225qYh2miIgXUTb4or/xTJT3Gjhfs6/o=
Subject key identifier:   BF:AE:71:3D:5E:3E:40:9D:67:15:01:A9:E4:17:05:03:DE:19:E8:93
Certificate issuer:       /CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9
Certificate serial:       27F41D690377D7018E7EC046B2568DB50B836854
Authority key identifier: 68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38372e302f32342d3234203d3e20323730313532.roa
Signing time:             Tue 04 Feb 2025 18:55:44 +0000
ROA not before:           Tue 04 Feb 2025 18:50:44 +0000
ROA not after:            Tue 03 Feb 2026 18:55:44 +0000
asID:                     270152
IP address blocks:        177.124.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f4:1d:69:03:77:d7:01:8e:7e:c0:46:b2:56:8d:b5:0b:83:68:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9
        Validity
            Not Before: Feb  4 18:50:44 2025 GMT
            Not After : Feb  3 18:55:44 2026 GMT
        Subject: CN=BFAE713D5E3E409D671501A9E4170503DE19E893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5c:a1:ce:40:a6:b5:0d:73:f4:2f:1c:ea:67:
                    97:7d:79:8f:88:5d:ee:ae:70:f2:33:6d:2f:2a:5d:
                    7c:d7:86:3e:29:11:8d:c8:7c:b4:4b:78:36:b5:d2:
                    81:43:34:b4:60:5c:22:06:c7:06:58:9b:c6:0c:03:
                    86:ad:57:5f:a3:4f:df:cb:c0:fc:4b:dc:52:ab:a8:
                    52:fe:4f:dc:26:97:7d:ac:9e:84:2e:1f:0e:2f:6f:
                    2e:53:12:ea:7c:42:65:b5:b5:ba:b4:95:83:8a:9c:
                    e1:d5:37:d6:11:43:8f:60:b9:56:07:d9:8d:2e:83:
                    15:fc:f5:3b:22:90:b6:7c:cb:7f:5e:38:93:5e:9f:
                    ae:ad:ee:07:4f:59:4a:b5:f9:82:f5:e2:b3:ff:86:
                    10:46:cf:96:36:f0:93:5f:54:0c:93:b6:22:a1:c6:
                    60:f1:02:14:08:44:e3:c6:c3:67:a2:e1:43:0c:ec:
                    f0:6a:fa:13:d1:30:1c:58:fd:cf:33:4f:6f:7c:19:
                    c8:8e:f7:b0:77:ed:17:17:65:1a:ba:64:17:09:31:
                    27:63:0a:7c:28:1b:c6:3b:e1:64:71:80:ce:db:60:
                    cb:51:45:ec:6a:70:5a:02:6d:d8:cb:bb:b0:98:91:
                    b4:19:08:b5:90:8c:95:6b:4c:76:b5:d8:61:ff:5e:
                    e1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AE:71:3D:5E:3E:40:9D:67:15:01:A9:E4:17:05:03:DE:19:E8:93
            X509v3 Authority Key Identifier:
                keyid:68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38372e302f32342d3234203d3e20323730313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:63:27:38:a3:66:83:81:32:b2:26:9e:ec:4d:02:59:4b:db:
         e0:02:f2:21:25:a1:ef:ea:28:fc:7f:62:59:e4:71:23:89:12:
         b4:2b:b1:1a:43:57:58:b5:98:32:99:bd:11:23:45:84:84:44:
         4c:c5:f0:86:02:0e:02:be:c8:60:0a:17:5f:a7:be:ea:a6:26:
         e6:d1:a2:3b:74:2a:ef:89:8e:f2:ff:11:52:6e:22:2a:25:6d:
         59:c0:ff:6b:e7:e9:4a:3f:90:8e:50:5d:32:39:1f:0b:bf:6f:
         bd:4d:a2:64:81:5e:d7:50:a6:1c:2e:d1:a7:38:75:a3:00:39:
         36:14:5d:eb:84:17:55:a5:79:75:39:22:f4:eb:ce:94:a7:ed:
         e0:3a:4c:17:45:a2:d9:7d:6a:dc:1f:2f:85:0a:f8:cf:ba:1a:
         f2:7a:43:77:08:a5:e0:35:e5:98:bc:82:ee:60:18:e5:e9:5f:
         4f:61:e2:ed:c1:1e:cc:08:37:25:80:1e:2c:5f:3e:b9:49:73:
         38:f8:4b:b6:11:9c:15:54:80:83:c7:08:94:d0:db:c2:1c:08:
         f5:f6:1c:29:cc:5e:f8:39:99:45:57:b6:4f:3c:fe:e8:b2:b0:
         84:61:cc:87:f5:13:7c:d1:01:73:d1:ac:01:26:c6:62:31:d2:
         fd:a8:72:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:05:30 2025 by rpki-client