Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38372e302f32342d3234203d3e20323730313532.roa
File:                     3137372e3132342e38372e302f32342d3234203d3e20323730313532.roa (raw, json)
Hash identifier:          hak/3fvtCmYMN1A4mEVR3QYhINXZD2LKAplAKamzJow=
Subject key identifier:   81:45:C2:5D:5A:FA:2B:DE:2F:AD:F0:CA:E7:6E:3E:03:21:99:3B:76
Certificate issuer:       /CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9
Certificate serial:       2F99C9730E4453F6F609BB96B19D5D76126A0A6E
Authority key identifier: 68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38372e302f32342d3234203d3e20323730313532.roa
Signing time:             Tue 05 Mar 2024 18:23:42 +0000
ROA not before:           Tue 05 Mar 2024 18:18:42 +0000
ROA not after:            Tue 04 Mar 2025 18:23:42 +0000
asID:                     270152
IP address blocks:        177.124.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:99:c9:73:0e:44:53:f6:f6:09:bb:96:b1:9d:5d:76:12:6a:0a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9
        Validity
            Not Before: Mar  5 18:18:42 2024 GMT
            Not After : Mar  4 18:23:42 2025 GMT
        Subject: CN=8145C25D5AFA2BDE2FADF0CAE76E3E0321993B76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:53:d8:c3:e7:34:59:a8:bf:a2:13:76:de:2d:
                    18:c4:e1:5d:d2:46:af:16:54:e7:ce:2e:72:c2:34:
                    48:cb:bf:fd:9a:f8:64:f5:81:0b:69:5d:2e:4e:01:
                    6f:57:8f:12:37:f7:4e:93:f8:be:35:0f:19:ab:af:
                    4f:0d:db:0a:10:ba:25:4b:79:51:60:da:37:52:05:
                    d3:56:6a:11:70:fd:8d:0a:eb:eb:25:a4:67:50:28:
                    26:59:21:c0:71:64:f7:37:ec:40:55:b0:d5:93:53:
                    0e:7d:4b:f9:7b:86:a7:69:71:f6:f0:c4:2a:73:6d:
                    d0:d0:b7:d1:31:52:e5:77:05:de:be:c6:15:a3:2f:
                    a7:12:f3:2c:bc:5c:2a:dc:7b:f8:7c:69:b3:5e:55:
                    91:31:b2:71:45:30:ae:15:41:6a:fe:6d:17:06:57:
                    61:f3:65:81:c5:72:fe:e3:0d:e5:ad:1d:5f:57:4d:
                    32:19:6d:69:76:6e:77:43:3d:8a:2d:f9:32:d5:d5:
                    35:02:05:41:28:72:31:83:38:7a:c4:71:d2:e4:66:
                    b4:78:40:d8:b2:2d:33:d5:f8:52:c7:61:fc:70:f9:
                    b7:c2:9d:16:27:56:fa:29:07:ea:4f:8a:ca:39:8a:
                    be:5a:38:88:3f:c5:65:bf:01:49:c1:ff:5d:59:80:
                    2d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:45:C2:5D:5A:FA:2B:DE:2F:AD:F0:CA:E7:6E:3E:03:21:99:3B:76
            X509v3 Authority Key Identifier:
                keyid:68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/3137372e3132342e38372e302f32342d3234203d3e20323730313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:47:7f:de:bd:0c:dc:3b:10:c1:71:4e:0e:93:f3:b4:ac:63:
         83:ce:08:be:05:1b:21:68:31:e9:83:71:c5:f3:65:56:1e:19:
         43:fa:fd:63:95:43:34:d7:d0:78:01:86:b3:fb:d4:67:4f:25:
         ba:11:c9:6c:e8:47:88:e9:d2:8c:cb:64:49:8c:ae:05:fb:f0:
         23:f6:ac:0e:ed:da:c2:06:e1:ee:e5:d7:66:bf:22:03:f6:d5:
         24:79:15:2b:5b:e7:67:7e:e7:a2:0f:52:8b:ec:ea:30:ae:fc:
         64:e2:5f:78:8d:d4:f3:1a:e9:38:f8:45:f4:2d:c4:fa:16:50:
         02:7a:67:60:9e:1d:f2:e9:c5:52:55:5e:84:71:96:1d:4a:59:
         e7:52:8d:bd:10:80:f6:a2:4b:ff:96:f3:1c:88:cf:0e:db:18:
         d8:54:6d:39:27:5c:25:09:a4:a4:8c:29:00:4d:61:37:ca:85:
         63:bd:ec:0e:76:c0:b1:0e:02:42:75:8c:19:a1:7e:9d:6c:13:
         21:c6:39:88:47:cb:06:c7:99:18:3a:bc:de:78:c6:ba:bc:11:
         fc:35:c3:7c:63:8f:a7:ab:b0:e7:b0:0b:60:03:67:5f:fb:f7:
         0d:3d:a0:ce:45:db:ea:87:3a:d3:e3:0b:51:86:4a:16:fa:14:
         b4:7b:4a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org