Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FE30248DEB42234B16A54E3F9E8897FCC5C61DBF3DFE437311E515E730CCD4/0/3137372e3138342e38382e302f32322d3234203d3e20323731383131.roa
File:                     3137372e3138342e38382e302f32322d3234203d3e20323731383131.roa (raw, json)
Hash identifier:          q8TVfw2MS/P5ikPYdJAzQCdt48nUpy0L0gIJ2r2LyCg=
Subject key identifier:   E1:05:E4:8A:46:E2:53:2E:21:06:F1:E6:05:E7:B6:C6:9D:16:BB:8A
Certificate issuer:       /CN=04066F3321E4D30296716F0BC0C96F60BA79A6E3
Certificate serial:       373318BC24DDDB9AE071ED8F0B763A26375EF074
Authority key identifier: 04:06:6F:33:21:E4:D3:02:96:71:6F:0B:C0:C9:6F:60:BA:79:A6:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04066F3321E4D30296716F0BC0C96F60BA79A6E3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FE30248DEB42234B16A54E3F9E8897FCC5C61DBF3DFE437311E515E730CCD4/0/3137372e3138342e38382e302f32322d3234203d3e20323731383131.roa
Signing time:             Tue 05 Mar 2024 17:51:03 +0000
ROA not before:           Tue 05 Mar 2024 17:46:03 +0000
ROA not after:            Tue 04 Mar 2025 17:51:03 +0000
asID:                     271811
IP address blocks:        177.184.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FE30248DEB42234B16A54E3F9E8897FCC5C61DBF3DFE437311E515E730CCD4/0/04066F3321E4D30296716F0BC0C96F60BA79A6E3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FE30248DEB42234B16A54E3F9E8897FCC5C61DBF3DFE437311E515E730CCD4/0/04066F3321E4D30296716F0BC0C96F60BA79A6E3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04066F3321E4D30296716F0BC0C96F60BA79A6E3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:33:18:bc:24:dd:db:9a:e0:71:ed:8f:0b:76:3a:26:37:5e:f0:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04066F3321E4D30296716F0BC0C96F60BA79A6E3
        Validity
            Not Before: Mar  5 17:46:03 2024 GMT
            Not After : Mar  4 17:51:03 2025 GMT
        Subject: CN=E105E48A46E2532E2106F1E605E7B6C69D16BB8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:52:27:27:3e:63:3c:54:f4:33:18:d2:8a:04:
                    02:2e:90:1f:ba:67:61:28:2d:35:c0:c9:ed:d9:26:
                    b8:59:03:b2:36:b2:f6:29:85:ed:ff:a8:3e:be:89:
                    cf:58:01:eb:f0:b4:0c:ee:ba:e6:ca:92:b8:1b:96:
                    44:81:25:7c:e6:55:a2:50:be:a8:5e:84:72:5b:d4:
                    8e:50:ee:e3:99:c2:55:68:8e:8b:10:7c:f8:f4:9d:
                    a4:fd:72:9f:66:19:ce:4e:68:dc:c0:4e:5d:42:8d:
                    a6:7a:e0:9d:09:52:9c:70:65:12:33:9d:a8:30:59:
                    d3:0f:d0:23:d6:1f:96:a6:fe:32:cf:2f:28:8d:a8:
                    97:e7:69:0a:fd:de:f8:2f:3a:44:59:48:55:93:2d:
                    99:54:6c:82:a3:bc:20:75:c1:b1:d9:4f:0c:ec:02:
                    94:93:cc:6b:f4:b9:15:fe:fd:c5:d5:f2:02:51:77:
                    d1:2b:ca:1e:c8:b2:54:23:6c:48:70:dc:67:9d:b4:
                    bd:9c:f7:74:3d:ed:4f:6c:4b:34:8c:ba:11:d7:ce:
                    36:5b:af:4d:cf:6f:97:e1:21:12:be:ea:16:c4:65:
                    83:cd:f1:92:3e:6d:a0:c8:14:94:f4:20:61:e6:d5:
                    bb:6c:bc:32:4d:1a:71:55:a1:3c:aa:fb:72:14:4e:
                    50:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:05:E4:8A:46:E2:53:2E:21:06:F1:E6:05:E7:B6:C6:9D:16:BB:8A
            X509v3 Authority Key Identifier:
                keyid:04:06:6F:33:21:E4:D3:02:96:71:6F:0B:C0:C9:6F:60:BA:79:A6:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FE30248DEB42234B16A54E3F9E8897FCC5C61DBF3DFE437311E515E730CCD4/0/04066F3321E4D30296716F0BC0C96F60BA79A6E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04066F3321E4D30296716F0BC0C96F60BA79A6E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FE30248DEB42234B16A54E3F9E8897FCC5C61DBF3DFE437311E515E730CCD4/0/3137372e3138342e38382e302f32322d3234203d3e20323731383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:eb:61:cd:83:8b:f1:f2:35:f7:03:ac:1f:cf:b7:8c:91:40:
         e9:5e:3c:50:49:eb:f3:14:cc:44:8a:41:5c:59:84:06:c3:ed:
         25:cb:fe:82:30:0e:4b:78:01:6c:4e:46:00:08:0b:d4:d5:5b:
         7c:bd:87:cc:c1:d3:47:37:e4:69:50:36:32:dd:c2:0c:67:cd:
         b3:41:02:d2:94:44:48:5d:98:a1:c5:84:36:e2:b6:12:d4:10:
         9c:b6:7f:68:f5:39:56:f1:68:54:fc:cb:e8:ef:39:00:45:ec:
         09:00:8f:77:a6:50:9d:2c:26:b4:8f:f0:bf:5f:35:c1:37:d0:
         57:94:dc:3c:79:3d:0e:dd:ac:e3:31:41:b1:e7:53:df:4c:9a:
         b9:45:d6:84:89:41:6a:9b:ab:0b:a2:b9:94:7c:cc:97:a6:59:
         67:3c:bf:a5:8d:9e:61:a7:93:76:99:e7:37:1b:b9:9b:ad:d7:
         49:bd:58:6c:c9:2d:69:53:70:f3:6a:91:6c:a4:6f:a2:f0:06:
         5d:48:88:9c:f3:58:36:5f:99:a5:bf:f3:7e:7b:0a:96:1c:70:
         42:11:c7:8c:97:4e:5f:bd:6d:3b:d6:57:bd:9f:1b:af:f2:aa:
         d7:5b:2f:9b:45:08:db:c2:5b:e2:b6:05:18:bd:8c:4f:70:91:
         70:e4:64:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 14:32:40 2024 by rpki-client on console-ams.rpki-client.org