Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/3137372e33372e33362e302f32322d3232203d3e20323731393835.roa
File:                     3137372e33372e33362e302f32322d3232203d3e20323731393835.roa (raw, json)
Hash identifier:          q2ghVpfod+hBb9oNN1BauYSc4iJpzXAZlEw5b2V18qo=
Subject key identifier:   3F:9D:D7:99:E5:6D:75:D9:4E:DC:12:14:B2:AB:AA:3D:78:72:5C:77
Certificate issuer:       /CN=BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379
Certificate serial:       77DAD214C30A2E4F3FF835293B82C8D525C00CCC
Authority key identifier: BC:07:B2:C8:A7:1C:2F:6B:0C:14:5B:CB:AC:B7:57:8D:B7:BC:03:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/3137372e33372e33362e302f32322d3232203d3e20323731393835.roa
Signing time:             Tue 20 Aug 2024 21:20:03 +0000
ROA not before:           Tue 20 Aug 2024 21:15:03 +0000
ROA not after:            Tue 19 Aug 2025 21:20:03 +0000
asID:                     271985
IP address blocks:        177.37.36.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.crl
                          rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:da:d2:14:c3:0a:2e:4f:3f:f8:35:29:3b:82:c8:d5:25:c0:0c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379
        Validity
            Not Before: Aug 20 21:15:03 2024 GMT
            Not After : Aug 19 21:20:03 2025 GMT
        Subject: CN=3F9DD799E56D75D94EDC1214B2ABAA3D78725C77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fa:b4:d5:42:9d:52:b5:6d:1c:77:74:37:22:
                    7c:48:f3:90:2b:35:69:ab:ce:e9:6d:9f:b1:d2:e1:
                    f7:85:e7:27:83:71:7b:af:06:c3:d0:d4:69:04:65:
                    14:9e:35:80:ca:a2:34:ae:4f:9e:d5:fb:c3:67:88:
                    81:da:5e:31:28:ff:fd:f1:95:85:97:73:34:8a:ce:
                    2d:2d:26:1e:f5:6b:6c:19:a5:24:ab:c7:2e:d1:a3:
                    cd:b2:05:14:8e:51:1e:40:20:f0:e9:60:b2:0d:18:
                    b5:e5:f3:3d:4e:db:d1:c3:43:36:f8:2f:57:6a:0a:
                    81:ff:3a:df:f2:c5:fe:1a:c9:80:f6:ba:2a:0f:9c:
                    69:10:d2:b3:71:52:98:76:57:32:af:bb:29:71:3d:
                    3d:ef:8b:8c:75:b1:b5:af:b8:ea:19:99:cf:2e:06:
                    d4:2b:a2:88:2c:cf:73:f9:ea:4d:d4:9f:54:48:2a:
                    58:f2:e7:2f:c8:f4:4f:ea:45:0d:4c:c5:dc:19:07:
                    64:42:b2:1d:04:fe:89:1f:43:b0:5f:16:d6:19:22:
                    5a:3d:5f:70:ee:6e:12:3f:ca:bc:4c:5d:94:9b:cb:
                    de:86:9d:54:41:8f:60:24:f9:3a:bf:bc:ee:c8:08:
                    52:54:c0:64:aa:7c:bc:cf:81:f7:11:6b:89:8e:01:
                    1f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9D:D7:99:E5:6D:75:D9:4E:DC:12:14:B2:AB:AA:3D:78:72:5C:77
            X509v3 Authority Key Identifier:
                keyid:BC:07:B2:C8:A7:1C:2F:6B:0C:14:5B:CB:AC:B7:57:8D:B7:BC:03:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/3137372e33372e33362e302f32322d3232203d3e20323731393835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:06:24:c1:46:bd:6c:bd:72:8f:63:66:12:a7:69:56:19:cf:
         88:f1:42:72:fa:4c:84:3e:d5:81:39:99:6e:f6:a2:ef:fb:28:
         fc:e6:f0:b8:52:f2:b9:d2:12:5d:24:5c:2a:45:3c:63:3f:b1:
         9e:24:02:12:ba:d0:02:84:eb:8f:22:a6:6d:a5:7b:f7:b0:88:
         30:fe:19:67:b6:60:fd:61:2b:4d:32:56:c4:ce:0a:20:16:2b:
         bb:2f:45:30:90:f1:a8:90:e0:aa:21:b1:34:b3:02:dc:0b:ac:
         62:89:5c:f7:97:62:f6:7e:7e:9e:a7:d2:f6:fc:17:7b:04:df:
         1c:16:d3:62:3d:ef:56:45:af:d5:50:cf:00:9e:44:75:5d:5f:
         31:31:38:f1:31:87:c1:84:69:2f:6c:64:47:b1:0a:01:36:2f:
         89:3d:d7:70:63:54:23:ff:13:0c:e6:d8:0c:eb:fb:b0:d8:22:
         b3:a2:4f:9e:52:54:05:76:8c:49:66:5e:dd:d8:a1:35:0c:61:
         6b:f7:89:92:63:e0:70:2f:d2:b3:44:13:85:d9:80:44:bd:fb:
         78:82:fa:73:57:ec:30:a4:80:02:bc:de:5e:37:f1:68:66:0b:
         82:b7:5f:b8:3a:e2:79:4f:4c:91:3c:47:77:03:a1:8e:ac:d8:
         9c:63:05:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 04:11:17 2024 by rpki-client on console-fra.rpki-client.org