Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/3137372e33372e33362e302f32322d3234203d3e20323731393835.roa
File:                     3137372e33372e33362e302f32322d3234203d3e20323731393835.roa (raw, json)
Hash identifier:          llIbCDFMzAipcQaBWr1kMoESbeFF34b36ztuNFFmSUc=
Subject key identifier:   A0:EB:E5:6E:0B:1F:D6:C2:23:E8:EA:BD:F4:E8:7D:50:6D:7F:F8:99
Certificate issuer:       /CN=BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379
Certificate serial:       39E870E74EDE744D97D87EE86BFF65B51626EDB0
Authority key identifier: BC:07:B2:C8:A7:1C:2F:6B:0C:14:5B:CB:AC:B7:57:8D:B7:BC:03:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/3137372e33372e33362e302f32322d3234203d3e20323731393835.roa
Signing time:             Tue 05 Mar 2024 18:22:13 +0000
ROA not before:           Tue 05 Mar 2024 18:17:13 +0000
ROA not after:            Tue 04 Mar 2025 18:22:13 +0000
asID:                     271985
IP address blocks:        177.37.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.crl
                          rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e8:70:e7:4e:de:74:4d:97:d8:7e:e8:6b:ff:65:b5:16:26:ed:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379
        Validity
            Not Before: Mar  5 18:17:13 2024 GMT
            Not After : Mar  4 18:22:13 2025 GMT
        Subject: CN=A0EBE56E0B1FD6C223E8EABDF4E87D506D7FF899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d9:36:2c:3f:d4:62:3c:48:38:a8:23:bf:bd:
                    e4:06:e9:c4:4b:d6:5d:1d:db:cb:54:00:57:51:a3:
                    c4:10:e3:96:e8:01:17:94:d2:e9:57:60:c5:13:b4:
                    4b:2f:1e:59:38:24:42:34:39:e9:22:9b:61:07:94:
                    3b:2a:95:86:cf:77:dc:57:be:c9:bd:f2:ac:b5:33:
                    15:76:c4:97:ff:d8:83:42:30:8f:f4:e8:e0:bc:06:
                    60:97:73:98:af:6f:a5:5b:00:70:ac:b5:9b:73:95:
                    48:87:6d:da:a6:fd:c2:ea:ed:12:68:c1:20:4c:bb:
                    b2:a8:3f:b8:63:80:29:06:fe:20:6c:c5:fe:6d:b4:
                    29:bc:da:cb:ab:e4:f2:7b:bc:3a:9f:0a:09:bf:64:
                    b3:72:28:cb:37:ba:7b:ea:de:af:96:a5:6f:c4:ce:
                    59:05:23:36:9b:75:00:f5:de:75:a7:d1:e8:a8:eb:
                    6a:82:d1:45:7d:f9:cd:10:98:96:bc:54:12:27:6a:
                    3c:f3:ee:b6:bd:1f:06:0e:fa:5d:50:d1:31:e0:31:
                    bf:ae:aa:da:57:0c:d5:87:cf:b2:75:6f:77:75:28:
                    1a:8b:c1:94:44:b0:3d:35:fd:ab:b2:e8:6c:de:77:
                    89:c3:fc:08:2e:59:bc:05:f9:14:59:91:9b:10:6f:
                    fe:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EB:E5:6E:0B:1F:D6:C2:23:E8:EA:BD:F4:E8:7D:50:6D:7F:F8:99
            X509v3 Authority Key Identifier:
                keyid:BC:07:B2:C8:A7:1C:2F:6B:0C:14:5B:CB:AC:B7:57:8D:B7:BC:03:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC07B2C8A71C2F6B0C145BCBACB7578DB7BC0379.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63741F05B9CD01CFF3147ACF2C6FA29EC54340ED992145500B87C7AAEFA246C8/0/3137372e33372e33362e302f32322d3234203d3e20323731393835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:8a:46:ee:86:4a:d6:db:1d:ad:fc:78:10:fd:82:7a:6b:a3:
         0e:d7:d9:ac:17:4d:2f:9b:e8:e0:bb:95:c9:4b:94:3e:31:cd:
         01:7c:5e:21:9e:8d:33:f9:d6:15:e9:e2:d5:78:5a:45:2f:28:
         39:89:b8:d1:4d:83:3e:3c:75:41:b3:e8:a7:84:a1:a5:1c:69:
         88:cb:04:60:1b:01:b3:89:d2:16:f0:19:90:67:5d:50:4c:80:
         c6:54:01:0c:e5:25:f8:4a:b4:7c:79:b3:20:66:2d:e8:66:d3:
         e0:35:80:2f:c4:31:65:dc:f1:5d:93:21:26:d2:a6:b4:20:d4:
         3c:86:4c:56:88:a5:b2:b9:cf:73:ee:3f:05:c0:44:bc:9c:bd:
         9f:a7:d6:3d:17:8c:19:83:f5:23:7b:90:3e:48:d2:a9:f2:df:
         89:77:96:c9:bf:57:2b:79:fd:7c:a1:67:b8:87:e6:99:c9:69:
         cc:7c:bc:1d:6d:9f:5e:03:6c:3c:0b:c6:1b:2e:61:2c:d6:be:
         3f:92:e0:34:6d:9e:31:73:af:76:cb:fa:39:9b:67:d9:24:1e:
         48:47:c5:aa:e1:62:89:0f:1f:fe:59:4b:01:23:ca:12:e4:9c:
         8c:84:5c:14:61:af:3d:7b:02:c9:d9:82:19:6b:8c:61:43:f3:
         07:89:e9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 18:29:48 2024 by rpki-client on console-fra.rpki-client.org