Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6396580A8D0F05B3A280D3D9061291302B2C9C53FA6973BBC3916CD70A010A8F/0/3137372e39332e3134302e302f32332d3234203d3e20323732393936.roa
File:                     3137372e39332e3134302e302f32332d3234203d3e20323732393936.roa (raw, json)
Hash identifier:          OjJ4VzuPso5ulGUM+3NHvwFc30FikxDjtKn68zvH37Y=
Subject key identifier:   C9:D4:0E:5D:22:F6:D5:CB:35:85:88:95:F3:AA:F4:CD:9C:9F:4A:C1
Certificate issuer:       /CN=4AE2BD6CD73C21411CA8017A254856860F6647F7
Certificate serial:       5F2BAD3028341CE40E316C47B9DAF0EF32993E01
Authority key identifier: 4A:E2:BD:6C:D7:3C:21:41:1C:A8:01:7A:25:48:56:86:0F:66:47:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AE2BD6CD73C21411CA8017A254856860F6647F7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6396580A8D0F05B3A280D3D9061291302B2C9C53FA6973BBC3916CD70A010A8F/0/3137372e39332e3134302e302f32332d3234203d3e20323732393936.roa
Signing time:             Tue 05 Mar 2024 17:41:55 +0000
ROA not before:           Tue 05 Mar 2024 17:36:55 +0000
ROA not after:            Tue 04 Mar 2025 17:41:55 +0000
asID:                     272996
IP address blocks:        177.93.140.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6396580A8D0F05B3A280D3D9061291302B2C9C53FA6973BBC3916CD70A010A8F/0/4AE2BD6CD73C21411CA8017A254856860F6647F7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6396580A8D0F05B3A280D3D9061291302B2C9C53FA6973BBC3916CD70A010A8F/0/4AE2BD6CD73C21411CA8017A254856860F6647F7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AE2BD6CD73C21411CA8017A254856860F6647F7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2b:ad:30:28:34:1c:e4:0e:31:6c:47:b9:da:f0:ef:32:99:3e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AE2BD6CD73C21411CA8017A254856860F6647F7
        Validity
            Not Before: Mar  5 17:36:55 2024 GMT
            Not After : Mar  4 17:41:55 2025 GMT
        Subject: CN=C9D40E5D22F6D5CB35858895F3AAF4CD9C9F4AC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:aa:b3:6c:08:bd:76:81:b0:10:ad:86:d9:48:
                    9b:48:1f:1a:ab:da:08:3a:03:85:89:d7:61:50:76:
                    7b:ea:0f:3e:23:2a:29:25:17:af:08:bb:c9:a1:b1:
                    10:de:59:2c:16:ac:48:20:d4:c3:50:17:ed:11:d9:
                    77:47:fd:11:a0:46:89:6c:c3:ae:b2:b7:c4:81:e9:
                    e1:cb:1e:a3:4c:f6:4f:6a:37:b5:d4:96:3e:fe:40:
                    2e:89:bf:90:74:7f:60:b8:0e:0d:5a:a1:f7:cc:10:
                    60:8e:d8:c2:6c:84:aa:ab:05:a5:1e:f1:5b:be:a2:
                    03:42:63:b0:3c:a7:e1:ce:bc:65:74:6d:47:21:08:
                    a9:6b:bc:e2:f8:b9:c7:6c:57:0b:92:dc:df:b2:4b:
                    09:f3:91:a3:79:34:52:44:a5:e2:9c:ae:be:2c:52:
                    1d:25:1f:de:70:80:ed:58:7c:31:9e:a5:d0:5d:07:
                    50:bf:1e:b3:f4:84:0f:d7:b3:a4:ae:db:3d:2a:cc:
                    42:1b:5d:6f:2c:f6:40:7a:ed:ca:ea:23:68:79:c6:
                    cf:c9:ac:2b:07:c1:5c:27:7e:8f:ba:eb:c4:f7:4b:
                    f2:c7:27:55:fd:6b:15:d5:bc:4a:12:ca:85:aa:2f:
                    e2:d5:35:df:9d:66:8f:6c:66:d9:00:c0:f3:c8:43:
                    e3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D4:0E:5D:22:F6:D5:CB:35:85:88:95:F3:AA:F4:CD:9C:9F:4A:C1
            X509v3 Authority Key Identifier:
                keyid:4A:E2:BD:6C:D7:3C:21:41:1C:A8:01:7A:25:48:56:86:0F:66:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6396580A8D0F05B3A280D3D9061291302B2C9C53FA6973BBC3916CD70A010A8F/0/4AE2BD6CD73C21411CA8017A254856860F6647F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AE2BD6CD73C21411CA8017A254856860F6647F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6396580A8D0F05B3A280D3D9061291302B2C9C53FA6973BBC3916CD70A010A8F/0/3137372e39332e3134302e302f32332d3234203d3e20323732393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:b7:f8:54:86:eb:3f:f3:f6:ad:63:09:b3:51:ac:80:fa:2c:
         b6:ca:d2:e1:9f:47:14:30:17:61:58:eb:af:7f:c0:03:78:76:
         22:f6:bf:06:77:b3:04:08:1c:13:40:d2:bd:50:c2:f1:5c:0b:
         24:fc:83:73:2c:9b:bb:21:36:ec:0c:c6:ef:63:d6:ca:51:80:
         25:ef:20:a8:a4:2c:0d:c4:e5:f3:12:f4:34:e3:b4:44:3f:28:
         c7:c5:c6:9c:3e:6c:f6:86:3d:50:ee:22:2a:58:b3:36:f7:f2:
         02:a6:2d:50:a3:33:8d:87:3d:51:ce:1f:b7:ba:e3:50:f3:76:
         9c:69:91:ed:1b:24:d5:e7:2a:30:8f:6e:86:52:dd:91:60:63:
         28:1a:93:b2:fe:ea:98:0e:53:fc:e7:f9:a6:e0:cc:a6:83:e8:
         ad:16:eb:67:8f:15:92:6a:02:1c:81:4e:cb:64:85:18:51:12:
         2c:8c:cd:f1:6f:ed:68:53:1a:b4:d6:a8:11:2f:d2:33:fb:5c:
         67:4c:72:eb:e2:bc:ce:fd:76:25:0d:bd:d8:55:e8:1b:5d:c6:
         17:38:7c:fd:01:28:59:87:4e:61:70:00:ea:33:ce:25:bf:a5:
         42:6c:7d:fb:9f:b5:55:0a:54:99:ea:2d:b2:77:b5:94:95:d5:
         85:8d:8d:2b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXyutMCg0HOQOMWxHudrw7zKZPgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFFMkJENkNENzNDMjE0MTFDQTgwMTdBMjU0ODU2ODYw
RjY2NDdGNzAeFw0yNDAzMDUxNzM2NTVaFw0yNTAzMDQxNzQxNTVaMDMxMTAvBgNV
BAMTKEM5RDQwRTVEMjJGNkQ1Q0IzNTg1ODg5NUYzQUFGNENEOUM5RjRBQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCqrNsCL12gbAQrYbZSJtIHxqr
2gg6A4WJ12FQdnvqDz4jKiklF68Iu8mhsRDeWSwWrEgg1MNQF+0R2XdH/RGgRols
w66yt8SB6eHLHqNM9k9qN7XUlj7+QC6Jv5B0f2C4Dg1aoffMEGCO2MJshKqrBaUe
8Vu+ogNCY7A8p+HOvGV0bUchCKlrvOL4ucdsVwuS3N+ySwnzkaN5NFJEpeKcrr4s
Uh0lH95wgO1YfDGepdBdB1C/HrP0hA/Xs6Su2z0qzEIbXW8s9kB67crqI2h5xs/J
rCsHwVwnfo+668T3S/LHJ1X9axXVvEoSyoWqL+LVNd+dZo9sZtkAwPPIQ+P1AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUydQOXSL21cs1hYiV86r0zZyfSsEwHwYDVR0j
BBgwFoAUSuK9bNc8IUEcqAF6JUhWhg9mR/cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82Mzk2NTgwQThEMEYwNUIzQTI4MEQzRDkwNjEyOTEzMDJC
MkM5QzUzRkE2OTczQkJDMzkxNkNENzBBMDEwQThGLzAvNEFFMkJENkNENzNDMjE0
MTFDQTgwMTdBMjU0ODU2ODYwRjY2NDdGNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QUUyQkQ2Q0Q3M0MyMTQxMUNB
ODAxN0EyNTQ4NTY4NjBGNjY0N0Y3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjM5NjU4MEE4RDBGMDVCM0EyODBEM0Q5MDYxMjkxMzAyQjJDOUM1M0ZB
Njk3M0JCQzM5MTZDRDcwQTAxMEE4Ri8wLzMxMzczNzJlMzkzMzJlMzEzNDMwMmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNzMyMzkzOTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsV2M
MA0GCSqGSIb3DQEBCwUAA4IBAQC2t/hUhus/8/atYwmzUayA+iy2ytLhn0cUMBdh
WOuvf8ADeHYi9r8Gd7MECBwTQNK9UMLxXAsk/INzLJu7ITbsDMbvY9bKUYAl7yCo
pCwNxOXzEvQ047REPyjHxcacPmz2hj1Q7iIqWLM29/ICpi1QozONhz1Rzh+3uuNQ
83acaZHtGyTV5yowj26GUt2RYGMoGpOy/uqYDlP85/mm4Mymg+itFutnjxWSagIc
gU7LZIUYURIsjM3xb+1oUxq01qgRL9Iz+1xnTHLr4rzO/XYlDb3YVegbXcYXOHz9
AShZh05hcADqM84lv6VCbH37n7VVClSZ6i2yd7WUldWFjY0r
-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:23 2024 by rpki-client on console-fra.rpki-client.org