Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ADA3520D8E49373913133B39E486645B73F68BC1C830E81028E59FC7DD608AD/0/3138372e36322e3132302e302f32322d3234203d3e203238333934.roa
File:                     3138372e36322e3132302e302f32322d3234203d3e203238333934.roa (raw, json)
Hash identifier:          yfXp8CLo+ofDkcJvl0nXerFw0Jb0WEARFY47O2pMkc4=
Subject key identifier:   BB:E0:FE:AB:EF:76:F1:3F:D7:53:C4:71:6A:03:2B:38:7F:41:2B:7F
Certificate issuer:       /CN=EC327CEC650429ABA533F3CE9289AC2CCB7616E8
Certificate serial:       7A74343CA43F3D3927C55442159C4785D3B166D9
Authority key identifier: EC:32:7C:EC:65:04:29:AB:A5:33:F3:CE:92:89:AC:2C:CB:76:16:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC327CEC650429ABA533F3CE9289AC2CCB7616E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ADA3520D8E49373913133B39E486645B73F68BC1C830E81028E59FC7DD608AD/0/3138372e36322e3132302e302f32322d3234203d3e203238333934.roa
Signing time:             Tue 20 Aug 2024 00:55:00 +0000
ROA not before:           Tue 20 Aug 2024 00:50:00 +0000
ROA not after:            Tue 19 Aug 2025 00:55:00 +0000
asID:                     28394
IP address blocks:        187.62.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7ADA3520D8E49373913133B39E486645B73F68BC1C830E81028E59FC7DD608AD/0/EC327CEC650429ABA533F3CE9289AC2CCB7616E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7ADA3520D8E49373913133B39E486645B73F68BC1C830E81028E59FC7DD608AD/0/EC327CEC650429ABA533F3CE9289AC2CCB7616E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC327CEC650429ABA533F3CE9289AC2CCB7616E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:74:34:3c:a4:3f:3d:39:27:c5:54:42:15:9c:47:85:d3:b1:66:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC327CEC650429ABA533F3CE9289AC2CCB7616E8
        Validity
            Not Before: Aug 20 00:50:00 2024 GMT
            Not After : Aug 19 00:55:00 2025 GMT
        Subject: CN=BBE0FEABEF76F13FD753C4716A032B387F412B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8d:71:18:fb:37:21:52:9b:86:2a:35:3f:c7:
                    15:97:4b:3a:8e:78:ec:44:77:5e:7d:3b:ad:58:dc:
                    aa:c6:b8:31:2f:c9:76:0c:10:b5:56:15:12:93:b5:
                    76:15:1c:76:e6:28:49:f6:76:b7:ec:e6:f7:ed:df:
                    d6:1b:2f:62:09:13:86:2a:cc:10:5c:cb:8e:b3:09:
                    0d:70:4f:b4:b7:1e:0f:51:53:61:3a:76:b1:54:77:
                    70:47:9a:01:f6:71:a4:d8:de:9a:83:dc:ff:67:d5:
                    f7:74:4d:69:55:d4:6b:1f:94:1e:75:fe:01:6e:22:
                    fd:c4:a7:c9:a8:d6:a6:80:37:6e:5a:6c:24:71:b8:
                    1c:99:b1:36:44:7d:2c:06:2a:66:8f:79:f2:fd:2d:
                    5b:8b:bb:7c:db:02:a7:85:41:b5:b8:47:19:e3:a3:
                    4d:09:69:aa:1b:f8:83:dd:22:19:25:16:25:ff:39:
                    6b:91:d4:8b:53:1d:87:5c:88:51:8d:66:3b:b1:2f:
                    94:d1:75:ef:2e:57:54:21:3a:88:5c:95:e4:9b:3b:
                    63:d4:8c:cb:a9:de:9d:23:d6:56:e9:6f:bf:ea:e6:
                    8e:11:fc:f7:50:97:ce:f7:04:25:f6:e8:d9:75:25:
                    49:50:8f:98:73:e4:b0:57:f6:36:11:f7:c0:19:67:
                    d8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E0:FE:AB:EF:76:F1:3F:D7:53:C4:71:6A:03:2B:38:7F:41:2B:7F
            X509v3 Authority Key Identifier:
                keyid:EC:32:7C:EC:65:04:29:AB:A5:33:F3:CE:92:89:AC:2C:CB:76:16:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ADA3520D8E49373913133B39E486645B73F68BC1C830E81028E59FC7DD608AD/0/EC327CEC650429ABA533F3CE9289AC2CCB7616E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC327CEC650429ABA533F3CE9289AC2CCB7616E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ADA3520D8E49373913133B39E486645B73F68BC1C830E81028E59FC7DD608AD/0/3138372e36322e3132302e302f32322d3234203d3e203238333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:07:52:fc:17:ef:67:77:5f:54:3e:b6:4b:42:e2:d1:c7:22:
         48:26:c8:de:d5:f5:e1:a5:75:ca:49:30:84:ad:75:92:4c:5d:
         d8:8b:2d:f3:79:02:e8:a5:bb:da:0b:8d:37:4e:21:16:3f:d1:
         62:19:fa:a2:5a:bd:39:07:b6:05:13:bd:dd:5e:30:30:47:56:
         a2:0e:d3:f5:78:65:69:74:e2:a1:07:ea:f2:59:90:3a:58:33:
         35:6c:79:a2:e0:41:92:7c:72:07:5e:9c:78:da:d4:06:75:a7:
         db:26:a4:f0:15:95:41:3a:d2:3a:0a:4e:90:a4:f7:4a:b5:a4:
         f9:04:5b:fc:d0:5a:c0:2f:69:5e:96:2a:ea:63:16:56:18:0c:
         d8:58:02:56:a7:56:21:e9:8a:91:34:88:02:b6:a0:14:52:51:
         29:be:25:bf:60:d8:c9:03:d1:cf:d5:d1:5d:8c:c0:81:3c:4c:
         ec:8e:36:61:6b:8b:95:3f:83:7c:ec:20:d8:19:00:97:50:d7:
         53:c9:18:e3:14:c0:e9:94:55:7c:31:8f:00:35:69:71:bd:40:
         1d:e8:8f:3b:91:2d:c8:c1:31:3c:3c:8c:0f:ed:15:b8:3d:ee:
         ae:97:3a:23:50:81:de:80:9a:a5:69:19:e4:91:95:23:5e:8b:
         11:11:e1:b8
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUenQ0PKQ/PTknxVRCFZxHhdOxZtkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMzMjdDRUM2NTA0MjlBQkE1MzNGM0NFOTI4OUFDMkND
Qjc2MTZFODAeFw0yNDA4MjAwMDUwMDBaFw0yNTA4MTkwMDU1MDBaMDMxMTAvBgNV
BAMTKEJCRTBGRUFCRUY3NkYxM0ZENzUzQzQ3MTZBMDMyQjM4N0Y0MTJCN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzjXEY+zchUpuGKjU/xxWXSzqO
eOxEd159O61Y3KrGuDEvyXYMELVWFRKTtXYVHHbmKEn2drfs5vft39YbL2IJE4Yq
zBBcy46zCQ1wT7S3Hg9RU2E6drFUd3BHmgH2caTY3pqD3P9n1fd0TWlV1GsflB51
/gFuIv3Ep8mo1qaAN25abCRxuByZsTZEfSwGKmaPefL9LVuLu3zbAqeFQbW4Rxnj
o00Jaaob+IPdIhklFiX/OWuR1ItTHYdciFGNZjuxL5TRde8uV1QhOohcleSbO2PU
jMup3p0j1lbpb7/q5o4R/PdQl873BCX26Nl1JUlQj5hz5LBX9jYR98AZZ9itAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUu+D+q+928T/XU8RxagMrOH9BK38wHwYDVR0j
BBgwFoAU7DJ87GUEKaulM/POkomsLMt2FugwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QURBMzUyMEQ4RTQ5MzczOTEzMTMzQjM5RTQ4NjY0NUI3
M0Y2OEJDMUM4MzBFODEwMjhFNTlGQzdERDYwOEFELzAvRUMzMjdDRUM2NTA0MjlB
QkE1MzNGM0NFOTI4OUFDMkNDQjc2MTZFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzMyN0NFQzY1MDQyOUFCQTUz
M0YzQ0U5Mjg5QUMyQ0NCNzYxNkU4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0FEQTM1MjBEOEU0OTM3MzkxMzEzM0IzOUU0ODY2NDVCNzNGNjhCQzFD
ODMwRTgxMDI4RTU5RkM3REQ2MDhBRC8wLzMxMzgzNzJlMzYzMjJlMzEzMjMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMzMzkzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArs+eDAN
BgkqhkiG9w0BAQsFAAOCAQEAOgdS/BfvZ3dfVD62S0Li0cciSCbI3tX14aV1ykkw
hK11kkxd2Ist83kC6KW72guNN04hFj/RYhn6olq9OQe2BRO93V4wMEdWog7T9Xhl
aXTioQfq8lmQOlgzNWx5ouBBknxyB16ceNrUBnWn2yak8BWVQTrSOgpOkKT3SrWk
+QRb/NBawC9pXpYq6mMWVhgM2FgCVqdWIemKkTSIAragFFJRKb4lv2DYyQPRz9XR
XYzAgTxM7I42YWuLlT+DfOwg2BkAl1DXU8kY4xTA6ZRVfDGPADVpcb1AHeiPO5Et
yMExPDyMD+0VuD3urpc6I1CB3oCapWkZ5JGVI16LERHhuA==
-----END CERTIFICATE-----
Generated at Wed Oct 23 19:09:56 2024 by rpki-client on console-fra.rpki-client.org