Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/3137372e36372e3235302e302f32342d3234203d3e20323730303639.roa
File:                     3137372e36372e3235302e302f32342d3234203d3e20323730303639.roa (raw, json)
Hash identifier:          3JsTiu5iJlIuGUn782yUY2Fcmn6XhlGDz6AXu2QNBGY=
Subject key identifier:   43:DF:CD:58:76:47:F7:9E:A1:0E:5B:80:78:FA:E2:B3:02:13:9A:34
Certificate issuer:       /CN=84EB5F447148428DC5D38B48E432E07FB136ACAD
Certificate serial:       6F8AB346E89FF4B8422B79040B974EC6A81B4EDD
Authority key identifier: 84:EB:5F:44:71:48:42:8D:C5:D3:8B:48:E4:32:E0:7F:B1:36:AC:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/3137372e36372e3235302e302f32342d3234203d3e20323730303639.roa
Signing time:             Wed 16 Oct 2024 05:35:00 +0000
ROA not before:           Wed 16 Oct 2024 05:30:00 +0000
ROA not after:            Wed 15 Oct 2025 05:35:00 +0000
asID:                     270069
IP address blocks:        177.67.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Oct 2024 22:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:8a:b3:46:e8:9f:f4:b8:42:2b:79:04:0b:97:4e:c6:a8:1b:4e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84EB5F447148428DC5D38B48E432E07FB136ACAD
        Validity
            Not Before: Oct 16 05:30:00 2024 GMT
            Not After : Oct 15 05:35:00 2025 GMT
        Subject: CN=43DFCD587647F79EA10E5B8078FAE2B302139A34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:01:ed:1c:a0:15:5c:25:75:f2:e8:25:8a:9b:
                    87:ab:f3:5d:61:6d:a8:22:fe:95:b5:0b:c6:80:67:
                    e8:75:29:32:df:64:62:5c:ee:ac:65:12:74:7d:29:
                    9b:d6:98:8a:e7:eb:0a:d2:26:32:5d:43:f7:4e:81:
                    6e:21:23:fe:f6:20:ff:7c:5f:b8:8c:e6:c2:d9:75:
                    a0:14:85:c3:6f:b2:63:96:85:8c:a5:53:95:cd:40:
                    cb:b9:15:6d:e2:be:79:f3:78:0d:76:78:cc:13:8d:
                    95:de:08:00:8e:eb:d1:e9:02:d9:c2:c8:1a:be:af:
                    b3:cb:9d:06:ee:14:80:11:8e:38:75:65:c4:64:d1:
                    50:d3:1f:1e:cd:b2:23:17:d8:f7:48:63:1d:2b:67:
                    b9:28:d8:dd:65:8e:95:ca:3f:cf:b7:0f:be:68:fb:
                    6c:52:ba:b5:3b:90:f2:c1:37:9b:c1:b3:dc:09:aa:
                    67:f9:a3:f6:5c:06:6a:a1:d3:46:9d:e4:a0:ad:22:
                    4d:a6:17:24:ff:12:63:d3:d5:7e:67:02:69:7b:fd:
                    f8:65:8d:36:dd:a0:5e:0d:1f:e7:e3:69:70:dd:54:
                    04:86:05:f5:1f:ab:91:82:81:da:24:76:42:f7:41:
                    0e:c8:3f:77:15:45:3a:0a:3f:c9:5a:e0:49:db:19:
                    20:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DF:CD:58:76:47:F7:9E:A1:0E:5B:80:78:FA:E2:B3:02:13:9A:34
            X509v3 Authority Key Identifier:
                keyid:84:EB:5F:44:71:48:42:8D:C5:D3:8B:48:E4:32:E0:7F:B1:36:AC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/3137372e36372e3235302e302f32342d3234203d3e20323730303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:cf:4b:26:72:00:dc:86:f7:2c:b0:5b:c8:71:4f:3b:ee:8c:
         13:6a:e9:e9:c3:8d:ea:c1:e1:c6:1f:e8:6e:6f:35:a7:95:19:
         cc:3e:a4:f9:65:15:81:34:cd:68:49:13:bd:a8:1a:65:a4:c4:
         8b:c3:71:15:7d:19:ca:5f:00:59:38:25:b2:3b:f8:6b:d0:c0:
         3c:09:18:17:d5:51:0a:fa:33:36:e6:71:71:8e:f5:6f:3d:6a:
         6c:ac:b4:d5:31:b2:08:30:4c:50:48:73:3d:3e:a2:97:0e:1a:
         ce:e7:21:24:ab:b0:be:c4:31:1e:39:d1:54:32:82:cf:ff:5a:
         93:57:ad:ca:18:a1:f1:c0:e7:93:45:13:a4:35:26:38:32:2f:
         07:3b:1b:f4:6b:3b:92:60:a2:1a:99:f4:7f:40:a2:6f:1e:e9:
         25:82:a4:fc:cd:7d:08:8a:ea:c2:b4:78:1c:74:0d:bf:73:f2:
         e7:b1:68:a9:91:9d:4d:3b:8a:1f:1f:43:a0:00:f7:f7:fd:f2:
         d6:79:13:c6:ec:10:be:b8:3f:84:07:6f:55:68:fa:27:9f:89:
         82:0a:19:19:da:61:f0:39:88:eb:26:96:ee:b1:08:56:ad:2d:
         2c:70:ab:10:fb:54:15:63:da:1f:36:27:07:d7:34:ec:50:a9:
         f5:da:bc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 22:00:11 2024 by rpki-client on console-fra.rpki-client.org