Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/3137372e37332e3235342e302f32332d3233203d3e20323730303639.roa
File:                     3137372e37332e3235342e302f32332d3233203d3e20323730303639.roa (raw, json)
Hash identifier:          zQ1hpdf0nDAf3H9upywUYHANr91JjNeMBhWFuyBeXUs=
Subject key identifier:   C4:E5:03:02:5D:E1:B7:83:7A:16:26:28:B6:EC:B7:7A:9C:DA:6B:DC
Certificate issuer:       /CN=84EB5F447148428DC5D38B48E432E07FB136ACAD
Certificate serial:       6A2660C7BB2DDFD8D400A62B109DB7D68164F382
Authority key identifier: 84:EB:5F:44:71:48:42:8D:C5:D3:8B:48:E4:32:E0:7F:B1:36:AC:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/3137372e37332e3235342e302f32332d3233203d3e20323730303639.roa
Signing time:             Wed 16 Oct 2024 05:35:00 +0000
ROA not before:           Wed 16 Oct 2024 05:30:00 +0000
ROA not after:            Wed 15 Oct 2025 05:35:00 +0000
asID:                     270069
IP address blocks:        177.73.254.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:26:60:c7:bb:2d:df:d8:d4:00:a6:2b:10:9d:b7:d6:81:64:f3:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84EB5F447148428DC5D38B48E432E07FB136ACAD
        Validity
            Not Before: Oct 16 05:30:00 2024 GMT
            Not After : Oct 15 05:35:00 2025 GMT
        Subject: CN=C4E503025DE1B7837A162628B6ECB77A9CDA6BDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8f:88:6f:99:09:3f:2f:b0:80:91:5b:15:10:
                    ca:61:8e:cf:d8:6f:fa:ff:95:96:83:17:d0:f3:5d:
                    c4:d2:53:20:7c:2e:cb:bc:94:fa:0f:44:29:db:6a:
                    69:e6:dd:38:4b:65:0b:e2:3e:d8:5b:cc:6b:c0:bf:
                    21:c7:85:e1:af:0d:84:c4:e4:8a:90:05:71:5d:d5:
                    81:a6:6c:13:3d:4d:e5:c7:93:b2:69:42:76:79:d2:
                    a4:3a:d3:2d:0d:62:38:6c:c0:98:8e:86:36:bd:b1:
                    21:0e:2c:fa:15:f2:b3:25:21:26:c6:7b:29:7a:dd:
                    03:31:39:43:b7:e3:bb:07:97:4e:0b:ad:39:d4:8f:
                    a1:f7:ae:70:d4:90:dc:54:50:03:b1:b4:93:c0:9d:
                    35:be:fb:b5:4d:97:74:01:5d:78:0a:94:55:4c:3b:
                    d6:0e:6c:31:99:52:29:c6:1c:2a:7c:c3:5b:7e:6e:
                    ae:2b:50:9a:1d:46:11:52:bf:de:b2:8a:18:10:4a:
                    26:93:b7:68:cc:04:a6:98:b7:b2:5f:96:a2:7f:98:
                    03:2e:8e:1a:64:a9:35:82:2a:16:ad:20:67:f6:9c:
                    97:a3:8d:20:08:48:72:6e:01:2d:98:d9:57:04:7f:
                    3c:37:4d:9f:e5:42:5a:20:1a:f8:78:1a:27:c6:18:
                    5d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E5:03:02:5D:E1:B7:83:7A:16:26:28:B6:EC:B7:7A:9C:DA:6B:DC
            X509v3 Authority Key Identifier:
                keyid:84:EB:5F:44:71:48:42:8D:C5:D3:8B:48:E4:32:E0:7F:B1:36:AC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84EB5F447148428DC5D38B48E432E07FB136ACAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D8EF8C87640CB779010A99856E3C75722307E11EB810A2B2A3E666C7D1564CE/0/3137372e37332e3235342e302f32332d3233203d3e20323730303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:8f:a5:2f:ab:50:91:af:2e:e2:31:8d:10:81:4c:f9:50:06:
         3f:5a:38:78:97:50:69:87:ff:29:18:b9:ca:f0:51:53:00:3c:
         94:7d:78:29:23:27:4c:35:4c:b6:30:17:f0:e5:37:dc:33:19:
         62:a7:cf:b9:59:01:c0:ab:13:7b:98:17:a2:61:64:16:f6:0b:
         07:71:a4:8a:cf:9e:8f:ed:52:9d:5e:48:30:b1:b4:31:b6:7c:
         28:08:1e:79:90:ce:79:dc:96:69:67:68:7c:14:e0:72:07:5d:
         e6:d8:5f:df:20:1d:ad:ce:33:87:e1:8a:7a:7e:d1:bd:91:a4:
         70:7d:9c:10:87:fb:1f:0f:b9:25:79:6e:44:c6:66:66:34:e3:
         71:d6:59:cd:22:1e:14:97:40:bd:1d:b7:59:34:49:c3:c8:74:
         14:80:b3:0d:07:b5:67:7d:10:bb:fe:41:07:3c:cf:b4:00:02:
         5e:12:1b:1e:26:10:93:c7:b9:6a:4a:33:db:50:97:4f:7e:20:
         ed:10:c9:ca:45:10:f9:3c:cb:16:9c:9c:9d:85:a2:82:77:0c:
         7d:2b:92:e1:99:a4:09:07:78:20:49:56:37:e2:09:b3:ee:ea:
         02:cf:25:fb:a6:12:20:e2:8c:0b:3a:bb:bc:28:85:85:15:24:
         90:f0:dd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 14:26:05 2024 by rpki-client on console-fra.rpki-client.org