Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/3138372e37332e3137362e302f32322d3234203d3e20323639393930.roa
File:                     3138372e37332e3137362e302f32322d3234203d3e20323639393930.roa (raw, json)
Hash identifier:          TFRTnE6jJiQer5/eHHEyCP5xgbu9y1Arkqu3vPmv5y4=
Subject key identifier:   04:0A:1E:F9:1C:68:CB:C5:F0:39:7E:77:0F:2C:1E:1C:45:21:E7:E2
Certificate issuer:       /CN=5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1
Certificate serial:       50E7A013DBA29DA7121A783539EF251E4D9777E8
Authority key identifier: 5A:E0:C2:D0:4B:B5:BA:4F:90:E7:D5:91:C0:E7:59:62:4F:79:F7:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/3138372e37332e3137362e302f32322d3234203d3e20323639393930.roa
Signing time:             Tue 05 Mar 2024 17:57:32 +0000
ROA not before:           Tue 05 Mar 2024 17:52:32 +0000
ROA not after:            Tue 04 Mar 2025 17:57:32 +0000
asID:                     269990
IP address blocks:        187.73.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e7:a0:13:db:a2:9d:a7:12:1a:78:35:39:ef:25:1e:4d:97:77:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1
        Validity
            Not Before: Mar  5 17:52:32 2024 GMT
            Not After : Mar  4 17:57:32 2025 GMT
        Subject: CN=040A1EF91C68CBC5F0397E770F2C1E1C4521E7E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:05:3f:75:b1:48:92:ea:28:36:bc:f7:a5:f5:
                    db:dd:72:a7:3e:27:6b:14:a9:73:96:32:9e:ae:fc:
                    4f:86:41:2d:10:6e:63:b0:8b:ed:8a:e2:b7:b6:05:
                    28:43:96:ed:de:0a:06:10:ac:ae:2b:73:4e:b8:33:
                    d8:38:dd:43:18:03:9f:78:93:87:25:53:ca:2c:8d:
                    ad:b6:97:fd:d5:29:66:a3:98:37:83:08:22:26:ff:
                    42:d8:01:5f:db:1f:8e:e1:42:4d:c4:7d:eb:92:67:
                    02:97:ea:58:48:2e:1f:f7:df:7c:9b:3f:86:a0:08:
                    eb:ec:5f:a9:73:82:d6:5c:85:c6:9b:8b:78:87:02:
                    53:ee:ba:b9:59:0c:97:82:82:5a:d3:d6:f5:24:e0:
                    8e:02:38:6f:0f:be:c4:48:2d:7e:39:43:6e:45:57:
                    5e:99:2d:a0:a6:53:3a:ef:cb:0e:40:67:fd:f2:89:
                    85:03:a1:90:8d:95:90:7e:6c:af:2e:26:9a:bc:6f:
                    b4:ce:3d:38:75:ff:3c:f4:7b:7c:a2:0b:a2:67:4c:
                    3d:d7:9f:49:73:e7:6f:74:2c:19:89:aa:b0:55:74:
                    59:54:ec:51:61:b7:c3:20:7f:5f:2e:5f:23:1a:fe:
                    f2:57:4b:e6:4b:09:e8:50:55:76:62:a3:b4:a9:a1:
                    dd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:0A:1E:F9:1C:68:CB:C5:F0:39:7E:77:0F:2C:1E:1C:45:21:E7:E2
            X509v3 Authority Key Identifier:
                keyid:5A:E0:C2:D0:4B:B5:BA:4F:90:E7:D5:91:C0:E7:59:62:4F:79:F7:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AE0C2D04BB5BA4F90E7D591C0E759624F79F7D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AE81B145FD060C1908A28F1090112FE9D6167307101C7462127B1629997AAB9/0/3138372e37332e3137362e302f32322d3234203d3e20323639393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:18:18:6c:f2:07:39:32:fd:1a:65:d2:91:1a:5b:82:e9:67:
         c8:09:d6:ea:f0:01:41:df:a6:94:97:ec:b1:b5:07:7a:49:74:
         ed:3d:ef:b2:ef:7e:2c:23:59:3f:28:70:32:79:6f:c0:5c:b7:
         9b:f9:b2:60:0d:5b:a4:63:e8:c5:99:07:cf:ea:09:c0:be:98:
         74:2f:a9:cd:46:30:ef:56:93:8b:fd:7d:87:38:23:a9:56:96:
         4a:f1:89:10:51:5f:30:46:1a:af:19:f4:15:b4:3c:8b:d7:50:
         f2:7e:af:57:ca:d7:b6:a5:19:f8:94:d7:63:88:a7:27:11:74:
         d9:d0:d2:b8:84:6c:a4:75:72:50:f0:c3:b4:2e:ba:6d:ab:64:
         9f:8a:ac:7b:d1:4a:23:fc:09:01:80:7e:9d:2c:5b:53:75:e4:
         05:09:9e:9e:4d:89:d9:a6:e0:b7:c9:57:69:e9:f0:64:09:50:
         a4:0a:39:62:d8:7b:ff:21:92:31:77:5c:16:b9:ae:53:b5:df:
         ab:51:f9:06:00:4c:0a:40:a3:4e:3c:93:c5:d4:17:bf:65:ba:
         6e:9e:5e:a7:1d:42:4a:3b:26:2a:e8:9e:53:70:8b:11:83:0d:
         be:47:d7:3b:55:7a:c4:9b:d9:dd:4a:36:58:12:23:cc:3b:ec:
         ed:cc:4b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:28:47 2024 by rpki-client on console-ams.rpki-client.org