Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/3137372e3138342e39322e302f32322d3234203d3e20323731373835.roa
File:                     3137372e3138342e39322e302f32322d3234203d3e20323731373835.roa (raw, json)
Hash identifier:          8kzPGzuHgACU2430k7sG4sqkQUWsLQ34hWQZ/4wdu1U=
Subject key identifier:   7A:A6:67:63:B8:C5:7A:98:B3:D2:D7:7A:71:E3:29:79:2C:6A:AA:DA
Certificate issuer:       /CN=64989D03F141E6B4840F299AD2E229F9A3F6DD77
Certificate serial:       4B33151E522B8B5DD4051B77AFF41A67F1876038
Authority key identifier: 64:98:9D:03:F1:41:E6:B4:84:0F:29:9A:D2:E2:29:F9:A3:F6:DD:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/3137372e3138342e39322e302f32322d3234203d3e20323731373835.roa
Signing time:             Tue 04 Feb 2025 18:15:03 +0000
ROA not before:           Tue 04 Feb 2025 18:10:03 +0000
ROA not after:            Tue 03 Feb 2026 18:15:03 +0000
asID:                     271785
IP address blocks:        177.184.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:33:15:1e:52:2b:8b:5d:d4:05:1b:77:af:f4:1a:67:f1:87:60:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64989D03F141E6B4840F299AD2E229F9A3F6DD77
        Validity
            Not Before: Feb  4 18:10:03 2025 GMT
            Not After : Feb  3 18:15:03 2026 GMT
        Subject: CN=7AA66763B8C57A98B3D2D77A71E329792C6AAADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6d:90:38:15:53:61:aa:92:bf:bb:54:02:4f:
                    9b:9f:74:16:2c:31:2a:db:73:46:95:6c:b4:cc:2f:
                    a4:5b:53:51:41:5a:eb:16:38:ee:ef:b9:da:6c:d6:
                    65:cf:7c:bf:a6:6d:34:b8:24:ce:ad:6f:60:c6:22:
                    94:1b:c6:fb:98:ca:2d:94:f3:67:e4:11:a8:c4:c5:
                    1a:42:e1:22:0f:8f:00:e3:73:98:95:78:3f:5d:00:
                    19:25:d1:13:66:f3:44:06:93:06:06:80:b8:e1:31:
                    e6:1b:48:bf:88:ee:64:18:c4:2d:86:0a:c3:9c:70:
                    75:b0:3c:f0:a1:e4:23:d9:e4:01:a3:fe:93:72:61:
                    ae:80:97:a1:05:87:c4:ee:a8:fc:1f:61:41:65:76:
                    44:21:07:75:dd:3f:85:f5:99:29:c9:5d:38:9a:73:
                    40:25:7f:23:b9:a9:77:13:15:c9:9f:91:e3:41:af:
                    f8:bf:14:43:e9:b5:f3:9d:75:bd:da:cd:c0:55:53:
                    ad:ec:3c:ba:63:69:be:c3:28:05:a3:3a:b4:47:22:
                    5a:78:1b:6b:be:6f:a4:50:55:11:dc:d2:28:59:03:
                    a5:6e:81:c5:00:43:9a:de:f2:e4:3d:36:3d:07:5f:
                    79:b0:e4:17:23:6a:49:74:be:8f:32:fb:23:a6:ba:
                    b6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A6:67:63:B8:C5:7A:98:B3:D2:D7:7A:71:E3:29:79:2C:6A:AA:DA
            X509v3 Authority Key Identifier:
                keyid:64:98:9D:03:F1:41:E6:B4:84:0F:29:9A:D2:E2:29:F9:A3:F6:DD:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/3137372e3138342e39322e302f32322d3234203d3e20323731373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:61:08:5e:f8:99:9c:5f:22:c8:26:ea:d3:67:4a:a4:69:77:
         b2:3d:7b:b9:ac:de:c5:0d:83:27:76:f8:87:e7:86:69:af:9f:
         e9:a3:15:24:db:60:69:94:c3:fc:db:b9:db:f3:34:74:43:b5:
         31:6a:06:e4:1b:c2:db:99:5d:ea:5d:2b:9c:0c:e5:b6:30:c7:
         8e:52:48:26:5c:f9:71:c6:fd:ee:65:31:fa:b4:22:5f:85:a4:
         5b:b6:39:33:15:fe:71:26:c3:37:ce:6c:15:bc:59:b4:bd:93:
         2d:61:6d:0f:44:5d:eb:99:56:db:5c:73:62:18:79:cf:36:15:
         19:a8:a5:84:50:d2:0b:fb:4e:a6:0f:aa:fe:88:2e:bc:88:07:
         40:96:80:df:1b:fe:f8:d8:5f:6f:53:fe:77:bc:9e:d8:9c:cc:
         ec:ad:ef:6e:71:8d:f8:ea:e3:dd:da:d1:ce:dc:4c:a4:82:e9:
         e4:01:1d:58:0c:ce:bd:ea:fc:40:6b:3a:9a:79:6e:67:87:3f:
         80:e0:80:3f:c5:62:a2:dc:62:2a:12:92:fe:54:05:b2:63:3b:
         8b:a5:20:f0:48:10:35:b7:47:05:49:ea:db:7d:fa:c3:9e:e2:
         71:ab:dc:55:5e:14:f3:fd:7a:b6:b7:40:ed:f9:38:53:a8:09:
         b8:a1:6c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:06:11 2025 by rpki-client