Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/3137372e3138342e39322e302f32322d3234203d3e20323733383737.roa
File:                     3137372e3138342e39322e302f32322d3234203d3e20323733383737.roa (raw, json)
Hash identifier:          NXsPNdkcoqi1SGpwphF5H+/bJCHNC/3VBv1ROHlREyU=
Subject key identifier:   A4:8D:02:D0:FD:61:24:0D:84:84:6D:E6:E5:71:EB:17:BD:B1:30:C3
Certificate issuer:       /CN=64989D03F141E6B4840F299AD2E229F9A3F6DD77
Certificate serial:       12227502E8382F895C1286A73D9210DAB0515C81
Authority key identifier: 64:98:9D:03:F1:41:E6:B4:84:0F:29:9A:D2:E2:29:F9:A3:F6:DD:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/3137372e3138342e39322e302f32322d3234203d3e20323733383737.roa
Signing time:             Thu 11 Jul 2024 02:20:00 +0000
ROA not before:           Thu 11 Jul 2024 02:15:00 +0000
ROA not after:            Thu 10 Jul 2025 02:20:00 +0000
asID:                     273877
IP address blocks:        177.184.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:22:75:02:e8:38:2f:89:5c:12:86:a7:3d:92:10:da:b0:51:5c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64989D03F141E6B4840F299AD2E229F9A3F6DD77
        Validity
            Not Before: Jul 11 02:15:00 2024 GMT
            Not After : Jul 10 02:20:00 2025 GMT
        Subject: CN=A48D02D0FD61240D84846DE6E571EB17BDB130C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:04:a2:ad:bd:44:ec:ad:ca:98:e6:27:7f:56:
                    65:e2:8a:b7:fc:d2:22:ef:c7:85:a2:4b:88:38:f0:
                    29:48:38:0e:9f:1c:de:1b:bb:2a:bb:44:73:70:05:
                    cd:39:76:89:31:ce:6c:9b:6c:a1:3d:14:1e:01:dd:
                    b0:d2:49:a3:d3:53:45:a2:52:b0:a7:2b:bf:c1:7e:
                    11:9c:1e:3f:e5:73:82:11:c1:16:7d:2b:b0:59:0a:
                    b4:45:f6:b1:5a:a1:6d:57:40:ed:23:54:30:2b:be:
                    7a:91:72:05:62:ca:d2:fc:8e:e7:a2:2c:10:54:d1:
                    af:a2:aa:12:c7:d0:94:40:b1:23:9f:dd:be:08:d9:
                    ca:b0:56:56:a2:02:42:5d:74:e0:33:20:63:8a:a2:
                    0c:a5:6a:69:2c:5b:88:b9:3a:43:ae:9d:8e:c3:33:
                    ba:f3:4f:c4:d4:22:4e:1a:83:a7:9e:a8:57:a0:41:
                    2d:da:cd:a6:df:24:e4:c0:6b:56:b7:5d:53:31:38:
                    f9:5e:dc:41:d6:fd:08:b3:fb:d4:d6:41:08:89:e1:
                    28:b0:c7:db:58:80:73:13:08:dd:cd:b2:bc:da:92:
                    76:3e:a2:62:2d:3d:1c:64:b2:e5:f0:a6:f3:17:41:
                    9b:a1:f5:06:41:04:39:bf:5a:83:07:24:76:9c:14:
                    04:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8D:02:D0:FD:61:24:0D:84:84:6D:E6:E5:71:EB:17:BD:B1:30:C3
            X509v3 Authority Key Identifier:
                keyid:64:98:9D:03:F1:41:E6:B4:84:0F:29:9A:D2:E2:29:F9:A3:F6:DD:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64989D03F141E6B4840F299AD2E229F9A3F6DD77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B6F64B5E3928B29CDB375003108665F7EA3D191148C7ACA28310E45C96B0A21/0/3137372e3138342e39322e302f32322d3234203d3e20323733383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:02:7a:85:38:7a:28:ad:11:e0:f2:b7:e6:a7:5d:65:c6:93:
         f1:16:05:4c:67:b4:de:83:35:fc:fb:cb:9f:9f:10:47:30:85:
         76:f0:eb:cd:eb:4c:06:24:a7:fa:ba:3c:a6:15:d5:d9:9b:12:
         28:22:0f:fa:6a:a0:0f:1e:6e:bb:33:b0:e2:44:03:2a:b3:6f:
         f4:4a:96:8a:a1:1c:82:41:5d:99:2e:9b:12:01:70:07:16:fa:
         3c:b4:53:f2:eb:4e:ae:db:7d:86:0c:c3:e2:12:fd:8c:d3:28:
         c7:7e:19:e8:ea:cd:9a:49:3b:7d:13:f5:76:38:c2:ef:d0:65:
         0c:8a:f1:58:8a:16:8c:35:55:0e:21:7d:9c:c5:b8:e7:0a:6a:
         91:c2:80:84:c2:80:e3:46:65:f9:8a:32:82:81:89:f1:ae:75:
         82:62:d5:01:4d:9b:84:d6:17:f5:5c:c6:9b:1b:4c:21:dc:e0:
         c2:51:1c:f4:e5:ea:0f:70:ae:d9:0e:57:35:fb:4a:9a:80:eb:
         a3:cc:bc:10:f9:1d:21:de:f8:dc:55:58:0f:54:b2:fc:79:81:
         89:43:8d:0f:97:60:0b:04:7d:ae:38:3e:fa:9a:f3:e1:0e:a7:
         07:e1:65:85:2f:e1:62:71:f9:db:50:c1:cc:8f:bb:bd:3d:f4:
         40:9b:36:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:12 2024 by rpki-client on console-ams.rpki-client.org