Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3137372e3233342e3139352e302f32342d3234203d3e20323731383734.roa
File:                     3137372e3233342e3139352e302f32342d3234203d3e20323731383734.roa (raw, json)
Hash identifier:          6s/uKOAR4raC7yoW3oalW7o30jLeor7jQRccioLkkok=
Subject key identifier:   6E:91:55:14:B8:9E:4B:A1:5B:0B:66:84:83:DB:E6:FB:07:BC:6F:08
Certificate issuer:       /CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
Certificate serial:       38EF0D3F5D9FD19F22F99150A26AB898908A6BB1
Authority key identifier: C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3137372e3233342e3139352e302f32342d3234203d3e20323731383734.roa
Signing time:             Tue 05 Mar 2024 18:21:07 +0000
ROA not before:           Tue 05 Mar 2024 18:16:07 +0000
ROA not after:            Tue 04 Mar 2025 18:21:07 +0000
asID:                     271874
IP address blocks:        177.234.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 May 2024 17:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ef:0d:3f:5d:9f:d1:9f:22:f9:91:50:a2:6a:b8:98:90:8a:6b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
        Validity
            Not Before: Mar  5 18:16:07 2024 GMT
            Not After : Mar  4 18:21:07 2025 GMT
        Subject: CN=6E915514B89E4BA15B0B668483DBE6FB07BC6F08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e0:ba:3c:6c:1c:c0:ee:de:1c:a2:c3:a2:9b:
                    c2:93:d4:3a:1d:eb:12:2d:c5:78:2c:dc:54:99:b0:
                    0b:8d:86:05:a5:bb:b5:7e:08:b8:e1:e9:42:58:5a:
                    cd:ba:13:b7:24:52:b9:af:26:60:6c:60:8c:58:ec:
                    c7:fa:39:50:65:5c:1a:21:47:57:2f:77:bb:6f:8e:
                    88:85:1a:8d:3a:49:f2:c2:f6:12:a6:d7:0c:8c:7d:
                    a8:7b:bb:67:b6:3c:c4:73:b0:e4:89:d2:d5:fb:fb:
                    30:ac:a5:81:02:b3:b1:fc:f2:91:d3:21:cf:78:c9:
                    e1:7a:87:18:78:56:3d:cf:a6:24:d4:79:3d:bc:43:
                    94:ea:3e:85:57:85:a5:33:96:8d:22:c9:94:a4:c5:
                    6e:d4:bf:03:47:3e:13:bb:16:24:d1:a2:83:25:12:
                    9b:a8:e5:78:dc:62:ad:77:a8:72:30:8b:e2:de:77:
                    e7:f7:bf:b9:81:ac:1b:fd:ec:9d:2e:02:7a:11:3a:
                    6e:b8:06:5f:2d:b3:41:68:c3:5e:61:b1:0c:e1:dc:
                    15:b4:78:b7:33:3b:7d:25:da:b9:36:06:9b:13:02:
                    50:4f:56:b0:b7:af:26:40:b8:01:2a:76:a1:07:f2:
                    50:46:2b:93:b0:95:3d:78:0b:02:98:00:8b:bf:8a:
                    c5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:91:55:14:B8:9E:4B:A1:5B:0B:66:84:83:DB:E6:FB:07:BC:6F:08
            X509v3 Authority Key Identifier:
                keyid:C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3137372e3233342e3139352e302f32342d3234203d3e20323731383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.234.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:21:5e:aa:40:b3:21:d5:08:ac:89:4d:83:5f:be:ae:7e:85:
         0f:6b:bf:14:e2:98:71:6d:a6:7c:ba:61:1b:29:3a:8a:a4:41:
         d2:88:4b:02:52:bb:50:ad:66:6c:dd:d9:75:14:69:09:fb:32:
         9e:dc:96:f9:2d:aa:c2:2a:3d:bd:97:91:57:20:cf:4a:3f:d0:
         09:ff:bb:fe:a8:d5:7b:52:0c:f5:a1:dd:1a:2c:db:a9:1e:c4:
         7d:62:fb:3d:15:3d:bf:f7:55:1d:63:19:a2:13:6a:1b:4d:6c:
         82:0d:f1:e7:a2:8e:f4:8d:50:0c:a2:40:2e:f3:a9:dd:ee:9b:
         90:b5:14:21:06:69:67:2c:16:26:09:1e:77:f3:ca:84:91:38:
         f3:40:ba:36:f6:ab:76:39:70:00:7f:55:62:b0:66:13:b5:de:
         cc:e2:c5:44:64:91:6f:ba:d6:66:7c:50:fb:1e:2e:3c:96:30:
         96:e1:40:ae:b4:de:eb:00:74:26:13:95:bb:c4:85:97:1c:f1:
         0b:0f:39:2e:9c:bd:57:6a:8d:39:6f:40:88:c5:66:df:54:00:
         5d:6f:6e:23:45:68:04:f5:36:04:03:9a:f2:5b:d7:3f:b3:78:
         ad:3e:aa:55:22:3c:00:03:55:2b:7a:1a:28:81:7f:3b:f7:d1:
         3f:06:84:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:08:41 2024 by rpki-client on console-fra.rpki-client.org