Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e302e302f31352d3135203d3e203237383636.roa
File:                     3137372e3235302e302e302f31352d3135203d3e203237383636.roa (raw, json)
Hash identifier:          rIrezE+eLkW8GceJ8PrKmwuhydPkGwhyxWfZQqvSe8Q=
Subject key identifier:   CD:0A:77:DB:71:86:54:CE:23:33:53:0C:59:76:66:92:97:A8:B4:CB
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       5F2545F30869CAFCB2330BB3F6D452F628938164
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e302e302f31352d3135203d3e203237383636.roa
Signing time:             Tue 05 Mar 2024 18:20:38 +0000
ROA not before:           Tue 05 Mar 2024 18:15:38 +0000
ROA not after:            Tue 04 Mar 2025 18:20:38 +0000
asID:                     27866
IP address blocks:        177.250.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:25:45:f3:08:69:ca:fc:b2:33:0b:b3:f6:d4:52:f6:28:93:81:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Mar  5 18:15:38 2024 GMT
            Not After : Mar  4 18:20:38 2025 GMT
        Subject: CN=CD0A77DB718654CE2333530C5976669297A8B4CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5d:8d:34:52:fb:c4:5e:ce:a0:99:64:fb:a4:
                    51:f3:80:38:d6:c6:a5:e3:fa:1a:d9:1d:bd:ed:fa:
                    e3:3b:25:23:2b:1f:b5:8e:9d:48:80:3c:14:6c:07:
                    ff:b3:d4:ab:fa:8c:e5:5b:1e:ea:6a:c6:e1:86:df:
                    2a:37:2b:4a:dc:5d:e5:e2:12:13:e7:ca:cc:95:c8:
                    f7:47:dc:d0:9f:05:31:ec:8d:dd:00:d4:39:76:0b:
                    05:4f:d9:3f:72:6c:87:fc:4f:a2:5e:5d:e7:63:42:
                    5d:52:84:40:f5:90:10:4c:86:35:7c:0a:04:01:1a:
                    0e:99:81:b4:64:40:45:96:71:01:6f:7c:84:f3:35:
                    5e:b9:ab:a3:35:90:be:3c:29:9c:a4:2b:ea:51:0b:
                    e5:1b:74:9e:ed:36:92:6f:4a:71:a1:c1:69:4e:f9:
                    46:6a:5b:e5:9d:a3:a5:62:25:12:95:67:66:73:5b:
                    61:24:e7:5f:37:4d:6c:d7:51:1c:b8:3a:17:74:73:
                    6c:54:c8:43:22:d5:2e:42:38:12:43:9a:cf:8a:b8:
                    57:47:a3:71:58:33:49:24:8e:aa:d5:35:79:a5:28:
                    85:13:07:ee:16:4e:eb:ed:32:86:d9:56:6c:f7:0a:
                    33:9a:e1:8e:f7:3b:9f:d4:9b:da:e3:5b:84:72:a8:
                    2b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0A:77:DB:71:86:54:CE:23:33:53:0C:59:76:66:92:97:A8:B4:CB
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e302e302f31352d3135203d3e203237383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.250.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         62:90:8a:ba:2e:74:1b:53:f8:c3:a7:ab:7f:80:6e:6b:99:a0:
         96:4d:34:6d:05:5d:18:9b:75:44:c8:90:c9:37:ec:6a:bb:26:
         a4:7e:97:7a:19:7f:7a:2a:7f:4c:3b:92:df:1b:cf:ce:20:e1:
         7c:89:18:5a:6d:47:0e:03:2d:3e:1f:9b:0c:d9:53:94:13:89:
         de:3d:e1:fa:87:c3:61:93:81:eb:fe:8f:29:36:db:f8:a5:0e:
         89:03:c8:37:be:9b:3e:51:fe:66:29:34:bb:76:34:2a:16:9e:
         a3:55:50:19:af:c8:b4:5a:9f:6f:d1:db:de:de:a8:5f:9c:97:
         1b:5c:4e:27:3b:d9:53:2c:17:c7:f0:29:66:1a:1d:20:e6:a3:
         09:49:60:62:36:29:0e:ae:2d:1a:f1:53:37:40:78:80:99:10:
         d8:5f:7d:0c:68:b2:fd:ee:39:da:44:f8:e1:95:40:c6:be:2e:
         3c:82:cf:85:ab:a4:d7:30:24:73:66:93:70:3e:44:ae:92:c0:
         6b:33:dd:db:12:6e:9c:5d:f6:72:11:0e:0b:21:d9:ec:73:3a:
         cf:a9:4b:fa:9a:4a:af:07:cb:3b:7a:b3:6c:ee:8a:1d:de:b9:
         94:23:7a:2f:4a:0e:b5:d7:cf:7e:6b:37:19:4a:70:a0:8c:8a:
         3c:dc:93:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:11 2024 by rpki-client on console-fra.rpki-client.org