Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e3132382e302f31382d3138203d3e203237373638.roa
File:                     3137372e3235302e3132382e302f31382d3138203d3e203237373638.roa (raw, json)
Hash identifier:          WJGMUJDEPvrZU7VFfPi+HTGyMI7cN7gwBrBXniw9BDw=
Subject key identifier:   D6:30:A8:82:D7:7C:01:1D:EC:4B:EA:B3:87:2C:A9:7C:52:0C:44:02
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       3008AAED8CE23A45A53441894982CB295F782933
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e3132382e302f31382d3138203d3e203237373638.roa
Signing time:             Tue 05 Mar 2024 18:20:37 +0000
ROA not before:           Tue 05 Mar 2024 18:15:37 +0000
ROA not after:            Tue 04 Mar 2025 18:20:37 +0000
asID:                     27768
IP address blocks:        177.250.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 May 2024 00:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:08:aa:ed:8c:e2:3a:45:a5:34:41:89:49:82:cb:29:5f:78:29:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Mar  5 18:15:37 2024 GMT
            Not After : Mar  4 18:20:37 2025 GMT
        Subject: CN=D630A882D77C011DEC4BEAB3872CA97C520C4402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ca:c2:5b:4f:41:80:35:40:84:fc:07:fc:92:
                    e3:1e:32:48:59:ae:ca:c7:52:53:89:5d:ae:3b:9a:
                    ab:e5:84:7e:b3:06:14:c5:a4:31:8e:aa:c8:47:85:
                    1b:62:98:c8:0a:40:a7:4a:e9:79:e6:6f:b5:dd:1a:
                    76:9b:89:df:25:23:e5:5b:a7:d2:c3:bb:74:db:80:
                    85:bf:85:4f:da:c4:fc:0f:a1:40:a3:8f:df:52:61:
                    04:9d:e2:4a:40:53:b6:20:b2:93:c0:eb:3b:f2:14:
                    f5:47:85:5f:e8:b3:31:6e:12:1f:51:e2:e1:34:05:
                    c6:b6:c0:2f:16:b3:21:8b:2a:c9:8e:6d:64:c8:0b:
                    67:05:0e:dd:c5:2d:39:15:95:2c:5a:98:63:ec:02:
                    ee:70:90:13:a5:2c:f4:f9:d4:6e:6c:f0:d4:f3:5a:
                    9d:41:db:5d:88:41:ef:12:98:b4:74:5f:a0:bf:07:
                    43:0b:dc:ac:ab:62:ae:f9:8e:8a:dc:0f:a3:d8:bd:
                    7e:db:5c:2a:a8:50:8c:81:ed:40:8e:8d:0e:1b:66:
                    40:25:b7:0b:3f:fb:13:2b:74:e0:e6:35:ac:33:4a:
                    04:ec:1c:ef:92:1f:68:33:07:db:86:66:db:54:1a:
                    3a:d2:93:be:dd:1d:c6:a8:bf:58:f9:35:b7:7e:a1:
                    82:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:30:A8:82:D7:7C:01:1D:EC:4B:EA:B3:87:2C:A9:7C:52:0C:44:02
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e3132382e302f31382d3138203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.250.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         69:39:81:cd:ed:02:c1:56:8d:f7:a9:12:2f:08:32:56:ed:cc:
         82:41:02:b2:3c:e9:3a:0b:7f:20:ad:37:02:07:fc:f2:9f:69:
         ea:51:15:0f:94:13:11:4e:0f:09:a8:4d:ee:84:f9:63:e6:86:
         18:bb:38:3a:5b:e2:81:c7:85:28:79:47:8e:ee:71:14:e6:20:
         44:67:3e:45:3a:7a:d5:a0:44:7f:5b:a4:cf:53:a1:cd:6e:7b:
         b0:3e:4b:41:32:02:2a:fa:1e:a9:3f:2c:b1:44:56:c0:91:01:
         2a:cd:8f:9e:4d:c6:f0:44:3a:fd:ff:3e:5f:65:0a:55:e7:fa:
         a6:dd:12:11:62:af:1e:67:e1:a5:6a:8d:09:0d:30:88:9b:c1:
         76:e9:c7:ec:c6:71:fb:5b:09:26:e2:7c:0c:96:06:20:bb:ff:
         17:14:74:70:82:ed:79:36:ce:c5:8d:cb:5b:0a:cb:5d:67:df:
         e9:18:85:86:b5:c3:30:36:88:5d:a0:29:39:20:21:db:ae:ef:
         12:12:de:4e:52:8f:89:31:51:6a:61:cc:ff:d8:4e:d8:a2:74:
         79:f0:a5:17:07:37:b0:0c:74:5f:2b:0c:d0:2b:f6:a8:6e:07:
         b6:df:24:43:1d:e7:ae:d2:98:a2:69:a4:c2:f1:68:5b:5e:be:
         c6:b4:db:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 00:51:24 2024 by rpki-client on console-fra.rpki-client.org