Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e33322e302f32302d3230203d3e203237373638.roa
File:                     3137372e3235302e33322e302f32302d3230203d3e203237373638.roa (raw, json)
Hash identifier:          pde5sKqZmhkd+k0lIVYd3YVfLGmJ3OVR/d7mf3jJuXA=
Subject key identifier:   E0:CE:FC:39:80:98:8F:E0:E3:17:2D:20:A4:9A:F1:A0:15:68:2C:8E
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       72878C168BD493B2A5BE1136567120A8DC87A368
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e33322e302f32302d3230203d3e203237373638.roa
Signing time:             Fri 06 Dec 2024 18:35:01 +0000
ROA not before:           Fri 06 Dec 2024 18:30:01 +0000
ROA not after:            Fri 05 Dec 2025 18:35:01 +0000
asID:                     27768
IP address blocks:        177.250.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 19:59:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:87:8c:16:8b:d4:93:b2:a5:be:11:36:56:71:20:a8:dc:87:a3:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Dec  6 18:30:01 2024 GMT
            Not After : Dec  5 18:35:01 2025 GMT
        Subject: CN=E0CEFC3980988FE0E3172D20A49AF1A015682C8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2d:00:fc:9c:c1:5b:f6:0d:1a:d6:a6:f1:6b:
                    02:51:56:f4:14:bc:99:40:5f:31:9a:5b:6c:fb:06:
                    a6:db:a2:0f:10:be:ed:7d:e9:bd:84:31:42:30:ea:
                    d5:f2:d7:15:89:d4:5a:3a:92:9d:c7:c7:c4:9e:8b:
                    0f:79:0f:42:98:e1:95:87:06:58:d5:cb:c1:83:b1:
                    98:a9:7a:bb:f6:b8:65:03:cc:33:f4:2b:8e:b3:5f:
                    66:73:ca:75:55:de:4d:01:69:cd:e3:6c:e5:1f:a1:
                    49:a6:8e:a1:98:f1:db:ad:ae:ef:4d:62:73:ff:1a:
                    06:9b:b2:74:14:87:82:06:3a:f4:a2:67:9a:b3:4c:
                    2f:cc:bf:2c:f0:6e:62:17:9f:09:35:8c:7e:7f:71:
                    7b:a5:88:50:66:d7:df:a5:70:c6:bc:f9:ea:65:94:
                    60:a1:dc:73:bc:9b:fa:fd:aa:94:2a:8b:18:3e:00:
                    dc:cd:a9:b4:af:56:e0:56:f3:4d:be:9c:68:70:d3:
                    7c:98:3f:8e:01:ee:03:c5:4a:d4:ce:8b:50:72:24:
                    cc:e3:f5:05:76:4e:7c:1e:48:ce:a6:b7:4b:1f:73:
                    16:56:33:50:7c:58:ac:73:00:88:d0:bb:d1:0f:75:
                    7d:40:b8:66:5e:f3:34:e9:65:a4:56:43:22:3a:14:
                    e5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CE:FC:39:80:98:8F:E0:E3:17:2D:20:A4:9A:F1:A0:15:68:2C:8E
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e33322e302f32302d3230203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.250.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         40:80:e2:fb:ae:2a:1d:23:4e:be:90:a9:2a:23:07:9c:45:2e:
         f1:17:99:eb:bc:81:c4:86:d5:38:4b:d8:c8:b9:40:71:da:13:
         34:40:6f:21:d1:ed:12:e3:76:68:21:38:a9:76:b0:fd:44:c5:
         2a:ff:6d:54:ab:0b:bb:96:0f:82:91:a1:29:eb:2d:e4:76:e3:
         bb:3d:f0:9a:4a:25:12:0a:ca:37:36:83:22:39:c6:1a:22:92:
         87:5f:3f:6f:73:8a:04:6e:79:5c:ad:9b:66:81:5e:95:5c:04:
         8c:44:55:48:86:51:00:66:46:d8:3f:df:30:38:98:fd:01:6e:
         31:4d:3a:c7:cc:6e:97:57:69:3c:f1:ea:da:c5:e2:3a:2d:2c:
         88:b1:6b:b9:a0:d1:14:b1:de:b4:2e:7d:89:3b:d2:3a:11:74:
         c7:d8:31:7a:7d:ef:e3:a6:40:ba:e1:1c:c6:d1:95:67:95:6f:
         45:ab:44:f9:f8:ba:af:26:de:5c:e4:94:7c:30:47:84:89:4f:
         68:54:22:1a:5a:ee:19:4f:61:08:08:0b:8c:de:16:5e:fc:a2:
         aa:5c:b1:b9:b1:ed:49:30:d4:87:d7:79:7a:73:08:81:37:e8:
         5b:2b:e2:38:4e:81:03:e6:12:14:aa:5d:58:a3:81:ae:75:d4:
         85:f2:66:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:39 2025 by rpki-client