Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A9344AD7F3E806481E736E724CA0647D4C4CC50B4F7645A636BD34E28312BD29/0/3137372e35332e3135322e302f32322d3234203d3e20323730303037.roa
File:                     3137372e35332e3135322e302f32322d3234203d3e20323730303037.roa (raw, json)
Hash identifier:          cnglExHb6VA4lMNMXJHy4FmtXuoZAO3uFMoiYVhypKI=
Subject key identifier:   60:40:06:4A:72:8B:E1:A1:4E:6B:D4:77:BD:F2:76:58:E5:CE:C9:2B
Certificate issuer:       /CN=B5E386B2B08AAF08B211DAD33C8F21352C97B3B1
Certificate serial:       4C2F8B12AB53CABE6231CACCCAF1988DD4B5ECD1
Authority key identifier: B5:E3:86:B2:B0:8A:AF:08:B2:11:DA:D3:3C:8F:21:35:2C:97:B3:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5E386B2B08AAF08B211DAD33C8F21352C97B3B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A9344AD7F3E806481E736E724CA0647D4C4CC50B4F7645A636BD34E28312BD29/0/3137372e35332e3135322e302f32322d3234203d3e20323730303037.roa
Signing time:             Tue 04 Feb 2025 18:11:45 +0000
ROA not before:           Tue 04 Feb 2025 18:06:45 +0000
ROA not after:            Tue 03 Feb 2026 18:11:45 +0000
asID:                     270007
IP address blocks:        177.53.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A9344AD7F3E806481E736E724CA0647D4C4CC50B4F7645A636BD34E28312BD29/0/B5E386B2B08AAF08B211DAD33C8F21352C97B3B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A9344AD7F3E806481E736E724CA0647D4C4CC50B4F7645A636BD34E28312BD29/0/B5E386B2B08AAF08B211DAD33C8F21352C97B3B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5E386B2B08AAF08B211DAD33C8F21352C97B3B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2f:8b:12:ab:53:ca:be:62:31:ca:cc:ca:f1:98:8d:d4:b5:ec:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E386B2B08AAF08B211DAD33C8F21352C97B3B1
        Validity
            Not Before: Feb  4 18:06:45 2025 GMT
            Not After : Feb  3 18:11:45 2026 GMT
        Subject: CN=6040064A728BE1A14E6BD477BDF27658E5CEC92B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0c:10:ea:0c:24:a1:74:99:6d:b9:9e:08:ff:
                    7f:a5:58:bc:e2:bb:a3:27:ca:e8:19:0c:3b:bc:2d:
                    1f:29:96:e1:3d:e7:e0:59:4b:86:8b:9e:c1:d1:c5:
                    5b:84:7f:4f:4b:dd:d7:fb:6f:ef:da:36:db:45:39:
                    eb:50:e4:36:6a:11:8d:5b:49:f6:94:1c:7b:3b:1b:
                    94:a5:fa:c6:88:a8:11:00:08:6c:81:be:79:7b:77:
                    54:c0:b2:28:fb:98:fb:c5:0d:9e:1e:ec:3b:4c:fe:
                    b3:84:00:56:cf:86:bd:21:7e:01:36:7f:9a:fc:ca:
                    f8:8b:24:5c:a4:e7:e5:2d:0f:96:a1:40:e8:92:bd:
                    a6:df:83:6c:3a:84:f2:f6:c5:1c:4f:76:d5:ec:d6:
                    80:5b:13:da:ca:d8:b6:51:1e:e2:ec:99:43:dc:1b:
                    4d:76:be:f6:5c:c4:06:57:ea:b8:51:65:e2:0a:6b:
                    fe:fb:72:4f:ec:6f:8d:7c:a5:7c:15:9a:74:31:59:
                    7a:ac:bc:fe:6e:29:12:2c:08:17:2a:86:85:16:15:
                    03:03:8b:08:ab:a4:e2:64:68:29:4a:23:a8:0e:60:
                    2d:70:a1:c4:a0:04:d9:16:6c:2a:0e:5e:eb:5d:ca:
                    2a:8b:6b:73:4d:e4:7b:49:34:8a:41:3a:0c:a1:2c:
                    17:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:40:06:4A:72:8B:E1:A1:4E:6B:D4:77:BD:F2:76:58:E5:CE:C9:2B
            X509v3 Authority Key Identifier:
                keyid:B5:E3:86:B2:B0:8A:AF:08:B2:11:DA:D3:3C:8F:21:35:2C:97:B3:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A9344AD7F3E806481E736E724CA0647D4C4CC50B4F7645A636BD34E28312BD29/0/B5E386B2B08AAF08B211DAD33C8F21352C97B3B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5E386B2B08AAF08B211DAD33C8F21352C97B3B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A9344AD7F3E806481E736E724CA0647D4C4CC50B4F7645A636BD34E28312BD29/0/3137372e35332e3135322e302f32322d3234203d3e20323730303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:07:16:ac:55:5c:03:c4:20:cc:fd:cd:00:7b:2c:fb:01:83:
         dc:c6:04:f6:f7:b8:86:dd:88:08:62:dd:39:e9:e5:f0:f0:df:
         72:29:22:49:79:76:f0:8b:04:cc:99:4e:29:25:97:ca:03:49:
         6d:e1:99:b8:6a:74:76:31:94:be:29:65:4a:47:f1:2f:fd:15:
         84:cd:54:07:a0:83:8b:a8:bc:15:76:f0:33:6e:8f:5e:cd:c4:
         81:3a:7b:bc:e9:6d:5e:e0:ba:db:80:c9:9d:47:ca:49:07:1c:
         00:41:58:a2:26:be:93:00:00:4b:d2:12:31:f4:bd:35:cd:71:
         48:02:04:bd:4c:57:9e:b2:da:bf:2c:13:1f:96:81:11:30:a8:
         6f:72:17:35:a5:20:28:98:d3:31:b2:4b:a2:76:63:77:9d:af:
         7a:4b:83:79:33:30:45:f3:ac:70:b7:d0:6a:f0:9a:1f:a4:64:
         5d:8e:c7:23:b8:18:d5:e8:bf:0a:88:59:75:81:cf:d5:44:1a:
         f1:ea:25:3c:56:ab:3b:27:88:d7:77:92:1d:21:ac:38:ef:6c:
         90:8b:e3:96:a1:29:fd:7f:20:95:08:72:a5:aa:50:a7:77:9d:
         e5:1c:c4:8e:2d:17:d6:b1:e1:f2:ba:58:2e:38:63:e6:5f:57:
         25:c0:c1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:48 2025 by rpki-client