Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BEB0840B0F8872DB8B5A259858FE5AC3524DFD117B0FA41AA9A9C95C6B87E432/0/3137372e37342e3230302e302f32322d3234203d3e20323731383838.roa
File:                     3137372e37342e3230302e302f32322d3234203d3e20323731383838.roa (raw, json)
Hash identifier:          +0EfvR7c7ntCs6leK/0gLhZM8XDp0tJOElVAi2F1QtM=
Subject key identifier:   B6:79:71:4F:FA:A2:0A:66:DD:54:2A:AC:46:70:95:22:F2:72:00:01
Certificate issuer:       /CN=A1E12285090E8FA250FB58E4DF42D3BC08A60EDD
Certificate serial:       39EAEE8E90AB710BA2E5125C37F7B6E117C98D79
Authority key identifier: A1:E1:22:85:09:0E:8F:A2:50:FB:58:E4:DF:42:D3:BC:08:A6:0E:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E12285090E8FA250FB58E4DF42D3BC08A60EDD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BEB0840B0F8872DB8B5A259858FE5AC3524DFD117B0FA41AA9A9C95C6B87E432/0/3137372e37342e3230302e302f32322d3234203d3e20323731383838.roa
Signing time:             Tue 04 Feb 2025 17:59:58 +0000
ROA not before:           Tue 04 Feb 2025 17:54:58 +0000
ROA not after:            Tue 03 Feb 2026 17:59:58 +0000
asID:                     271888
IP address blocks:        177.74.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BEB0840B0F8872DB8B5A259858FE5AC3524DFD117B0FA41AA9A9C95C6B87E432/0/A1E12285090E8FA250FB58E4DF42D3BC08A60EDD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BEB0840B0F8872DB8B5A259858FE5AC3524DFD117B0FA41AA9A9C95C6B87E432/0/A1E12285090E8FA250FB58E4DF42D3BC08A60EDD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E12285090E8FA250FB58E4DF42D3BC08A60EDD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 17:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ea:ee:8e:90:ab:71:0b:a2:e5:12:5c:37:f7:b6:e1:17:c9:8d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E12285090E8FA250FB58E4DF42D3BC08A60EDD
        Validity
            Not Before: Feb  4 17:54:58 2025 GMT
            Not After : Feb  3 17:59:58 2026 GMT
        Subject: CN=B679714FFAA20A66DD542AAC46709522F2720001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6c:4e:2c:19:17:a5:9d:40:0c:4c:24:1b:40:
                    bc:da:c7:a0:20:e4:c3:b0:e3:67:dd:14:25:86:6f:
                    b1:ed:78:d6:54:19:33:68:ec:b1:16:35:c8:31:b3:
                    23:58:84:bf:98:e6:2f:85:53:27:9f:20:13:a6:42:
                    73:c5:2e:8c:f7:e7:50:a1:d4:27:a0:9b:ec:5b:c7:
                    aa:5d:51:d4:00:d5:4d:fd:90:a7:f9:05:61:ca:b5:
                    cb:b2:9e:26:d6:ad:0b:f2:30:29:68:6f:34:f5:2e:
                    18:e2:28:d5:4b:fb:62:64:a1:2e:10:25:31:ba:9b:
                    07:9d:34:8a:e9:61:0d:af:69:c7:d2:e0:8e:f6:59:
                    88:6c:e9:63:8d:3a:d1:1c:97:30:74:ae:f3:5c:35:
                    db:d1:4e:44:5a:84:e0:11:49:e1:c3:e6:89:62:75:
                    30:65:37:47:09:d1:82:3c:78:1d:25:c8:24:3c:2a:
                    1f:9e:8e:da:e1:64:84:cf:14:3b:57:c2:f4:b2:cf:
                    62:bd:e2:91:e3:d7:bc:6b:c8:7e:39:cd:bd:7f:3e:
                    67:83:10:0e:fe:e6:a4:e5:ec:68:e4:b1:0b:46:52:
                    71:8a:cc:7f:66:ee:4c:44:45:67:60:c6:31:ac:39:
                    5f:1c:ee:68:b8:d4:7e:dd:fc:5e:16:53:54:88:02:
                    a3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:79:71:4F:FA:A2:0A:66:DD:54:2A:AC:46:70:95:22:F2:72:00:01
            X509v3 Authority Key Identifier:
                keyid:A1:E1:22:85:09:0E:8F:A2:50:FB:58:E4:DF:42:D3:BC:08:A6:0E:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BEB0840B0F8872DB8B5A259858FE5AC3524DFD117B0FA41AA9A9C95C6B87E432/0/A1E12285090E8FA250FB58E4DF42D3BC08A60EDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E12285090E8FA250FB58E4DF42D3BC08A60EDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BEB0840B0F8872DB8B5A259858FE5AC3524DFD117B0FA41AA9A9C95C6B87E432/0/3137372e37342e3230302e302f32322d3234203d3e20323731383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:90:d5:39:e2:56:ba:02:30:fa:f2:76:70:18:de:90:8a:88:
         7a:36:19:93:aa:a8:78:f8:c0:1b:59:1f:aa:9e:e7:21:c0:e8:
         f2:2d:73:2f:8e:13:57:27:3d:7a:bf:50:15:8a:1c:24:b4:7b:
         94:44:a2:03:a8:2b:63:5e:60:fd:50:23:ee:e7:04:bf:2d:ad:
         4b:74:63:6e:dd:a8:3b:2d:af:f8:50:ec:ca:1f:85:73:29:65:
         ca:d1:53:ae:71:d5:2c:c3:ef:83:c1:4b:4a:0d:9c:ae:bc:33:
         7d:70:69:14:fe:23:3e:90:4d:74:4b:16:bc:88:94:54:4c:d8:
         23:8b:52:ef:a9:0d:f0:56:f3:e7:04:b2:de:b2:55:9a:52:b1:
         41:71:5e:fb:7c:98:56:8b:31:80:8d:76:17:d5:56:61:34:9e:
         cf:24:e2:d1:91:cf:a8:5a:d9:7e:cb:fd:11:72:ad:00:e7:50:
         36:56:26:e4:fc:64:59:c0:31:48:8d:43:18:df:87:eb:0b:fc:
         81:be:3f:38:55:1d:af:e5:a4:39:f6:ed:38:b5:3d:0f:7b:eb:
         e9:d0:10:59:09:41:9e:22:9c:4e:70:98:ae:f3:0b:1e:e3:70:
         5b:0c:a0:25:4b:e5:ed:d6:70:2f:62:45:d8:1a:f8:2f:92:1b:
         84:d5:25:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:57:27 2025 by rpki-client