Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1730BC18DF9F2E39D28611C9A12011BCBE42CF0E6D789A6B5EA40F4A76687FE/0/3137372e32332e3132382e302f32322d3234203d3e20323639393837.roa
File:                     3137372e32332e3132382e302f32322d3234203d3e20323639393837.roa (raw, json)
Hash identifier:          yPbGbFCK4eLLbLMyhpd/EaciX0eUaN+T9HFtBlL6V5g=
Subject key identifier:   87:30:56:56:1F:A4:A2:B7:70:01:52:A3:BA:50:9A:E7:9E:96:C4:EA
Certificate issuer:       /CN=2705C975E2CC4D594CF89CC53B26AD206D9F1C2F
Certificate serial:       5CD272EC747798F3175E55323ED3AC963A7E588F
Authority key identifier: 27:05:C9:75:E2:CC:4D:59:4C:F8:9C:C5:3B:26:AD:20:6D:9F:1C:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2705C975E2CC4D594CF89CC53B26AD206D9F1C2F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1730BC18DF9F2E39D28611C9A12011BCBE42CF0E6D789A6B5EA40F4A76687FE/0/3137372e32332e3132382e302f32322d3234203d3e20323639393837.roa
Signing time:             Tue 04 Feb 2025 18:23:32 +0000
ROA not before:           Tue 04 Feb 2025 18:18:32 +0000
ROA not after:            Tue 03 Feb 2026 18:23:32 +0000
asID:                     269987
IP address blocks:        177.23.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1730BC18DF9F2E39D28611C9A12011BCBE42CF0E6D789A6B5EA40F4A76687FE/0/2705C975E2CC4D594CF89CC53B26AD206D9F1C2F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1730BC18DF9F2E39D28611C9A12011BCBE42CF0E6D789A6B5EA40F4A76687FE/0/2705C975E2CC4D594CF89CC53B26AD206D9F1C2F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2705C975E2CC4D594CF89CC53B26AD206D9F1C2F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d2:72:ec:74:77:98:f3:17:5e:55:32:3e:d3:ac:96:3a:7e:58:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2705C975E2CC4D594CF89CC53B26AD206D9F1C2F
        Validity
            Not Before: Feb  4 18:18:32 2025 GMT
            Not After : Feb  3 18:23:32 2026 GMT
        Subject: CN=873056561FA4A2B7700152A3BA509AE79E96C4EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3d:f3:d5:36:22:23:46:a2:76:36:c2:09:8b:
                    73:c9:62:08:e4:8e:8d:08:72:6c:9e:bc:64:8b:8e:
                    a5:8b:bd:a0:0c:d4:a8:76:3d:bb:32:50:c5:1a:26:
                    68:18:80:ce:01:f1:73:11:cb:2b:94:36:cc:2a:eb:
                    9d:24:fe:73:89:56:44:28:8e:75:a5:de:1d:09:9a:
                    67:de:45:c0:d9:90:25:73:07:ac:42:6e:91:ab:75:
                    35:c3:eb:42:ba:0e:f9:70:79:86:30:87:4d:fd:52:
                    01:06:26:ba:7c:0a:3d:b3:8e:aa:53:aa:7e:0e:2f:
                    79:b4:e6:4b:45:5f:fc:86:03:78:ac:46:4d:b7:34:
                    c2:8a:16:20:01:4f:fe:9a:21:9b:0c:ba:c3:24:df:
                    54:5a:7c:23:c4:05:67:8e:b5:6a:12:b2:c5:45:03:
                    65:46:21:98:bd:3e:0b:54:9b:63:9b:5e:45:91:a3:
                    56:ec:6c:ea:df:b7:d0:b7:3a:31:d9:5a:f0:26:8c:
                    d4:91:9b:a8:f3:42:d1:11:80:b3:76:62:0d:98:a6:
                    64:ed:9e:33:bb:be:df:06:bf:a5:cf:9f:2e:a5:35:
                    8e:7e:09:6e:44:66:71:5b:3a:9d:b4:fc:7e:d5:1e:
                    0b:da:ad:d0:43:43:91:20:3c:62:b0:94:67:03:d4:
                    9b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:30:56:56:1F:A4:A2:B7:70:01:52:A3:BA:50:9A:E7:9E:96:C4:EA
            X509v3 Authority Key Identifier:
                keyid:27:05:C9:75:E2:CC:4D:59:4C:F8:9C:C5:3B:26:AD:20:6D:9F:1C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1730BC18DF9F2E39D28611C9A12011BCBE42CF0E6D789A6B5EA40F4A76687FE/0/2705C975E2CC4D594CF89CC53B26AD206D9F1C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2705C975E2CC4D594CF89CC53B26AD206D9F1C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1730BC18DF9F2E39D28611C9A12011BCBE42CF0E6D789A6B5EA40F4A76687FE/0/3137372e32332e3132382e302f32322d3234203d3e20323639393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:5a:a6:2c:22:72:3a:10:7c:44:40:96:26:81:27:0e:96:5f:
         71:10:70:8f:54:e7:c9:9b:76:cb:a4:d7:24:ff:21:c5:0e:eb:
         61:b3:60:17:c1:44:35:2b:5c:d4:c9:7e:33:77:fe:08:d1:40:
         86:10:d9:53:68:4d:56:5f:d8:da:9c:c7:aa:21:8f:7d:26:30:
         54:4a:0a:e2:f9:58:37:06:ab:29:c7:08:cc:00:56:c9:8d:af:
         54:0b:4a:b3:73:13:57:d4:76:b7:53:92:43:b7:05:07:02:de:
         c9:0e:73:7f:8b:bf:1f:f9:49:2c:67:fe:29:92:81:20:5d:a6:
         8f:e9:65:a8:2c:5c:f5:33:e3:19:93:50:0f:8e:1a:b8:db:fc:
         04:a4:cd:20:dc:f1:98:22:3d:33:40:3f:46:c0:21:65:04:85:
         74:8f:c8:71:c9:20:fd:4f:ba:41:bb:e2:4e:4a:b2:21:7c:16:
         c7:7e:65:4b:c0:41:89:3c:16:6c:4a:8b:27:75:26:2f:41:e7:
         1a:8b:74:1d:05:a5:27:d9:27:39:84:4c:81:45:15:6f:cb:47:
         b1:17:0e:da:54:ff:25:07:a9:3a:bf:82:7a:ea:c3:50:01:75:
         a3:cf:14:c0:3c:31:9e:d5:af:51:22:95:85:a0:73:c9:9c:5c:
         5f:9f:54:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:53:40 2025 by rpki-client