Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1730BC18DF9F2E39D28611C9A12011BCBE42CF0E6D789A6B5EA40F4A76687FE/0/3137372e32332e3132382e302f32322d3234203d3e20323639393837.roa
File:                     3137372e32332e3132382e302f32322d3234203d3e20323639393837.roa (raw, json)
Hash identifier:          J12Eb+OdTsMtazy3jnUGtvYjr7bvThS7ZmCmGRGfFHg=
Subject key identifier:   1C:76:03:BD:7F:69:6E:AC:8D:A0:18:9F:71:97:C7:B1:13:38:8D:97
Certificate issuer:       /CN=2705C975E2CC4D594CF89CC53B26AD206D9F1C2F
Certificate serial:       7BDD574964CF78AAEB6610DCFF841C01A300A615
Authority key identifier: 27:05:C9:75:E2:CC:4D:59:4C:F8:9C:C5:3B:26:AD:20:6D:9F:1C:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2705C975E2CC4D594CF89CC53B26AD206D9F1C2F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1730BC18DF9F2E39D28611C9A12011BCBE42CF0E6D789A6B5EA40F4A76687FE/0/3137372e32332e3132382e302f32322d3234203d3e20323639393837.roa
Signing time:             Tue 05 Mar 2024 17:40:33 +0000
ROA not before:           Tue 05 Mar 2024 17:35:33 +0000
ROA not after:            Tue 04 Mar 2025 17:40:33 +0000
asID:                     269987
IP address blocks:        177.23.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1730BC18DF9F2E39D28611C9A12011BCBE42CF0E6D789A6B5EA40F4A76687FE/0/2705C975E2CC4D594CF89CC53B26AD206D9F1C2F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1730BC18DF9F2E39D28611C9A12011BCBE42CF0E6D789A6B5EA40F4A76687FE/0/2705C975E2CC4D594CF89CC53B26AD206D9F1C2F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2705C975E2CC4D594CF89CC53B26AD206D9F1C2F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:dd:57:49:64:cf:78:aa:eb:66:10:dc:ff:84:1c:01:a3:00:a6:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2705C975E2CC4D594CF89CC53B26AD206D9F1C2F
        Validity
            Not Before: Mar  5 17:35:33 2024 GMT
            Not After : Mar  4 17:40:33 2025 GMT
        Subject: CN=1C7603BD7F696EAC8DA0189F7197C7B113388D97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ab:a8:0b:ed:22:45:ae:98:22:55:03:8a:d7:
                    6d:52:47:5d:a4:84:ed:7c:27:b3:ea:e4:33:6b:d7:
                    db:5a:ee:e1:cb:63:7b:d7:66:3a:9b:55:7b:08:35:
                    4c:f5:0b:2c:59:c1:ff:70:ff:71:0e:0b:1c:8e:5b:
                    25:5a:a5:eb:e4:ab:1d:b1:72:2f:34:7e:1a:2d:1a:
                    eb:f5:ca:4e:b9:27:f9:cd:8d:43:90:45:73:be:ac:
                    9a:5c:99:5d:cb:0a:02:53:7f:07:e8:8d:d2:72:f9:
                    64:8a:2c:39:c6:52:38:81:02:5b:8b:32:83:14:2a:
                    bc:23:ce:3e:9e:e3:a9:47:72:b6:83:83:35:ec:d6:
                    99:4b:9d:5d:27:8c:30:02:63:d5:1a:0e:0e:13:d9:
                    4e:e8:50:d0:1f:bd:08:65:ef:3d:0c:d4:6d:14:da:
                    df:d6:f4:c6:58:df:23:4a:c4:f0:7b:85:bb:00:af:
                    f3:67:fc:79:80:15:78:4f:bb:3f:43:de:4c:34:f6:
                    52:10:49:1b:34:2b:a4:25:78:58:c3:97:29:b0:a7:
                    de:0a:ad:c0:c2:fd:2a:83:ff:e2:0b:80:91:39:13:
                    1f:78:95:7c:dd:2a:83:04:5b:4e:8b:40:ee:78:7e:
                    98:43:e7:b1:6a:2c:34:40:96:d9:54:37:00:0c:42:
                    b3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:76:03:BD:7F:69:6E:AC:8D:A0:18:9F:71:97:C7:B1:13:38:8D:97
            X509v3 Authority Key Identifier:
                keyid:27:05:C9:75:E2:CC:4D:59:4C:F8:9C:C5:3B:26:AD:20:6D:9F:1C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1730BC18DF9F2E39D28611C9A12011BCBE42CF0E6D789A6B5EA40F4A76687FE/0/2705C975E2CC4D594CF89CC53B26AD206D9F1C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2705C975E2CC4D594CF89CC53B26AD206D9F1C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1730BC18DF9F2E39D28611C9A12011BCBE42CF0E6D789A6B5EA40F4A76687FE/0/3137372e32332e3132382e302f32322d3234203d3e20323639393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:c3:f4:d5:59:15:4b:b4:00:91:4d:f7:61:29:28:28:c5:77:
         c1:c4:dd:b7:5c:45:f2:26:d3:cd:6d:ab:bb:1f:a6:d9:2f:f5:
         8b:d2:96:54:11:db:f9:7e:8b:82:cf:c8:8c:67:25:6d:c0:27:
         f1:11:2f:b2:6c:0f:ad:01:9a:50:1a:f7:51:1a:a0:0b:2d:6c:
         35:8e:23:b9:dd:f6:a4:96:fe:f0:e3:b5:44:f8:67:83:47:3b:
         48:d9:7b:eb:09:85:e4:8c:c0:f3:56:b0:dd:cd:bb:37:3e:18:
         3d:de:ba:ac:34:2a:fc:91:69:10:35:d4:3d:f7:86:01:b9:7c:
         ec:52:b3:4f:91:77:56:cf:f9:c9:e5:d6:c1:c9:1a:23:48:ef:
         26:38:7a:61:81:5e:71:63:64:29:b7:9a:b0:c9:94:50:fd:c0:
         85:44:e6:07:a1:83:e9:e7:7b:44:f7:6f:55:e8:30:93:42:78:
         76:68:fa:6e:bb:22:61:fb:bd:3d:c8:23:94:ee:53:bf:73:a0:
         9b:2f:d3:49:1d:d1:6e:95:cb:2d:3f:95:52:09:f4:e9:1c:55:
         50:52:51:0f:05:d9:1d:8b:dd:4b:38:35:f0:a2:97:5b:d2:29:
         79:91:1d:46:e4:f0:1a:d8:15:bd:2b:1c:78:03:0f:b9:85:0e:
         22:eb:28:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:19 2024 by rpki-client on console-ams.rpki-client.org