Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/3136342e37372e32372e302f32342d3234203d3e2037303034.roa
File:                     3136342e37372e32372e302f32342d3234203d3e2037303034.roa (raw, json)
Hash identifier:          ca/8iY1YycmRHp+/fisn0o0YGgQmuMwnl4f9dAIPnV4=
Subject key identifier:   63:C8:5F:53:81:1C:99:5D:AF:8B:B8:EF:45:D1:1D:4E:96:6B:C6:F5
Certificate issuer:       /CN=2652C1433114197317FCA49E051F361760D69E0E
Certificate serial:       64128786DF7610BA6195886D7F6D2282FE8C0016
Authority key identifier: 26:52:C1:43:31:14:19:73:17:FC:A4:9E:05:1F:36:17:60:D6:9E:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2652C1433114197317FCA49E051F361760D69E0E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/3136342e37372e32372e302f32342d3234203d3e2037303034.roa
Signing time:             Tue 05 Mar 2024 18:22:58 +0000
ROA not before:           Tue 05 Mar 2024 18:17:58 +0000
ROA not after:            Tue 04 Mar 2025 18:22:58 +0000
asID:                     7004
IP address blocks:        164.77.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/2652C1433114197317FCA49E051F361760D69E0E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/2652C1433114197317FCA49E051F361760D69E0E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2652C1433114197317FCA49E051F361760D69E0E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:12:87:86:df:76:10:ba:61:95:88:6d:7f:6d:22:82:fe:8c:00:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2652C1433114197317FCA49E051F361760D69E0E
        Validity
            Not Before: Mar  5 18:17:58 2024 GMT
            Not After : Mar  4 18:22:58 2025 GMT
        Subject: CN=63C85F53811C995DAF8BB8EF45D11D4E966BC6F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ba:39:80:95:29:84:f4:f7:2f:e4:e6:a4:18:
                    38:f1:4f:61:5e:2c:d8:1a:a5:06:bf:eb:33:18:6e:
                    c4:64:2c:e3:04:90:d1:2e:a9:24:af:a7:37:9b:10:
                    1d:65:fa:01:e3:d3:67:bb:fe:42:29:cb:8d:f7:31:
                    a9:73:7f:d3:58:3f:08:d2:32:e4:81:d9:a9:be:e6:
                    53:db:8a:29:1d:e7:d7:3a:13:7e:09:84:10:39:40:
                    1f:1c:67:94:2e:8b:a7:a0:21:5b:60:67:5d:1b:38:
                    7b:51:58:c9:3a:a8:14:2f:0e:8a:4e:02:ef:7a:d9:
                    af:3e:3a:d8:44:0b:2d:3c:9e:59:a3:f5:dc:2b:93:
                    d3:12:de:ea:07:db:70:69:d1:4b:14:26:1f:4f:d9:
                    c6:d0:c5:b5:7f:3e:1d:b7:2e:ad:b1:d5:d1:83:0c:
                    ad:90:fb:d9:70:a6:97:49:94:72:1f:6c:4e:d6:cd:
                    fb:91:f3:78:49:e6:aa:55:05:df:2e:97:b3:3a:0a:
                    9c:ee:3e:fa:fc:2d:28:fe:59:74:ab:95:1f:53:95:
                    73:b8:0f:6a:44:72:aa:62:f0:9c:17:25:35:f1:71:
                    6a:60:36:b9:d6:c0:46:b8:f7:54:bb:e1:07:c9:ef:
                    09:a5:c7:8e:ff:4e:49:71:41:7f:f4:7e:05:7e:37:
                    ca:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C8:5F:53:81:1C:99:5D:AF:8B:B8:EF:45:D1:1D:4E:96:6B:C6:F5
            X509v3 Authority Key Identifier:
                keyid:26:52:C1:43:31:14:19:73:17:FC:A4:9E:05:1F:36:17:60:D6:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/2652C1433114197317FCA49E051F361760D69E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2652C1433114197317FCA49E051F361760D69E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/3136342e37372e32372e302f32342d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.77.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:89:fc:bb:ce:91:8e:a8:a2:3d:57:93:cb:08:75:b9:80:01:
         17:f7:da:79:6b:b7:79:a8:5e:e6:d8:9e:08:34:12:7f:0e:cb:
         58:ed:55:d7:24:3c:a9:32:b3:ed:85:a9:9d:58:04:87:0b:1c:
         61:32:da:ad:24:2c:15:ce:5b:d1:ab:98:7d:b3:f3:0d:2f:33:
         3d:c4:5d:c9:1b:07:5a:32:ac:fe:ce:66:dc:2d:2c:71:89:a2:
         07:8e:24:b5:a0:be:82:d3:6f:33:eb:c6:7f:c6:eb:e1:01:1b:
         08:da:c8:9a:ea:a0:a6:28:b1:bc:d4:b6:cd:a2:56:5d:c5:19:
         4f:77:8a:6e:39:75:53:f0:cd:61:bb:78:15:4d:cd:0e:1d:c5:
         35:bd:99:31:31:a6:2e:c5:d4:cb:47:5f:7a:cb:98:a3:a3:7c:
         65:19:29:c0:ee:91:e1:0c:8b:d0:ee:75:3d:3d:01:4d:fb:8d:
         8c:30:28:2b:ff:23:43:d1:fa:ed:10:51:39:5b:8a:32:74:ca:
         91:23:b2:bc:76:fb:c5:d0:98:23:6a:55:48:14:8d:66:f6:5f:
         2f:af:2e:ee:cf:86:a9:43:f9:83:b9:47:41:dc:a5:bf:7d:14:
         77:e0:1c:4c:7d:01:74:36:86:5b:26:05:98:61:ad:75:7a:ff:
         1d:4f:aa:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 06:56:16 2024 by rpki-client on console-fra.rpki-client.org