Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/3138392e3132372e3133372e302f32342d3234203d3e20323730303038.roa
File:                     3138392e3132372e3133372e302f32342d3234203d3e20323730303038.roa (raw, json)
Hash identifier:          qkjS1tvzfv1gqEiG7xNxyFzgTlVrLEnWdS9CsOh2JXw=
Subject key identifier:   2E:76:BB:05:BC:D1:E1:93:40:96:95:FE:2E:DF:49:B7:D8:C6:E4:92
Certificate issuer:       /CN=0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78
Certificate serial:       2C620057AD578A43914F5886264B1EEC671EA51D
Authority key identifier: 0D:00:66:D8:BE:01:65:01:2A:67:FD:4F:AE:BB:C4:B9:F0:CE:9A:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/3138392e3132372e3133372e302f32342d3234203d3e20323730303038.roa
Signing time:             Thu 07 Mar 2024 20:05:00 +0000
ROA not before:           Thu 07 Mar 2024 20:00:00 +0000
ROA not after:            Thu 06 Mar 2025 20:05:00 +0000
asID:                     270008
IP address blocks:        189.127.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:62:00:57:ad:57:8a:43:91:4f:58:86:26:4b:1e:ec:67:1e:a5:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78
        Validity
            Not Before: Mar  7 20:00:00 2024 GMT
            Not After : Mar  6 20:05:00 2025 GMT
        Subject: CN=2E76BB05BCD1E193409695FE2EDF49B7D8C6E492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:51:a8:96:2a:23:e5:e8:1b:2b:36:d2:0d:bd:
                    57:0b:70:5c:2c:d0:eb:25:a3:e4:be:3e:ea:28:aa:
                    91:0a:1c:0d:f7:b6:ce:b3:0b:15:89:af:7c:03:c9:
                    2f:33:a8:5d:6d:e7:8b:61:dc:48:ba:32:9b:1f:2d:
                    7d:d0:2a:26:52:82:80:a3:93:2b:86:92:cc:7a:a2:
                    71:ea:72:cb:ce:e1:16:f8:12:d7:be:bd:d1:f3:13:
                    9d:8f:8f:07:e1:02:b3:ee:bb:3e:2c:b9:3f:83:83:
                    2c:4c:61:1e:98:7a:20:57:d4:01:cb:c6:59:b7:9b:
                    10:b1:03:99:9a:26:0d:70:cc:b3:34:59:59:e9:a7:
                    ad:56:ee:0e:69:a8:3f:b8:ed:9d:42:f2:74:b1:35:
                    94:13:f1:b6:bd:b0:21:d4:1b:c4:5a:6a:b2:89:4a:
                    25:70:21:b5:48:61:86:f4:a2:22:0e:14:0e:2b:9b:
                    12:50:c3:f4:73:7d:84:32:fa:a7:b9:8b:a8:a0:e9:
                    f5:1c:48:6c:58:54:a7:83:68:52:e0:ca:1c:6c:ce:
                    77:9f:94:36:18:c2:bf:23:8d:c0:1c:3e:33:42:c3:
                    8c:92:ef:21:be:21:0a:34:0c:87:d6:e4:c4:d9:b7:
                    2d:f2:78:bb:60:7a:4f:af:40:a6:0e:35:82:0b:78:
                    ac:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:76:BB:05:BC:D1:E1:93:40:96:95:FE:2E:DF:49:B7:D8:C6:E4:92
            X509v3 Authority Key Identifier:
                keyid:0D:00:66:D8:BE:01:65:01:2A:67:FD:4F:AE:BB:C4:B9:F0:CE:9A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/3138392e3132372e3133372e302f32342d3234203d3e20323730303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:cf:8c:4e:1a:60:c1:b7:d9:77:ad:05:63:c2:74:94:94:50:
         10:0c:3f:d4:fc:50:00:8b:d5:1f:12:0e:03:0c:1d:5b:84:4f:
         76:d3:db:51:4b:54:bd:38:ef:ae:7f:f9:87:3e:50:de:aa:a0:
         c3:12:c8:d5:fe:1e:40:0b:a1:19:cd:87:d7:e1:e9:72:f7:ea:
         e7:1c:19:80:90:f4:3b:6d:73:8c:33:55:19:fd:46:93:1d:ec:
         9f:c0:61:10:b5:cd:e8:62:61:b2:52:75:6b:34:8b:12:12:4d:
         34:4b:a9:70:51:94:26:60:f5:51:d6:1c:6d:71:f0:09:9a:0e:
         dc:ca:e7:1b:01:8d:43:6b:5e:f2:52:31:3e:19:9d:01:09:68:
         9a:eb:84:cb:3f:f0:3c:ae:fe:1d:b4:99:71:30:f4:ca:fc:56:
         c4:df:95:61:95:13:6e:97:c9:15:58:eb:2b:f3:0b:f8:4f:0e:
         e1:92:55:01:ce:03:d3:48:06:e2:a6:84:5a:09:89:99:65:e5:
         96:91:fd:17:88:a4:37:26:fa:97:48:ef:f0:a7:82:51:52:6d:
         89:d0:40:08:8c:e1:52:79:3e:d1:22:71:76:d1:bf:85:52:67:
         88:94:02:62:d8:6e:22:c3:38:96:20:f3:cd:a5:ec:6d:07:47:
         6d:6b:3d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:45 2024 by rpki-client on console-fra.rpki-client.org