Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAAE3C8F9674D1E449EE35345779D6ED23723DFEB8B9A5A87E3647EEC934334E/0/3137372e31322e38382e302f32322d3234203d3e20323730303334.roa
File:                     3137372e31322e38382e302f32322d3234203d3e20323730303334.roa (raw, json)
Hash identifier:          6KVRAJNJ9IERoDVM4BklwAcPDsP5+gXqn8BAPY8fOGA=
Subject key identifier:   1B:FA:8A:24:3C:E1:1B:C3:2F:18:F8:3A:9C:8D:8F:F8:E0:01:89:BA
Certificate issuer:       /CN=93128618954CB85AF71A59CE184CDF9CADA7ED6D
Certificate serial:       27C3044107E0ED3A1C7FB8D4CB1E749C4A950FF1
Authority key identifier: 93:12:86:18:95:4C:B8:5A:F7:1A:59:CE:18:4C:DF:9C:AD:A7:ED:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93128618954CB85AF71A59CE184CDF9CADA7ED6D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAAE3C8F9674D1E449EE35345779D6ED23723DFEB8B9A5A87E3647EEC934334E/0/3137372e31322e38382e302f32322d3234203d3e20323730303334.roa
Signing time:             Tue 05 Mar 2024 17:43:42 +0000
ROA not before:           Tue 05 Mar 2024 17:38:42 +0000
ROA not after:            Tue 04 Mar 2025 17:43:42 +0000
asID:                     270034
IP address blocks:        177.12.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EAAE3C8F9674D1E449EE35345779D6ED23723DFEB8B9A5A87E3647EEC934334E/0/93128618954CB85AF71A59CE184CDF9CADA7ED6D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EAAE3C8F9674D1E449EE35345779D6ED23723DFEB8B9A5A87E3647EEC934334E/0/93128618954CB85AF71A59CE184CDF9CADA7ED6D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93128618954CB85AF71A59CE184CDF9CADA7ED6D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c3:04:41:07:e0:ed:3a:1c:7f:b8:d4:cb:1e:74:9c:4a:95:0f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93128618954CB85AF71A59CE184CDF9CADA7ED6D
        Validity
            Not Before: Mar  5 17:38:42 2024 GMT
            Not After : Mar  4 17:43:42 2025 GMT
        Subject: CN=1BFA8A243CE11BC32F18F83A9C8D8FF8E00189BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:27:e1:4e:7b:dc:c9:be:79:80:1e:d0:46:b3:
                    a8:bc:28:d4:15:2f:dc:e4:f1:8e:47:11:0d:8d:25:
                    c7:78:c7:35:0e:80:fb:fa:16:51:3e:c7:df:76:a8:
                    1a:4e:20:58:8f:30:9d:ec:ca:31:16:04:5e:70:b6:
                    8e:12:87:c5:7d:59:58:f3:38:30:1a:bb:53:a1:1c:
                    c0:62:87:d6:82:31:2a:2b:19:ad:81:03:48:ce:ac:
                    76:12:53:4b:93:fa:1f:c1:c7:a2:b5:31:44:4b:fb:
                    99:57:f7:2f:01:3f:12:5c:2f:46:f4:20:84:6f:10:
                    7b:85:86:84:98:01:81:db:82:c9:eb:b7:d6:cc:76:
                    0d:59:87:60:76:8d:d2:c1:8d:c4:3b:3c:50:d3:91:
                    dd:0f:c2:b4:3d:7e:04:46:20:c5:6c:06:70:a5:3a:
                    5c:39:c5:84:ad:cd:9d:b8:ea:7e:b4:22:f9:98:f2:
                    46:71:1e:64:e4:77:3f:ce:84:e3:e4:85:03:d5:82:
                    4a:b7:29:78:59:59:72:7b:4e:f4:43:b8:15:be:0e:
                    c7:27:30:60:47:96:d3:bf:bb:18:a0:46:c6:16:67:
                    ba:16:08:05:9b:e9:9f:3b:65:2c:e2:5f:9c:b7:48:
                    db:da:49:1e:7c:70:30:31:f9:31:53:d5:86:b2:0f:
                    81:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FA:8A:24:3C:E1:1B:C3:2F:18:F8:3A:9C:8D:8F:F8:E0:01:89:BA
            X509v3 Authority Key Identifier:
                keyid:93:12:86:18:95:4C:B8:5A:F7:1A:59:CE:18:4C:DF:9C:AD:A7:ED:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAAE3C8F9674D1E449EE35345779D6ED23723DFEB8B9A5A87E3647EEC934334E/0/93128618954CB85AF71A59CE184CDF9CADA7ED6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93128618954CB85AF71A59CE184CDF9CADA7ED6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAAE3C8F9674D1E449EE35345779D6ED23723DFEB8B9A5A87E3647EEC934334E/0/3137372e31322e38382e302f32322d3234203d3e20323730303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:e2:3e:3f:88:7d:cd:58:d7:95:f5:86:bf:1d:c5:42:bb:9d:
         d5:73:e0:86:b5:92:45:9f:21:f6:c0:79:17:78:74:26:d8:58:
         6f:e0:33:73:4c:69:84:0d:9c:1e:89:28:70:66:d2:a5:5b:6e:
         7a:67:7c:92:4b:1e:52:3d:63:19:bd:3c:9f:93:f0:87:41:c6:
         3f:d0:94:01:a5:37:5b:9a:87:ff:90:e5:96:51:b9:39:e1:40:
         82:f0:fc:43:a7:91:87:cd:8b:d7:4e:71:af:67:52:73:2c:a4:
         88:55:79:0a:9e:f3:46:20:4d:67:c3:b4:31:7c:99:35:07:7e:
         51:7f:f3:97:48:7a:2a:83:e5:b5:8b:23:38:50:db:63:e9:4e:
         3a:62:c6:f1:9d:c3:eb:7f:83:ad:9c:a9:ff:a2:2b:3a:60:58:
         14:bb:84:db:55:0b:49:6a:23:7f:07:16:8e:a2:ca:9b:d2:3b:
         df:33:fe:95:e0:fd:0b:25:9d:8b:d2:d2:73:93:a0:71:8c:c5:
         90:4c:e6:48:9d:21:fa:a9:f5:f0:57:67:8b:2c:21:43:de:fd:
         61:5e:34:bc:5c:f6:11:d5:7a:61:42:86:59:2e:af:52:6d:c5:
         42:03:8a:c3:66:a8:19:3f:3d:69:f7:11:d7:33:d1:76:ca:fa:
         8c:64:ff:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:50 2024 by rpki-client on console-ams.rpki-client.org