Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAAE3C8F9674D1E449EE35345779D6ED23723DFEB8B9A5A87E3647EEC934334E/0/3137372e31322e38382e302f32322d3234203d3e20323730303334.roa
File:                     3137372e31322e38382e302f32322d3234203d3e20323730303334.roa (raw, json)
Hash identifier:          qVau+YeSs+M1NbbScYMB5RkVPkBnALxqpdg2l6paDVo=
Subject key identifier:   59:05:65:46:EF:64:D1:27:1E:69:EF:92:CC:4C:0F:7E:A5:93:21:CB
Certificate issuer:       /CN=93128618954CB85AF71A59CE184CDF9CADA7ED6D
Certificate serial:       0BDA2D84032EB4CDE400BE47AE72D40BDC02D8D0
Authority key identifier: 93:12:86:18:95:4C:B8:5A:F7:1A:59:CE:18:4C:DF:9C:AD:A7:ED:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93128618954CB85AF71A59CE184CDF9CADA7ED6D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAAE3C8F9674D1E449EE35345779D6ED23723DFEB8B9A5A87E3647EEC934334E/0/3137372e31322e38382e302f32322d3234203d3e20323730303334.roa
Signing time:             Tue 04 Feb 2025 18:01:53 +0000
ROA not before:           Tue 04 Feb 2025 17:56:53 +0000
ROA not after:            Tue 03 Feb 2026 18:01:53 +0000
asID:                     270034
IP address blocks:        177.12.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EAAE3C8F9674D1E449EE35345779D6ED23723DFEB8B9A5A87E3647EEC934334E/0/93128618954CB85AF71A59CE184CDF9CADA7ED6D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EAAE3C8F9674D1E449EE35345779D6ED23723DFEB8B9A5A87E3647EEC934334E/0/93128618954CB85AF71A59CE184CDF9CADA7ED6D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93128618954CB85AF71A59CE184CDF9CADA7ED6D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 13:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:da:2d:84:03:2e:b4:cd:e4:00:be:47:ae:72:d4:0b:dc:02:d8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93128618954CB85AF71A59CE184CDF9CADA7ED6D
        Validity
            Not Before: Feb  4 17:56:53 2025 GMT
            Not After : Feb  3 18:01:53 2026 GMT
        Subject: CN=59056546EF64D1271E69EF92CC4C0F7EA59321CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:28:4b:c1:48:3d:f7:af:3d:e1:2e:b0:11:a5:
                    28:24:c9:82:1e:95:d8:96:61:c1:a2:33:47:e2:71:
                    a0:9e:4b:ad:ad:e1:66:fa:c7:ae:bd:f4:11:45:81:
                    bb:d5:ce:94:a8:a4:78:c0:55:a1:c3:22:27:7a:bf:
                    70:f7:84:39:cd:c3:ca:3d:22:c2:58:4e:5d:2c:90:
                    10:35:a9:75:3a:7e:13:17:f2:43:de:eb:d4:a7:e4:
                    ba:5b:70:c4:38:1a:87:e9:42:8b:1d:b2:54:e8:7b:
                    9a:be:49:d3:3f:53:5c:37:e6:61:d7:66:0d:c3:96:
                    03:33:74:eb:aa:cb:5d:18:56:e7:2f:80:bd:f0:ca:
                    fd:26:8d:c8:89:1e:1f:0c:c2:ea:56:b7:18:44:38:
                    77:ce:42:2e:0a:b5:15:9b:8a:e4:7b:e2:7d:9c:b6:
                    81:5d:7e:90:6a:e9:60:7c:22:05:62:34:ff:48:86:
                    5f:af:6b:28:c2:76:5d:2e:88:62:40:b7:dd:15:1f:
                    a6:e6:79:ae:74:b9:ab:a2:a8:32:cb:99:21:1d:7c:
                    d7:6a:eb:db:54:b4:28:f2:ea:af:72:67:8d:0f:8a:
                    07:a0:22:8b:83:0e:7a:fc:65:4e:03:bb:93:36:57:
                    e8:d0:42:a2:d7:cf:74:7a:c4:f0:ee:23:71:75:60:
                    da:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:05:65:46:EF:64:D1:27:1E:69:EF:92:CC:4C:0F:7E:A5:93:21:CB
            X509v3 Authority Key Identifier:
                keyid:93:12:86:18:95:4C:B8:5A:F7:1A:59:CE:18:4C:DF:9C:AD:A7:ED:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAAE3C8F9674D1E449EE35345779D6ED23723DFEB8B9A5A87E3647EEC934334E/0/93128618954CB85AF71A59CE184CDF9CADA7ED6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93128618954CB85AF71A59CE184CDF9CADA7ED6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAAE3C8F9674D1E449EE35345779D6ED23723DFEB8B9A5A87E3647EEC934334E/0/3137372e31322e38382e302f32322d3234203d3e20323730303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:00:1c:1d:62:f0:1d:22:33:4c:26:cd:40:2f:33:07:dc:59:
         ef:3a:5d:3b:60:42:81:4a:f7:40:d6:8b:8a:1a:fb:ec:66:74:
         26:fe:ce:63:bf:6e:0e:ac:98:22:e8:8a:5a:8b:94:b0:69:30:
         ca:5f:90:b4:d4:b1:92:eb:07:80:14:48:71:66:4e:1a:ea:32:
         0e:1a:53:40:75:0f:b9:16:60:65:cd:25:dd:d5:dc:6b:7b:ff:
         72:9d:b0:06:d2:34:dc:3f:15:0f:ad:d2:5d:f9:58:e3:41:d2:
         cc:d6:77:fe:12:da:75:ff:39:55:e0:ad:77:c9:17:da:07:12:
         7a:7b:6a:07:dc:17:1f:a4:86:7d:2a:b2:2e:56:62:a5:57:22:
         be:e9:d7:d5:d6:e1:f7:dc:2e:b0:b9:6a:8d:4d:7a:1b:62:03:
         f4:c6:62:9f:e3:0c:7f:e8:be:3c:6d:79:43:1f:a3:88:43:3f:
         a0:52:54:9b:65:9c:4d:32:49:62:14:81:0f:0d:ca:04:6a:ae:
         42:10:87:5a:94:7d:eb:24:ec:dd:fb:96:ec:c9:75:25:e0:35:
         05:63:2d:bf:e2:f6:26:2c:8a:25:97:95:61:d8:00:82:68:1b:
         6b:ec:bf:2e:54:88:04:f4:8d:5d:94:05:25:25:de:39:8b:c4:
         df:0a:72:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:31 2025 by rpki-client