Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/3137372e37332e3135362e302f32322d3234203d3e20323730313035.roa
File:                     3137372e37332e3135362e302f32322d3234203d3e20323730313035.roa (raw, json)
Hash identifier:          u83vMYegjvIb7r57iOOsVJ8Zpylqo6KdHi7aKJB9sVc=
Subject key identifier:   82:0E:2D:7C:C5:8D:C1:41:54:39:FA:B4:F3:1A:0A:A4:4E:E8:97:C3
Certificate issuer:       /CN=D5154E1B17B2EB9E5AFA353723C449668FE65093
Certificate serial:       49AB685693AD9544C7B7BB7B597A287449DB698B
Authority key identifier: D5:15:4E:1B:17:B2:EB:9E:5A:FA:35:37:23:C4:49:66:8F:E6:50:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/3137372e37332e3135362e302f32322d3234203d3e20323730313035.roa
Signing time:             Tue 05 Mar 2024 17:44:04 +0000
ROA not before:           Tue 05 Mar 2024 17:39:04 +0000
ROA not after:            Tue 04 Mar 2025 17:44:04 +0000
asID:                     270105
IP address blocks:        177.73.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ab:68:56:93:ad:95:44:c7:b7:bb:7b:59:7a:28:74:49:db:69:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5154E1B17B2EB9E5AFA353723C449668FE65093
        Validity
            Not Before: Mar  5 17:39:04 2024 GMT
            Not After : Mar  4 17:44:04 2025 GMT
        Subject: CN=820E2D7CC58DC1415439FAB4F31A0AA44EE897C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2e:f3:ee:a6:61:95:0f:83:ca:1c:94:37:a3:
                    71:54:1b:62:fc:b7:16:98:ff:5d:b0:0b:32:d0:57:
                    9d:0d:44:14:c2:d5:a3:17:ce:50:69:4a:7e:9e:39:
                    bc:95:3e:8b:11:5f:04:34:5b:06:b6:b5:0b:e6:7c:
                    92:17:85:1b:ca:a5:08:44:0e:21:0b:4f:b9:ee:ac:
                    0a:00:b0:b3:85:c8:e7:97:e8:5c:6d:ad:3f:d6:36:
                    2c:0d:c7:dc:2b:0d:2a:1c:9a:15:df:36:4f:ec:df:
                    cd:e3:64:7e:5c:79:8e:bc:25:77:41:27:9a:73:66:
                    96:15:d0:99:10:e7:fb:0f:f0:59:2b:be:06:ed:da:
                    f1:70:65:e1:65:9c:60:ea:10:f6:97:6e:eb:ec:dd:
                    3e:ff:88:8f:3a:f0:e2:dc:c2:52:bb:f5:f2:e5:af:
                    a3:52:99:67:5b:bc:8f:7d:a4:a1:f5:ab:2e:d0:19:
                    8e:72:eb:04:ed:fc:fb:b4:fb:82:64:64:40:01:34:
                    17:29:c8:7a:a7:2a:0f:36:59:53:83:42:17:ea:7b:
                    47:f7:20:07:88:aa:ba:87:77:e4:7d:a8:0e:5b:51:
                    91:f6:d6:56:c0:f7:cb:8a:55:e9:3a:3a:ea:0f:77:
                    e4:b0:b3:ee:c6:d4:bb:10:c5:25:3f:69:b1:8a:4d:
                    d6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0E:2D:7C:C5:8D:C1:41:54:39:FA:B4:F3:1A:0A:A4:4E:E8:97:C3
            X509v3 Authority Key Identifier:
                keyid:D5:15:4E:1B:17:B2:EB:9E:5A:FA:35:37:23:C4:49:66:8F:E6:50:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/3137372e37332e3135362e302f32322d3234203d3e20323730313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         da:76:e7:a8:61:5c:85:45:ad:fa:fe:61:38:e8:65:1a:ed:d0:
         69:39:a1:03:77:01:fb:25:41:6a:47:19:b0:7d:45:e7:48:0c:
         dc:60:57:3b:b9:38:27:cc:59:5b:22:3c:b8:aa:6a:48:54:5b:
         f5:b5:2f:34:fd:4e:03:34:42:9a:bd:37:a4:df:f0:a9:e8:8b:
         f2:e6:81:fe:e9:cb:86:bc:28:f9:1d:b9:a5:50:1f:8c:ef:44:
         6d:0e:a8:0e:bb:38:e6:dd:29:aa:9d:91:fe:67:48:61:eb:46:
         83:e9:d6:af:60:15:ec:65:89:68:8f:60:01:4d:05:32:17:50:
         ea:20:3f:bf:da:48:48:10:e7:c9:05:46:54:d4:8a:d3:5f:6a:
         27:55:42:8f:35:4e:f1:fe:2c:52:da:46:9f:dd:78:dd:dc:22:
         f7:d5:2c:a4:22:59:32:19:2b:61:5c:38:50:c3:22:fd:6b:b1:
         de:31:f9:d7:a4:e8:79:6a:2c:d8:53:9e:61:17:29:85:fe:ee:
         8f:9e:2e:9a:96:f4:2f:68:5a:57:25:10:c7:34:d2:fd:22:aa:
         33:9d:7f:1d:4e:57:b4:bb:d0:c3:9d:3e:47:3a:ec:f6:12:e2:
         8e:a1:85:b0:b8:62:27:c8:a8:e8:e3:79:a0:52:11:d1:19:f1:
         24:a6:f3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:24 2024 by rpki-client on console-fra.rpki-client.org