Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/3137372e37332e3135372e302f32342d3234203d3e20323730313035.roa
File:                     3137372e37332e3135372e302f32342d3234203d3e20323730313035.roa (raw, json)
Hash identifier:          gTSivLzA2aF1+33Gzhl4YFn/Vk30JU9Dzv+4i+E7nFw=
Subject key identifier:   20:0B:33:CB:61:B1:27:77:AE:3D:B0:15:04:DF:08:48:4E:9A:88:A0
Certificate issuer:       /CN=D5154E1B17B2EB9E5AFA353723C449668FE65093
Certificate serial:       2F96FA05824D0E0201028D626DA2A5D93D8EBC28
Authority key identifier: D5:15:4E:1B:17:B2:EB:9E:5A:FA:35:37:23:C4:49:66:8F:E6:50:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/3137372e37332e3135372e302f32342d3234203d3e20323730313035.roa
Signing time:             Tue 05 Mar 2024 17:44:02 +0000
ROA not before:           Tue 05 Mar 2024 17:39:02 +0000
ROA not after:            Tue 04 Mar 2025 17:44:02 +0000
asID:                     270105
IP address blocks:        177.73.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:96:fa:05:82:4d:0e:02:01:02:8d:62:6d:a2:a5:d9:3d:8e:bc:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5154E1B17B2EB9E5AFA353723C449668FE65093
        Validity
            Not Before: Mar  5 17:39:02 2024 GMT
            Not After : Mar  4 17:44:02 2025 GMT
        Subject: CN=200B33CB61B12777AE3DB01504DF08484E9A88A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:01:8a:b4:40:4a:6c:ab:cf:36:78:48:fe:09:
                    a4:cb:75:82:53:e5:d7:57:53:09:b9:30:b4:4d:fa:
                    30:85:4b:57:1a:52:07:75:a1:c0:a6:5c:9b:47:c0:
                    3a:7b:5a:3e:b9:e1:56:fc:ba:99:fb:37:ac:35:b4:
                    34:57:83:ac:60:13:3f:ff:2c:be:8d:82:29:15:55:
                    07:57:7b:74:df:00:df:c5:a7:92:2f:c7:95:65:9e:
                    2c:0f:a9:ac:11:d1:f1:57:d4:a4:f3:62:b8:d6:f2:
                    2c:57:9f:80:f6:33:fd:9c:31:05:08:68:a5:97:67:
                    ef:21:7a:bf:26:49:12:f0:5d:cf:8a:e5:7f:87:e1:
                    04:74:2c:53:88:1b:8b:ce:b3:fa:65:21:31:53:b0:
                    08:9f:84:39:4d:f3:1b:04:d0:55:43:e7:4d:b1:7a:
                    db:7a:51:13:e4:54:cf:4c:12:4e:4d:32:49:9c:04:
                    5a:82:8e:1b:1f:dc:84:95:d0:d4:e7:73:f0:5e:03:
                    ca:bd:87:99:ba:c5:a0:30:f4:bc:ae:0c:f0:5f:3e:
                    9d:59:07:8c:38:54:a9:a8:63:36:f1:b9:b5:73:3f:
                    04:7e:ce:14:e5:57:1c:41:55:a2:da:4c:82:ab:a7:
                    1b:74:1b:3b:93:22:32:9d:a0:3b:ce:00:62:25:22:
                    13:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0B:33:CB:61:B1:27:77:AE:3D:B0:15:04:DF:08:48:4E:9A:88:A0
            X509v3 Authority Key Identifier:
                keyid:D5:15:4E:1B:17:B2:EB:9E:5A:FA:35:37:23:C4:49:66:8F:E6:50:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/3137372e37332e3135372e302f32342d3234203d3e20323730313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:bc:3c:4c:46:ce:0f:2e:7b:02:47:ec:9c:d3:2e:b0:ce:06:
         d0:03:55:5f:65:db:d8:25:c8:a3:6f:f8:89:9c:a8:1b:7b:29:
         bd:5e:90:dc:39:52:2c:46:a7:93:5c:95:cf:94:49:0a:43:c0:
         a0:03:29:0e:00:08:ee:e7:24:a0:01:4b:7f:d3:d3:9b:9e:c5:
         b9:06:0f:7d:9a:cd:7d:ec:15:a2:bf:86:9a:d0:d6:cd:24:a7:
         da:8a:2f:46:d0:0f:20:17:45:12:59:bf:e6:14:c2:b0:0f:70:
         ca:ee:dc:1f:56:99:15:0b:a4:7b:f6:b3:65:63:39:c6:bc:e7:
         7a:ee:2e:ca:2d:5f:ab:80:44:be:26:06:87:ec:54:c4:05:80:
         c4:22:21:6d:1e:38:78:7c:5d:fa:8a:82:6d:80:8c:a9:36:a2:
         a1:7c:70:2c:0e:7f:e6:a5:ca:a3:96:17:5e:8e:34:60:1c:42:
         c1:44:05:e0:82:71:83:42:8a:b3:72:0b:fc:60:92:23:4f:22:
         ad:44:f4:d7:02:ea:10:b4:ab:e7:d4:e3:6b:a0:42:50:b4:c3:
         d6:bb:b4:59:01:31:1b:4e:9c:ec:97:61:6f:da:93:0d:16:0c:
         33:44:7c:dd:54:02:cd:2c:5e:9d:b9:13:79:a5:09:b6:a7:f4:
         07:6a:87:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:14:57 2024 by rpki-client on console-ams.rpki-client.org