Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/3137372e31302e3138352e302f32342d3234203d3e20323633373235.roa
File:                     3137372e31302e3138352e302f32342d3234203d3e20323633373235.roa (raw, json)
Hash identifier:          EjQ9++2PvME/PUa6c6af94D7PHZX3C3j189nBiZ3KAM=
Subject key identifier:   16:93:41:31:20:D5:91:A7:24:1C:58:30:7C:D4:13:0D:2E:30:78:E2
Certificate issuer:       /CN=18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F
Certificate serial:       0C3456C232DAAEF9A06F04A053411B7468F25B31
Authority key identifier: 18:CD:F6:7D:EB:5A:4D:EB:A3:6F:8B:FA:60:8A:B3:EF:53:58:F1:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/3137372e31302e3138352e302f32342d3234203d3e20323633373235.roa
Signing time:             Tue 05 Mar 2024 17:45:57 +0000
ROA not before:           Tue 05 Mar 2024 17:40:57 +0000
ROA not after:            Tue 04 Mar 2025 17:45:57 +0000
asID:                     263725
IP address blocks:        177.10.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:34:56:c2:32:da:ae:f9:a0:6f:04:a0:53:41:1b:74:68:f2:5b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F
        Validity
            Not Before: Mar  5 17:40:57 2024 GMT
            Not After : Mar  4 17:45:57 2025 GMT
        Subject: CN=1693413120D591A7241C58307CD4130D2E3078E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:a3:1b:07:44:1a:d7:af:6d:36:d5:30:ad:18:
                    41:3a:9e:9b:5d:d9:c4:a9:ce:36:52:64:69:f4:e6:
                    34:16:05:d4:0c:2f:bc:f7:0e:8f:4d:a0:44:16:2d:
                    3a:7c:0a:86:6c:cd:f2:80:2a:a9:02:8e:8d:1c:8b:
                    7b:48:69:c1:ea:36:25:24:2d:19:12:3a:15:20:56:
                    cd:b5:aa:dc:37:ea:f2:be:0e:1c:19:89:d8:e0:4b:
                    0d:6c:26:35:38:23:72:cd:06:ba:e8:95:ad:f8:b9:
                    c7:b3:a0:31:cb:f8:0d:c7:84:35:e7:9f:2f:5a:b3:
                    1d:25:1a:f1:ca:c0:9f:aa:ca:41:e9:f2:2d:a1:51:
                    c9:54:97:3a:c5:64:4d:c2:cd:b5:bd:eb:4b:dd:52:
                    da:16:19:2d:69:a5:7d:d6:6b:57:4b:be:ba:3b:1e:
                    ce:b5:1b:77:11:e8:10:2c:42:61:9a:a1:af:5e:de:
                    fe:a6:de:94:7d:c0:ad:c4:26:23:78:71:9c:60:f1:
                    97:75:a7:30:a3:e7:0b:2b:98:eb:e4:09:c1:a6:ef:
                    73:1b:ea:39:76:d3:0d:a4:1b:58:e7:0d:34:39:be:
                    e9:09:62:1b:7c:ee:ab:46:0b:f8:cb:bd:58:60:f9:
                    67:f2:08:db:77:a2:d3:e5:7d:95:a0:90:8d:93:c6:
                    a2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:93:41:31:20:D5:91:A7:24:1C:58:30:7C:D4:13:0D:2E:30:78:E2
            X509v3 Authority Key Identifier:
                keyid:18:CD:F6:7D:EB:5A:4D:EB:A3:6F:8B:FA:60:8A:B3:EF:53:58:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/3137372e31302e3138352e302f32342d3234203d3e20323633373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:fd:71:d9:c4:b8:a7:35:4e:c8:13:b4:99:2e:b6:8e:87:76:
         3a:39:0c:9a:40:f1:9a:2f:1e:77:28:ae:7f:90:a4:85:30:69:
         81:19:69:cd:59:b4:1e:ad:49:2b:54:5f:b5:bf:b9:82:89:c1:
         19:a5:bd:06:bc:7b:08:91:b9:88:ad:ba:7d:98:81:55:e7:ab:
         7a:af:e0:5b:0f:65:d4:18:01:c3:5e:f6:b5:ab:a6:ba:c8:c3:
         44:ca:ae:2d:e1:cd:2c:9e:ac:d2:a6:01:8b:db:4a:a6:ec:11:
         c3:e5:12:ff:af:5a:42:06:bd:90:f7:bc:c8:c9:0a:95:4c:02:
         8f:98:0a:de:ec:6c:26:d6:a5:22:14:09:69:b1:7a:c6:19:dc:
         04:86:8b:ea:24:06:af:18:62:d9:ec:26:42:72:c0:ad:93:ff:
         96:1c:0a:19:5d:59:aa:3a:5c:34:32:09:df:52:e6:c2:96:ec:
         09:06:5e:a9:51:0c:a1:fe:58:b5:40:d5:90:cf:e4:4a:fa:9f:
         52:22:99:1d:85:22:15:4e:60:d7:3c:cc:6f:80:d1:a2:c4:76:
         c2:bc:b3:2b:a4:1f:72:00:c3:34:af:45:d2:2e:83:24:80:aa:
         62:e4:0d:1b:3a:6e:18:59:25:c3:8f:c6:6b:f1:2e:fe:b3:58:
         a7:99:fc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 06:42:03 2024 by rpki-client on console-fra.rpki-client.org