Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3137372e3233342e3133362e302f32312d3231203d3e20323633383231.roa
File:                     3137372e3233342e3133362e302f32312d3231203d3e20323633383231.roa (raw, json)
Hash identifier:          xnAZFLZFVP+YD76KDM1WMuJnifyzj8nfJfpa3pyjT40=
Subject key identifier:   A9:0A:61:37:AF:B3:86:D2:6B:B9:0B:C0:AE:74:14:9F:56:B2:F5:F2
Certificate issuer:       /CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
Certificate serial:       4005D8168B1F49E01F35673FC66349A5231F21F7
Authority key identifier: 13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3137372e3233342e3133362e302f32312d3231203d3e20323633383231.roa
Signing time:             Tue 05 Mar 2024 18:21:14 +0000
ROA not before:           Tue 05 Mar 2024 18:16:14 +0000
ROA not after:            Tue 04 Mar 2025 18:21:14 +0000
asID:                     263821
IP address blocks:        177.234.136.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:05:d8:16:8b:1f:49:e0:1f:35:67:3f:c6:63:49:a5:23:1f:21:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
        Validity
            Not Before: Mar  5 18:16:14 2024 GMT
            Not After : Mar  4 18:21:14 2025 GMT
        Subject: CN=A90A6137AFB386D26BB90BC0AE74149F56B2F5F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c2:6f:c7:51:e7:99:b9:36:ed:cb:b0:6f:68:
                    24:ab:6c:7a:74:a2:89:12:d5:5c:9a:2d:01:4e:c6:
                    cb:9e:56:20:bf:a9:80:a3:f4:5f:1b:45:e3:5b:95:
                    8b:33:89:19:96:3b:ec:17:c5:91:72:a4:c3:23:37:
                    b1:cd:53:97:8f:ee:71:4f:2e:ef:56:d0:70:ec:0b:
                    63:1c:8e:fb:96:38:f1:14:f7:7b:63:4c:bb:76:08:
                    fb:26:14:fa:b2:a0:22:b4:91:a3:9a:65:5e:71:67:
                    28:47:6a:9d:4c:2c:f5:f4:75:1e:0b:b4:d8:e4:5e:
                    d8:74:3d:cf:8f:00:23:7c:ac:ae:07:48:dc:3c:ab:
                    ce:6d:30:d8:19:67:86:09:d3:a6:9b:fd:64:1d:11:
                    38:73:bd:9b:fa:09:96:90:59:b4:40:fb:27:68:e5:
                    0a:5f:ac:47:0a:d5:41:5a:00:5a:73:32:df:6a:91:
                    2f:d7:1b:fa:34:65:b7:98:c8:ef:9a:b7:36:fb:b4:
                    9a:0f:e8:7a:70:5b:e4:7c:ac:2b:98:d8:f5:c2:10:
                    fc:47:86:86:ea:a8:3a:11:8b:ab:5a:09:f9:a8:85:
                    75:2d:b7:06:36:db:e4:20:05:10:7f:1c:8a:2b:7d:
                    e5:b6:c2:2e:61:39:b3:fb:ae:c1:b3:1d:8f:bd:26:
                    1b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0A:61:37:AF:B3:86:D2:6B:B9:0B:C0:AE:74:14:9F:56:B2:F5:F2
            X509v3 Authority Key Identifier:
                keyid:13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3137372e3233342e3133362e302f32312d3231203d3e20323633383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.234.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1b:9e:e7:9f:d1:0d:2a:f6:fd:12:c1:90:c1:c9:0d:6c:66:b5:
         a1:55:f8:cf:db:8b:fd:c7:bb:e2:a9:9b:39:cb:51:b9:18:4f:
         71:c8:04:c5:d7:23:e0:21:75:b3:94:f2:3c:f3:3c:ff:b0:34:
         4f:f9:cc:ae:c5:83:1a:b3:8f:8e:e2:32:ca:f6:7d:46:3f:cc:
         00:67:4a:4a:d5:b8:8d:18:74:df:24:66:a2:86:c9:cd:d6:b5:
         77:6b:61:01:87:cd:c6:c9:5a:2c:3c:d6:63:9e:c1:81:2b:e0:
         66:3e:ee:94:25:6a:f1:b6:0c:b8:5f:45:4c:6a:30:99:55:57:
         71:6c:e0:28:aa:d3:0f:04:ba:26:4b:68:49:07:9f:5e:2c:da:
         c5:cb:16:cd:8a:f3:86:5f:4b:49:dd:6b:f3:20:11:db:3d:60:
         75:32:5e:7d:c5:f6:fc:06:cb:81:bd:c7:c0:d8:0e:ec:b2:28:
         ca:5d:ac:3c:48:34:8a:ad:6a:05:bd:93:3a:05:f4:c4:d7:54:
         c0:58:04:a9:45:bb:63:49:9c:9b:6b:97:4f:ab:0e:d8:a0:88:
         33:16:b4:2b:ac:7d:84:a1:9c:2d:92:eb:26:3d:05:64:14:89:
         d3:1e:d3:12:21:95:71:ae:9a:19:0f:23:7c:fa:5f:89:22:f3:
         fa:2b:61:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:51 2024 by rpki-client on console-ams.rpki-client.org