Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3137372e3233342e3133362e302f32312d3231203d3e20323633383231.roa
File:                     3137372e3233342e3133362e302f32312d3231203d3e20323633383231.roa (raw, json)
Hash identifier:          /I7Mlytc8sY/sjO4db/5lSkgemYY9YAYh/NlNsI0cM0=
Subject key identifier:   2C:E6:29:17:39:E4:B3:75:BC:A6:F8:F1:CF:F4:80:91:DA:37:D2:D5
Certificate issuer:       /CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
Certificate serial:       0AE253C48C5DE24C9C60367AB8717ABD00267B19
Authority key identifier: 13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3137372e3233342e3133362e302f32312d3231203d3e20323633383231.roa
Signing time:             Tue 04 Feb 2025 18:39:20 +0000
ROA not before:           Tue 04 Feb 2025 18:34:20 +0000
ROA not after:            Tue 03 Feb 2026 18:39:20 +0000
asID:                     263821
IP address blocks:        177.234.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e2:53:c4:8c:5d:e2:4c:9c:60:36:7a:b8:71:7a:bd:00:26:7b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
        Validity
            Not Before: Feb  4 18:34:20 2025 GMT
            Not After : Feb  3 18:39:20 2026 GMT
        Subject: CN=2CE6291739E4B375BCA6F8F1CFF48091DA37D2D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b0:f4:42:cd:8a:47:b7:69:9e:5b:75:ed:ac:
                    07:37:75:fd:50:24:9c:29:74:68:df:8d:17:1b:10:
                    26:1a:62:04:81:de:25:c8:14:61:c6:2b:29:29:33:
                    56:a5:f2:6f:70:e0:bf:d0:ba:d5:0b:c9:a8:e1:0c:
                    db:6f:64:d7:7c:1d:ba:85:77:55:3e:3c:0f:48:40:
                    d7:80:79:fa:c1:f5:d3:ef:28:1b:30:3b:98:bb:45:
                    84:c0:8e:f2:b1:e3:fe:a2:c5:67:44:9b:1b:44:45:
                    9a:ed:d7:e6:e4:ba:6a:ae:77:f9:70:3b:1c:e8:5f:
                    4a:c2:d4:f0:2a:c3:1f:ed:e0:a3:94:ba:3b:09:bf:
                    e2:7c:48:4c:bd:0a:5f:f8:bc:58:71:b6:9a:dc:bd:
                    05:0f:56:d8:55:0e:fb:6f:1f:4e:79:31:d3:05:39:
                    69:45:9a:8a:92:fc:a4:57:23:10:32:7e:f2:1a:16:
                    21:8c:cc:55:fd:35:ff:ed:3b:98:51:59:a4:3b:08:
                    4c:09:69:e8:9a:f6:f1:a5:97:26:fb:e9:76:ab:e0:
                    87:3f:cb:6f:95:95:56:f6:1c:ce:ac:4c:c7:77:32:
                    cf:77:c8:bc:21:d5:0c:ca:94:c9:f6:43:f1:b5:4c:
                    f5:12:d1:32:e5:e7:d1:c0:da:14:67:9f:b1:05:c0:
                    8c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E6:29:17:39:E4:B3:75:BC:A6:F8:F1:CF:F4:80:91:DA:37:D2:D5
            X509v3 Authority Key Identifier:
                keyid:13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3137372e3233342e3133362e302f32312d3231203d3e20323633383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.234.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cb:be:0a:dc:70:16:c2:d0:37:2c:26:22:04:45:1f:2a:f2:06:
         e2:c0:05:ac:3f:74:e7:ca:42:f5:72:27:e5:28:3f:82:ff:c3:
         61:f6:93:0e:a4:d9:23:e8:fe:ec:a5:82:0f:af:bd:fe:cb:28:
         af:a4:74:1d:41:b0:f9:92:cc:b2:1d:62:88:79:95:f1:0e:ad:
         61:bd:6f:62:8b:45:41:57:75:45:a7:0c:59:93:15:57:ff:4e:
         ce:06:68:d0:7f:c0:10:29:eb:a5:5e:c1:38:b4:b0:5d:9a:40:
         5c:d9:b1:f4:a4:eb:c3:64:b2:c6:7f:4b:fc:dc:5c:0b:28:5a:
         46:43:02:c5:e6:07:7e:6f:81:b1:3e:28:78:eb:c7:40:4d:63:
         fa:01:e9:ef:61:e2:5e:fd:1d:dd:89:de:25:b6:64:d7:c5:3b:
         fe:f0:4c:15:12:9f:dc:1c:d2:8f:b9:c7:a3:d5:6c:92:ab:b9:
         b8:d7:50:d0:49:2a:25:18:3a:a5:9e:29:44:b8:e8:58:96:ab:
         81:39:8f:91:7d:82:69:b9:1c:eb:b5:e4:48:53:96:f5:e3:40:
         cd:72:63:90:a7:7b:9a:c7:ec:93:cc:b1:1f:9a:db:f8:ce:0f:
         d6:d4:41:72:fe:48:0a:43:ea:b9:00:8b:af:87:74:d5:06:92:
         1d:4d:e9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:22 2025 by rpki-client