Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/3137372e3132362e34382e302f32322d3234203d3e20323731383632.roa
File:                     3137372e3132362e34382e302f32322d3234203d3e20323731383632.roa (raw, json)
Hash identifier:          /HZ1YrujYzvzNZSyGpMCl0ms6tpWKCbsZ4zNJTxBDH0=
Subject key identifier:   CC:3C:40:37:7C:9E:B8:A1:1E:43:35:67:7F:5E:6C:D1:5C:DC:C9:A9
Certificate issuer:       /CN=DCDA04F0CBDD74C0B90014116FCD138125A6F0B9
Certificate serial:       2213F3CDB25A3A1BB18D7E8599C63075109AD4A8
Authority key identifier: DC:DA:04:F0:CB:DD:74:C0:B9:00:14:11:6F:CD:13:81:25:A6:F0:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/3137372e3132362e34382e302f32322d3234203d3e20323731383632.roa
Signing time:             Tue 05 Mar 2024 18:20:28 +0000
ROA not before:           Tue 05 Mar 2024 18:15:28 +0000
ROA not after:            Tue 04 Mar 2025 18:20:28 +0000
asID:                     271862
IP address blocks:        177.126.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:13:f3:cd:b2:5a:3a:1b:b1:8d:7e:85:99:c6:30:75:10:9a:d4:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDA04F0CBDD74C0B90014116FCD138125A6F0B9
        Validity
            Not Before: Mar  5 18:15:28 2024 GMT
            Not After : Mar  4 18:20:28 2025 GMT
        Subject: CN=CC3C40377C9EB8A11E4335677F5E6CD15CDCC9A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b1:dc:70:a0:c8:66:ad:a4:0e:f0:c1:fd:52:
                    34:73:62:29:ab:a9:2f:ea:2a:5d:6f:80:2a:b5:63:
                    60:2b:e1:1a:24:c7:f7:ea:d7:32:be:7f:64:16:c4:
                    3f:b6:dd:e8:64:cb:c1:33:75:97:7a:cc:9e:ac:9e:
                    bf:6c:a4:34:12:5b:93:14:c5:f7:17:45:ab:81:6e:
                    83:31:be:2e:73:04:4f:e4:7e:30:0d:d7:28:41:4b:
                    ef:46:06:93:8a:19:05:6f:22:80:26:2c:c1:59:71:
                    9d:00:61:ba:0c:66:59:a3:d5:7a:2e:05:71:bc:69:
                    e3:58:69:5b:d7:66:1a:83:68:0a:08:d3:bc:03:32:
                    b8:08:ff:7d:31:a6:0d:d2:42:79:9f:e3:06:f2:82:
                    af:ae:31:bd:31:58:84:59:c2:78:61:b1:24:0f:16:
                    76:f9:f1:91:72:eb:44:0a:39:6e:83:ce:47:cd:43:
                    ba:e3:ff:98:c7:59:bb:11:d4:f2:2b:1d:65:c7:56:
                    c1:98:0d:97:35:5f:04:94:27:cc:e5:e6:6d:dc:4a:
                    14:e0:dc:9b:4a:58:cc:3e:57:02:35:8e:f8:2b:4f:
                    a5:11:da:bc:74:b7:fd:5b:7f:31:05:da:82:43:29:
                    3e:84:ad:93:ab:bb:b5:25:0e:68:9c:b2:f0:e1:f3:
                    1c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3C:40:37:7C:9E:B8:A1:1E:43:35:67:7F:5E:6C:D1:5C:DC:C9:A9
            X509v3 Authority Key Identifier:
                keyid:DC:DA:04:F0:CB:DD:74:C0:B9:00:14:11:6F:CD:13:81:25:A6:F0:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/3137372e3132362e34382e302f32322d3234203d3e20323731383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:97:a7:e5:40:e8:74:05:c9:fe:98:7d:89:68:fc:34:41:c5:
         4a:e0:97:51:b7:5d:89:69:67:67:02:94:83:3b:5a:1d:76:83:
         03:02:be:f2:99:f8:5a:dd:bf:f8:27:73:a1:16:a5:36:7e:6b:
         19:9e:e4:d3:bc:2f:87:43:0b:09:61:eb:0f:ab:ea:30:15:55:
         a4:60:0f:0d:ff:36:ec:20:ff:4f:8a:f1:90:9a:0c:9f:bd:7e:
         34:55:ba:af:40:38:23:a9:2c:08:66:0c:bc:4e:db:07:11:cd:
         14:24:a0:2b:0e:ba:b7:25:cc:2c:a2:2c:26:9a:f5:e2:04:8d:
         af:fd:5e:58:4e:a0:ff:c6:94:65:84:49:e8:91:89:87:e2:0e:
         0e:40:c5:b8:e3:c5:90:e9:87:5a:8e:ee:28:2d:84:f4:b4:8b:
         4c:fa:19:a4:68:36:b6:4b:af:e5:a0:c8:0f:b3:e1:ea:bc:e1:
         d3:17:45:fb:ac:54:91:7c:7c:fa:7a:01:22:03:50:92:49:1c:
         28:1f:0f:eb:22:80:70:65:c3:07:22:30:f3:b6:67:0e:ae:d7:
         23:a0:33:b4:19:b6:01:d1:3e:97:ef:42:37:fc:46:42:74:4e:
         eb:6f:f5:2b:3d:6f:f2:4a:cb:6d:21:59:00:d9:0d:fd:45:f7:
         04:d5:af:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:09 2024 by rpki-client on console-ams.rpki-client.org