Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/3138312e3233332e3135322e302f32332d3233203d3e20323732393733.roa
File:                     3138312e3233332e3135322e302f32332d3233203d3e20323732393733.roa (raw, json)
Hash identifier:          p1lhYclNQTaen4i8Vr+w1CMuH2qorAUELRcXyMOXl+8=
Subject key identifier:   77:67:FC:E3:98:3C:2D:87:5F:7C:D8:F0:DC:58:CE:10:39:44:59:29
Certificate issuer:       /CN=26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0
Certificate serial:       2BEB1BC4C632F3410C96D808AA60210E8ECC8108
Authority key identifier: 26:17:7C:B8:0E:40:0E:8F:6E:1A:1A:F9:6D:7E:3F:EE:34:7D:D0:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/3138312e3233332e3135322e302f32332d3233203d3e20323732393733.roa
Signing time:             Tue 05 Mar 2024 17:42:49 +0000
ROA not before:           Tue 05 Mar 2024 17:37:49 +0000
ROA not after:            Tue 04 Mar 2025 17:42:49 +0000
asID:                     272973
IP address blocks:        181.233.152.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Jun 2024 02:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:eb:1b:c4:c6:32:f3:41:0c:96:d8:08:aa:60:21:0e:8e:cc:81:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0
        Validity
            Not Before: Mar  5 17:37:49 2024 GMT
            Not After : Mar  4 17:42:49 2025 GMT
        Subject: CN=7767FCE3983C2D875F7CD8F0DC58CE1039445929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:64:cb:b9:ec:e7:1a:23:d1:c0:f1:b4:c4:bf:
                    56:71:a5:38:88:4f:bc:60:a8:c4:4d:ae:ae:05:71:
                    5e:c9:62:4f:9b:01:de:7e:1e:a3:16:c0:3a:6e:b6:
                    41:9a:6c:39:33:57:93:f4:19:92:ec:1b:24:1d:7b:
                    cc:de:67:fb:7d:38:29:44:10:6f:b5:34:48:64:c6:
                    5e:60:a5:1c:8c:91:15:a1:6d:8a:bb:ac:73:62:ea:
                    07:f3:9b:cd:09:cd:79:2b:f3:8c:7c:87:0f:a0:a5:
                    9c:99:38:89:a5:af:4e:33:ee:3c:f0:1e:38:26:c6:
                    39:41:45:fa:d8:a4:34:d5:13:3c:52:3b:93:31:ce:
                    a6:2b:2a:19:57:80:f8:fb:f9:d7:39:89:7c:03:d6:
                    4d:dc:9d:c8:af:54:4b:d0:f9:4e:ea:f9:6d:98:5b:
                    83:1a:42:2a:bc:0f:b7:29:e8:72:03:7d:1e:bd:43:
                    7b:2d:ab:2e:2d:f3:2a:58:74:e2:a7:0d:11:19:c0:
                    86:d9:12:93:de:f0:65:be:48:e6:ab:ee:9a:22:6f:
                    31:c8:5d:90:08:1c:ad:02:b3:55:21:4a:0b:22:8e:
                    c2:39:9c:2c:97:35:32:24:a1:4c:53:14:0a:0a:bf:
                    90:cd:54:9c:8b:07:f0:c5:b3:38:97:5f:66:74:b1:
                    85:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:67:FC:E3:98:3C:2D:87:5F:7C:D8:F0:DC:58:CE:10:39:44:59:29
            X509v3 Authority Key Identifier:
                keyid:26:17:7C:B8:0E:40:0E:8F:6E:1A:1A:F9:6D:7E:3F:EE:34:7D:D0:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/3138312e3233332e3135322e302f32332d3233203d3e20323732393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:c9:8d:10:f4:f5:e1:a5:d0:df:25:fb:15:2c:0b:29:c5:b7:
         94:b0:7f:fe:64:ea:fb:9d:0d:b6:b8:1a:cf:bb:69:87:44:95:
         32:1c:5e:67:67:19:7c:42:62:5e:85:ea:48:05:30:2f:36:96:
         c3:20:1f:63:00:cd:1d:27:7f:03:4c:4f:c5:f9:ee:86:0e:3b:
         1d:73:c6:ad:97:b9:90:d1:01:f4:4b:ee:31:38:cb:1d:25:99:
         6d:ce:ee:3d:35:a1:d8:92:e8:63:cc:17:48:fb:46:0e:03:21:
         17:d4:49:ae:15:36:1f:e0:9e:5e:97:67:eb:40:78:95:d7:9c:
         e7:eb:0c:b7:7b:02:82:ac:fd:b2:6d:a6:35:b9:b2:b0:4e:08:
         f6:66:5c:6e:75:aa:bc:54:01:87:f9:f2:e2:00:58:d7:f1:70:
         24:a0:68:3e:91:79:5a:1e:af:fb:1a:7c:6b:c3:8f:e3:d9:07:
         0d:6b:d9:62:b1:7e:2c:6f:4e:a5:29:06:75:a6:6a:fc:1c:8c:
         88:0f:2b:4d:ce:04:88:3e:5b:4e:8c:16:47:48:53:14:42:be:
         b0:34:fd:e6:dd:c5:e5:1a:7b:be:0b:91:64:de:34:a9:25:8d:
         9e:24:c5:de:6a:04:b0:d2:68:56:39:58:f8:13:f0:65:97:e4:
         57:df:47:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 02:10:04 2024 by rpki-client on console-ams.rpki-client.org