Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3137372e3233342e3231312e302f32342d3234203d3e20323732393534.roa
File:                     3137372e3233342e3231312e302f32342d3234203d3e20323732393534.roa (raw, json)
Hash identifier:          9eL73hh52mTOLtVPzRc4Gux4cNextLqQUua7Pevcl2c=
Subject key identifier:   55:E4:65:61:ED:AB:57:77:7A:96:CE:66:F2:28:B1:AC:F8:69:5A:0C
Certificate issuer:       /CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
Certificate serial:       43F48603F492E0BD41D620DF941ACF77694AA9B7
Authority key identifier: C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3137372e3233342e3231312e302f32342d3234203d3e20323732393534.roa
Signing time:             Tue 04 Feb 2025 18:54:40 +0000
ROA not before:           Tue 04 Feb 2025 18:49:40 +0000
ROA not after:            Tue 03 Feb 2026 18:54:40 +0000
asID:                     272954
IP address blocks:        177.234.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 21:53:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f4:86:03:f4:92:e0:bd:41:d6:20:df:94:1a:cf:77:69:4a:a9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
        Validity
            Not Before: Feb  4 18:49:40 2025 GMT
            Not After : Feb  3 18:54:40 2026 GMT
        Subject: CN=55E46561EDAB57777A96CE66F228B1ACF8695A0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6e:6d:ac:74:27:2c:5b:e5:21:20:55:07:24:
                    7f:6d:d4:44:e7:3b:f4:bf:93:55:e2:be:2d:f0:2f:
                    b5:1e:50:0a:87:b0:bc:e4:fd:c2:34:21:2d:72:8c:
                    72:d7:bb:81:4b:78:6b:ab:95:4e:7b:8b:a3:18:47:
                    bd:00:34:06:a5:49:85:76:fc:a2:6e:7a:ed:da:fb:
                    10:3a:6d:bc:e5:91:9b:27:eb:b0:55:3d:5e:a9:d1:
                    a5:6b:2d:39:05:ba:aa:e7:92:49:ea:98:07:a8:20:
                    c4:e3:23:e4:8e:72:90:69:8e:62:05:61:4b:8f:2e:
                    d8:2d:11:91:6f:03:f3:f0:9f:6d:6d:88:b4:57:a0:
                    53:d6:9a:ca:50:c0:6a:17:cc:bb:28:dd:7e:f3:be:
                    bf:39:c0:c6:2f:97:d4:39:b4:78:c9:81:cd:95:60:
                    56:b6:6d:8a:33:54:88:8f:25:df:a4:51:cb:6d:f7:
                    e6:f8:28:2c:eb:f8:d8:7f:fd:68:f5:06:43:3d:8b:
                    f4:a8:64:53:33:98:79:3d:7c:40:7d:05:50:c6:52:
                    d4:e0:a1:ec:98:33:ff:e9:35:72:51:a0:ad:67:55:
                    f3:fb:04:00:cf:33:53:f9:00:1f:ef:64:8b:9b:e8:
                    d0:c9:ed:5b:b2:29:b5:3b:13:0a:64:69:92:18:79:
                    ab:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E4:65:61:ED:AB:57:77:7A:96:CE:66:F2:28:B1:AC:F8:69:5A:0C
            X509v3 Authority Key Identifier:
                keyid:C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3137372e3233342e3231312e302f32342d3234203d3e20323732393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.234.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:99:7d:41:0a:7c:56:6c:b9:4d:7b:b0:cd:52:a5:41:f9:6f:
         73:5c:f6:60:20:19:f7:53:0b:dc:0f:a7:b5:ba:c4:bb:ae:53:
         6f:f4:bf:2b:0f:22:ca:60:99:1f:b1:a4:1d:76:b8:31:a0:aa:
         e5:64:f7:36:78:57:57:c9:cd:8f:a2:5e:9b:c7:01:31:06:e2:
         2c:33:df:75:20:a0:1e:42:da:ce:ee:fe:21:3b:a0:4b:96:c0:
         1d:ca:31:50:53:7a:d6:ba:93:f5:51:d0:1e:72:86:a9:21:41:
         8d:d2:64:b5:1b:bc:fb:1e:d3:f3:01:f6:68:dd:7a:d1:a9:89:
         7e:78:b4:18:f1:ae:b3:be:63:a9:6c:89:3c:6d:97:4e:ee:bf:
         3c:83:53:98:49:4b:63:59:a2:d6:eb:99:ae:2f:f0:64:87:3e:
         de:99:e8:53:a2:d9:fc:a7:7b:58:06:78:86:a3:e2:ac:9e:1f:
         58:c4:f8:24:ee:22:a5:e6:f8:9c:c1:bb:66:31:31:50:1f:63:
         0f:eb:bf:44:16:c2:0c:6d:27:24:81:38:fe:74:92:4e:b6:bc:
         7f:4b:c1:af:93:eb:55:fc:c7:1e:06:01:85:f8:3c:ac:73:40:
         73:24:24:dc:b6:d0:d4:3a:24:0b:96:78:c4:10:7d:28:60:af:
         31:17:09:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:28:42 2025 by rpki-client