Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235312e32342e302f32312d3231203d3e203237373638.roa
File:                     3137372e3235312e32342e302f32312d3231203d3e203237373638.roa (raw, json)
Hash identifier:          OF3VCIG6nWoSqJDZk9whMZPkG+VknULV6EfL3Hkrieo=
Subject key identifier:   79:AC:2C:AD:80:FD:F5:BA:29:6D:CA:FD:75:31:0C:33:04:47:89:49
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       4369B47FBDAE18BF309AFA6728230ADED614A135
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235312e32342e302f32312d3231203d3e203237373638.roa
Signing time:             Fri 06 Dec 2024 18:40:00 +0000
ROA not before:           Fri 06 Dec 2024 18:35:00 +0000
ROA not after:            Fri 05 Dec 2025 18:40:00 +0000
asID:                     27768
IP address blocks:        177.251.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 19:59:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:69:b4:7f:bd:ae:18:bf:30:9a:fa:67:28:23:0a:de:d6:14:a1:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Dec  6 18:35:00 2024 GMT
            Not After : Dec  5 18:40:00 2025 GMT
        Subject: CN=79AC2CAD80FDF5BA296DCAFD75310C3304478949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:79:26:a8:cb:ad:a0:69:20:03:26:40:f0:ea:
                    fb:2f:59:e1:7e:fb:8f:2f:4e:59:e8:85:9a:6d:05:
                    95:42:9a:29:bb:71:e1:47:49:1d:9e:18:46:38:73:
                    7a:5b:35:e7:3c:5a:31:66:25:e5:74:8a:6a:fb:de:
                    bb:f4:f6:51:46:18:73:15:96:af:02:98:6c:68:ba:
                    ea:9c:06:29:cc:e4:9d:12:4c:93:19:1f:7b:bc:e1:
                    55:bf:85:54:b3:57:fa:aa:db:4e:58:c9:17:3f:0f:
                    a5:17:35:27:64:53:c2:f4:4e:72:55:f8:76:df:52:
                    17:fc:3b:68:8d:23:76:e3:8d:d8:69:18:74:17:f5:
                    19:c6:9c:34:40:bc:70:e8:7d:e4:12:74:87:ee:69:
                    73:9c:90:42:17:08:80:2b:23:27:da:98:2a:4a:f1:
                    c7:87:53:8c:6e:35:26:b7:47:36:3f:7a:da:2a:51:
                    7d:f2:fd:5d:25:c7:68:07:0c:be:3d:0a:c6:6a:df:
                    07:f4:6d:ce:65:6b:cb:ce:d3:57:ee:32:36:4f:f3:
                    1c:2e:2f:a3:32:20:81:05:c1:ed:b1:3c:1b:b2:88:
                    60:9d:e0:4c:1f:f4:81:62:3a:8a:7c:29:03:2b:11:
                    b1:cc:2d:5d:f5:58:b8:32:e1:a8:fc:93:b7:20:35:
                    42:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AC:2C:AD:80:FD:F5:BA:29:6D:CA:FD:75:31:0C:33:04:47:89:49
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235312e32342e302f32312d3231203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.251.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         72:7c:a0:cd:08:b2:3f:25:61:11:c3:a5:33:39:ed:f8:c2:4e:
         bf:db:80:37:7d:35:e9:64:f7:b5:b1:ee:64:2f:2f:da:a4:54:
         47:e1:09:9c:ac:a5:3e:cc:cc:1b:89:26:c1:62:28:30:b6:e0:
         df:a6:28:0a:79:42:c5:3d:37:43:35:f1:d3:4d:08:34:6d:d4:
         26:aa:26:71:c5:36:83:b7:ce:ab:91:25:a0:b7:73:5c:78:b5:
         17:e9:1e:3f:6b:14:ee:01:40:37:69:33:36:5d:66:fd:f5:5f:
         45:19:ee:64:55:7d:6d:fa:84:bb:d3:10:ac:59:eb:1b:14:61:
         be:d1:3b:de:a4:3b:5b:e1:89:b6:99:52:2d:a1:9d:8a:47:f0:
         c3:f7:14:9a:e6:06:2f:be:99:e0:00:38:fe:94:1d:84:b7:e9:
         3f:df:cb:ee:6b:f2:3c:45:93:51:52:c2:df:c8:93:11:42:ee:
         cf:39:9d:33:b4:2a:bc:71:e0:26:37:67:6a:9d:a3:94:ca:0a:
         71:f4:3c:f3:2f:76:0c:96:5a:5f:bf:5d:1a:f3:2b:88:fe:44:
         57:b1:70:c5:aa:7f:d5:36:ca:13:39:37:38:d0:79:55:44:b0:
         d0:72:45:23:fd:78:62:63:5a:0d:61:ad:d4:d2:aa:af:c7:b4:
         fb:fd:3b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:29 2025 by rpki-client