Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/3137372e3230302e3233362e302f32332d3234203d3e20323730303333.roa
File:                     3137372e3230302e3233362e302f32332d3234203d3e20323730303333.roa (raw, json)
Hash identifier:          A4cunQ+QaP0gsWAFFnE6EkU1A0Sxqncpa+/Kv7igAf0=
Subject key identifier:   18:D6:30:90:8A:5E:C7:6F:37:C6:BF:BF:8A:EB:3A:27:E2:ED:93:C7
Certificate issuer:       /CN=C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134
Certificate serial:       4201AD313D887354184B39FF09E5A91E1BEDF40A
Authority key identifier: C5:CE:76:D2:87:52:F8:32:AE:1A:AB:4A:B6:EB:8C:38:3B:FB:21:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/3137372e3230302e3233362e302f32332d3234203d3e20323730303333.roa
Signing time:             Tue 05 Mar 2024 17:41:02 +0000
ROA not before:           Tue 05 Mar 2024 17:36:02 +0000
ROA not after:            Tue 04 Mar 2025 17:41:02 +0000
asID:                     270033
IP address blocks:        177.200.236.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:01:ad:31:3d:88:73:54:18:4b:39:ff:09:e5:a9:1e:1b:ed:f4:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134
        Validity
            Not Before: Mar  5 17:36:02 2024 GMT
            Not After : Mar  4 17:41:02 2025 GMT
        Subject: CN=18D630908A5EC76F37C6BFBF8AEB3A27E2ED93C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:45:65:34:5d:b1:52:a3:24:29:f0:09:bb:3d:
                    c4:18:5a:ae:b7:41:ed:e0:cd:e8:6e:14:93:53:97:
                    27:96:da:d2:8c:f2:5f:2e:4f:35:c7:0b:07:42:02:
                    d2:0f:3b:56:85:5b:73:c7:de:79:1f:f2:ae:6c:37:
                    9a:c7:f4:88:f6:ac:46:b9:58:83:4e:ad:0a:a2:9a:
                    83:3f:a6:88:be:63:95:f9:80:b3:5d:de:bb:f4:29:
                    f2:95:7c:1d:cd:88:41:35:b1:8f:89:e6:3d:16:4a:
                    a8:07:c3:73:21:9f:10:34:d8:d8:18:86:b2:46:a7:
                    f8:69:9a:e8:77:f4:d1:eb:da:16:2f:38:17:bc:30:
                    f4:3f:f6:21:88:ef:c9:97:14:3f:a0:ab:51:1f:dc:
                    0a:12:a9:b7:ec:7b:8a:e5:d6:0b:aa:6a:36:e5:c6:
                    bb:39:4b:06:83:1b:ad:b3:3a:06:3a:62:4c:36:d4:
                    59:18:ae:16:a3:ba:66:4d:83:b1:9a:f0:3d:93:5f:
                    5b:62:1a:aa:90:51:19:60:c9:69:81:1f:7a:94:e0:
                    c4:81:84:aa:c9:8d:be:7e:fe:73:81:8c:7a:67:39:
                    ed:af:71:98:41:e6:53:0e:07:fa:6b:63:04:88:e7:
                    e9:bf:36:47:0a:c5:18:ac:67:8e:3c:d1:e9:b0:aa:
                    c1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D6:30:90:8A:5E:C7:6F:37:C6:BF:BF:8A:EB:3A:27:E2:ED:93:C7
            X509v3 Authority Key Identifier:
                keyid:C5:CE:76:D2:87:52:F8:32:AE:1A:AB:4A:B6:EB:8C:38:3B:FB:21:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/3137372e3230302e3233362e302f32332d3234203d3e20323730303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:c8:f0:f4:54:8a:cd:40:b4:f8:08:fb:68:a1:24:bb:b8:04:
         0d:eb:4f:2b:cc:f4:10:51:e7:a0:b5:e5:0d:39:2a:6e:d2:ea:
         51:b7:40:97:2f:a7:12:2a:56:ad:33:1a:c8:18:d9:3c:60:ad:
         45:07:92:ea:6f:1b:a1:6b:49:56:bd:a2:3a:f0:3d:42:d9:2c:
         28:28:91:74:2d:24:03:99:eb:a7:eb:5d:68:84:8d:4d:00:9b:
         cc:cf:97:e7:2a:89:7d:72:f8:89:35:3d:3e:a8:87:a2:2b:fb:
         72:c3:dc:9f:1e:ac:5b:74:4d:91:5d:f7:8f:68:22:85:d4:f2:
         ce:7f:fb:79:cb:a6:de:b8:27:58:35:f9:ea:e2:e6:dc:15:cb:
         13:95:07:9a:a8:5b:74:15:e3:d9:d0:f7:fb:27:16:8b:be:aa:
         60:56:06:0e:85:65:c7:31:0e:f4:45:e9:d2:ee:c6:31:50:79:
         1c:30:4d:86:43:19:ad:c5:91:23:b0:30:a9:9e:91:5c:16:3f:
         00:c0:32:cd:f2:b9:58:19:8b:fe:45:0b:33:45:b0:06:cc:71:
         6a:fe:45:50:26:93:d8:cf:f1:46:ab:78:e9:93:4e:fb:d1:cb:
         c9:51:d0:e1:55:4c:c1:96:7a:fb:56:6c:23:67:6a:6f:d0:7e:
         4f:8f:8f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org