Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36312e3137372e302f32342d3234203d3e203135323734.roa
File:                     3230302e36312e3137372e302f32342d3234203d3e203135323734.roa (raw, json)
Hash identifier:          koYcunMr+fyL+jlCVMgvE04RKmr0gDG5I84bsP2AoA8=
Subject key identifier:   77:9F:BA:99:72:31:1C:6D:7B:53:C6:32:C8:FB:1E:DE:06:D2:D9:65
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       3BC9D7B12609C5C05E6F29C9D66FA509E0B2D4F3
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36312e3137372e302f32342d3234203d3e203135323734.roa
Signing time:             Tue 05 Mar 2024 18:12:05 +0000
ROA not before:           Tue 05 Mar 2024 18:07:05 +0000
ROA not after:            Tue 04 Mar 2025 18:12:05 +0000
asID:                     15274
IP address blocks:        200.61.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c9:d7:b1:26:09:c5:c0:5e:6f:29:c9:d6:6f:a5:09:e0:b2:d4:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Mar  5 18:07:05 2024 GMT
            Not After : Mar  4 18:12:05 2025 GMT
        Subject: CN=779FBA9972311C6D7B53C632C8FB1EDE06D2D965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b0:66:fc:a5:ce:a2:64:bb:9a:73:3e:b2:f0:
                    87:5d:62:16:2f:85:a1:1d:ea:34:6b:ff:1e:70:ae:
                    d3:86:1e:40:f8:45:8b:65:0c:ed:00:ca:6e:f2:57:
                    11:48:25:40:a5:6f:40:1d:4e:0c:3b:d8:f7:c0:c1:
                    0d:2f:e6:f5:14:eb:de:5f:1c:36:d6:7a:23:73:7e:
                    55:f7:48:cb:8d:c5:6a:4a:10:88:04:df:e7:85:62:
                    b1:17:28:15:a1:0c:5b:80:97:90:76:5d:98:3d:4b:
                    c3:e5:88:db:52:b2:23:51:6c:96:4c:b6:be:c4:9e:
                    b4:c4:eb:90:fa:f0:8a:24:32:d3:f1:05:18:e3:2a:
                    58:80:5e:99:93:dd:c0:0a:9e:e1:b0:89:c7:e1:bf:
                    ed:4f:84:06:64:6a:c1:7f:59:35:d7:8a:fe:ce:ee:
                    15:15:8a:d9:db:a5:1e:72:df:ce:49:42:13:38:98:
                    10:bf:13:e4:88:18:f5:fe:07:09:ca:ed:84:75:63:
                    14:e2:b7:2e:f6:a2:dd:bf:9a:4d:8c:1b:c9:ef:8f:
                    cd:e6:19:38:e4:b1:e9:8a:54:63:33:35:20:58:01:
                    65:dc:ee:92:67:b2:83:c2:41:c7:3a:e7:5a:1e:44:
                    03:0a:d4:f7:e9:e4:eb:b1:9d:76:40:66:b2:ff:51:
                    02:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9F:BA:99:72:31:1C:6D:7B:53:C6:32:C8:FB:1E:DE:06:D2:D9:65
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36312e3137372e302f32342d3234203d3e203135323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:23:fb:f0:1d:69:90:17:ba:79:bf:1b:71:b3:d5:25:6a:ea:
         c2:c8:6f:29:d5:2a:86:e3:75:4c:32:4a:8f:ce:22:92:53:52:
         80:a9:c6:bf:13:0a:76:2e:f6:f9:f8:75:09:45:33:7e:bf:bf:
         59:32:37:98:24:09:55:87:6e:7a:cf:27:59:46:a9:19:42:66:
         97:39:37:7e:f2:7b:c9:50:39:04:61:5c:e4:0d:45:dc:77:45:
         15:92:ac:1b:b8:8b:b6:8c:24:77:bf:20:88:a8:70:36:08:2f:
         b5:81:b9:66:e1:e7:3b:b8:0e:de:1f:ba:cd:9d:ab:49:2e:7e:
         ac:d1:2f:65:8c:d4:ef:8e:91:f9:00:7d:f6:cd:fd:e5:18:ae:
         23:d7:ba:7b:c0:a0:24:8f:27:ce:d3:92:d1:b8:af:0a:ea:47:
         7c:dc:28:65:c9:f5:92:bd:8d:a4:78:9b:df:db:e0:5b:5a:33:
         ce:11:04:3a:5b:61:08:54:4d:eb:87:cd:9b:fa:4a:af:5d:18:
         a6:0a:2c:49:50:98:2e:65:35:9c:7f:97:f0:c0:fa:ff:c1:62:
         17:e0:07:c2:ec:5c:f1:b9:b0:e0:f8:e5:bc:97:43:b2:42:0f:
         d0:bf:49:16:b3:6d:09:63:b4:eb:ad:d1:be:e8:f1:ac:f5:ad:
         e4:42:26:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:22 2024 by rpki-client on console-fra.rpki-client.org