Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/3136342e37372e302e302f31372d3234203d3e2036343731.roa
File:                     3136342e37372e302e302f31372d3234203d3e2036343731.roa (raw, json)
Hash identifier:          hFoyTVqgqWLG0+QDV5/I7VAJwE0a9ezIClZ9iSEp9dg=
Subject key identifier:   72:12:C8:24:79:14:95:E1:B5:FF:AF:26:FA:EA:5C:F0:67:75:D3:1F
Certificate issuer:       /CN=2652C1433114197317FCA49E051F361760D69E0E
Certificate serial:       0C43FF8B3D87978E4596EE035CF24B79CDCE973C
Authority key identifier: 26:52:C1:43:31:14:19:73:17:FC:A4:9E:05:1F:36:17:60:D6:9E:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2652C1433114197317FCA49E051F361760D69E0E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/3136342e37372e302e302f31372d3234203d3e2036343731.roa
Signing time:             Tue 05 Mar 2024 18:22:57 +0000
ROA not before:           Tue 05 Mar 2024 18:17:57 +0000
ROA not after:            Tue 04 Mar 2025 18:22:57 +0000
asID:                     6471
IP address blocks:        164.77.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/2652C1433114197317FCA49E051F361760D69E0E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/2652C1433114197317FCA49E051F361760D69E0E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2652C1433114197317FCA49E051F361760D69E0E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:43:ff:8b:3d:87:97:8e:45:96:ee:03:5c:f2:4b:79:cd:ce:97:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2652C1433114197317FCA49E051F361760D69E0E
        Validity
            Not Before: Mar  5 18:17:57 2024 GMT
            Not After : Mar  4 18:22:57 2025 GMT
        Subject: CN=7212C824791495E1B5FFAF26FAEA5CF06775D31F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:98:0c:34:4e:40:3d:af:31:fd:a2:84:40:c3:
                    33:91:ce:bf:6c:91:95:ce:b5:c8:ee:6f:0f:fc:5c:
                    98:42:88:43:6e:da:d2:70:5d:8e:3e:47:25:af:24:
                    1b:58:12:ab:f5:8a:36:61:16:e6:bf:38:ef:4e:f5:
                    19:82:e2:3d:f3:f7:2f:ef:e7:78:e4:f4:2f:ef:13:
                    ff:ca:9c:ec:b2:2d:45:35:8f:42:86:a0:56:49:b4:
                    e1:83:41:86:fb:39:91:a1:90:30:08:fd:d1:2e:44:
                    a4:7e:0b:c0:78:d4:b7:03:3c:43:43:36:84:f5:5f:
                    c4:ee:c2:fc:ee:be:bd:df:4a:61:77:20:05:48:6f:
                    33:2e:8f:ee:68:75:1e:4f:72:50:8a:53:a6:8d:6f:
                    ef:b5:55:0a:28:6d:f9:af:47:a6:5c:4c:cb:91:dd:
                    f3:6a:41:4d:e7:73:05:68:ef:e0:d7:48:e3:ff:51:
                    c7:7e:bf:75:14:77:41:c3:c4:04:86:f1:4d:6f:7d:
                    e5:3d:01:b6:f6:90:8a:ed:4c:89:aa:45:8e:3c:c7:
                    7f:e2:da:46:e1:e7:07:2c:66:15:2b:f8:7f:d2:03:
                    63:17:42:c3:57:9f:dc:2d:f6:03:ea:28:c6:e0:02:
                    4f:f5:2e:10:4a:2d:27:0a:da:4a:c4:42:51:cb:6f:
                    4d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:12:C8:24:79:14:95:E1:B5:FF:AF:26:FA:EA:5C:F0:67:75:D3:1F
            X509v3 Authority Key Identifier:
                keyid:26:52:C1:43:31:14:19:73:17:FC:A4:9E:05:1F:36:17:60:D6:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/2652C1433114197317FCA49E051F361760D69E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2652C1433114197317FCA49E051F361760D69E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/3136342e37372e302e302f31372d3234203d3e2036343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.77.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         41:27:66:e2:e0:97:e3:13:11:0f:99:a0:60:25:26:41:fa:ca:
         c7:01:2c:3e:0f:d3:c8:6e:83:8a:3b:fe:cb:bb:87:0d:9b:88:
         2c:0f:d1:3b:5a:31:90:19:a7:98:d7:37:60:52:54:30:69:8f:
         d8:ab:67:2b:56:05:1c:3e:c3:55:71:30:cd:ef:74:e7:86:c2:
         b9:f0:22:08:94:8c:dd:97:dd:95:f9:67:24:7c:27:54:c9:c9:
         7a:5f:2e:92:5a:f0:65:10:7b:9d:3c:0e:3d:b2:f0:35:71:cf:
         04:f0:ab:12:ee:69:f6:83:45:07:7e:28:35:38:6a:6f:fa:fb:
         7c:9b:99:aa:14:e9:f7:50:f3:91:89:82:24:fb:b7:c9:20:3b:
         09:d3:62:7f:d2:2e:ce:8c:14:cd:60:a7:8e:a8:d2:66:3c:e1:
         eb:30:b3:fa:a8:39:92:63:6f:e5:95:9b:89:4f:20:f4:38:47:
         cf:b6:98:b3:f4:5c:f0:3b:97:83:70:a7:df:eb:f7:80:97:8b:
         6b:60:dc:f2:31:f4:8f:55:1f:0f:30:f1:d2:b3:12:5f:e5:9f:
         9d:87:3d:ad:31:41:c0:0f:b5:fe:94:40:c8:8f:e5:45:97:21:
         f6:ab:22:76:f4:da:a7:8f:8a:7a:fc:4e:b8:ce:e3:e1:2e:d3:
         8d:01:48:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:46:00 2024 by rpki-client on console-fra.rpki-client.org