Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/3137372e37312e39372e302f32342d3234203d3e20323732393031.roa
File:                     3137372e37312e39372e302f32342d3234203d3e20323732393031.roa (raw, json)
Hash identifier:          uvEY40mZkmBnhzJzRjxa5wUZUthccdp4eTYDejhswQM=
Subject key identifier:   F1:87:EE:A3:BC:06:1B:8F:A1:30:97:F1:8D:2F:EE:DB:2E:07:4D:ED
Certificate issuer:       /CN=4521828D1C18DA1589E0C8194C700625665277B2
Certificate serial:       49958A7A430D958BDA53894F803317FD11BFF69A
Authority key identifier: 45:21:82:8D:1C:18:DA:15:89:E0:C8:19:4C:70:06:25:66:52:77:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/3137372e37312e39372e302f32342d3234203d3e20323732393031.roa
Signing time:             Fri 15 Nov 2024 13:30:02 +0000
ROA not before:           Fri 15 Nov 2024 13:25:02 +0000
ROA not after:            Fri 14 Nov 2025 13:30:02 +0000
asID:                     272901
IP address blocks:        177.71.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:95:8a:7a:43:0d:95:8b:da:53:89:4f:80:33:17:fd:11:bf:f6:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4521828D1C18DA1589E0C8194C700625665277B2
        Validity
            Not Before: Nov 15 13:25:02 2024 GMT
            Not After : Nov 14 13:30:02 2025 GMT
        Subject: CN=F187EEA3BC061B8FA13097F18D2FEEDB2E074DED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:07:61:84:fd:ad:6f:4c:46:12:ae:4c:5e:
                    f7:37:4d:18:20:d2:aa:d6:51:0f:0a:8b:65:26:a5:
                    4a:e4:24:31:a7:80:f5:38:2b:c1:bb:a2:91:8e:43:
                    0c:ed:fa:22:55:d6:be:32:d4:91:e7:a4:7b:7c:db:
                    db:40:0d:cb:71:8e:07:69:df:5e:72:f8:a2:9e:22:
                    fc:a4:eb:92:47:0e:b6:8e:1a:c1:df:00:de:83:b5:
                    31:c3:e6:86:dc:4e:ef:11:23:a7:82:a5:3f:a7:2a:
                    3b:98:11:2d:c5:dd:da:2a:5a:96:e9:f7:55:5f:51:
                    cd:c9:1c:17:d2:c1:ae:8f:4e:91:b4:61:33:99:47:
                    d8:d4:ab:e6:6b:cf:ff:cc:41:4e:62:40:a1:14:42:
                    66:94:53:f2:de:94:19:7a:d9:ba:00:6e:0e:47:7d:
                    e6:f7:b9:df:e9:31:93:36:4d:b0:0f:02:8d:10:8d:
                    34:f1:c5:6f:2d:6c:ce:e4:a5:7d:62:96:2c:e5:b9:
                    bb:49:4c:76:51:40:12:29:63:92:93:04:f5:fc:0e:
                    ac:fa:08:4c:fd:66:b8:39:e5:fd:f7:93:27:bb:03:
                    8e:9d:6f:3a:88:94:70:00:ff:90:82:87:15:36:fa:
                    40:6f:6a:46:fe:b3:75:8f:ea:53:4f:66:d8:a5:7f:
                    6d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:87:EE:A3:BC:06:1B:8F:A1:30:97:F1:8D:2F:EE:DB:2E:07:4D:ED
            X509v3 Authority Key Identifier:
                keyid:45:21:82:8D:1C:18:DA:15:89:E0:C8:19:4C:70:06:25:66:52:77:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/3137372e37312e39372e302f32342d3234203d3e20323732393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:0a:7b:93:f7:6a:91:17:3c:89:a0:6c:b2:39:b5:3d:37:b7:
         bf:33:a0:99:dc:ee:39:8b:fe:05:a8:ff:2d:db:49:89:37:11:
         d4:38:75:e9:d1:6a:c9:c5:57:b1:91:b3:8e:0f:7e:00:93:f8:
         ab:d4:89:20:b6:ad:82:5a:36:3e:5d:4b:14:a8:4e:36:30:5d:
         35:91:94:93:99:3d:af:88:a5:86:1e:b1:09:c9:27:6f:46:c6:
         f3:38:ec:19:69:b9:40:91:4c:c1:29:f1:af:db:97:b8:78:95:
         b1:bb:48:7f:e5:ff:0f:71:31:03:41:2f:7d:97:64:e2:a1:cf:
         5f:cb:74:b9:72:60:1a:7a:da:f6:64:50:66:9e:f5:51:ee:3e:
         bd:25:b9:88:53:54:fa:05:b8:0f:ed:81:9a:74:02:79:48:fc:
         10:ed:cb:c0:96:4b:2b:35:99:4f:f4:70:a3:32:40:ee:eb:a1:
         c1:fe:2e:5e:b6:5c:2e:17:58:d1:c2:2b:02:8f:c6:be:98:89:
         e2:4d:dc:94:52:fc:2a:80:cc:92:b3:85:2e:dd:0b:b9:4b:71:
         2d:c9:7f:16:1f:d2:59:d8:a2:56:32:d8:59:27:91:c9:d6:97:
         20:92:76:d8:48:3f:ec:d6:64:c1:22:c0:08:dc:47:2b:71:dc:
         21:6b:7a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:49 2024 by rpki-client on console-ams.rpki-client.org