Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/3137372e39312e3234382e302f32312d3234203d3e20323633323234.roa
File:                     3137372e39312e3234382e302f32312d3234203d3e20323633323234.roa (raw, json)
Hash identifier:          fA22KPiOAWXmXPuAxfOPan1QMUeshSg+iYEb/gPaDPo=
Subject key identifier:   5E:FF:66:BD:9C:0D:71:CB:A4:B5:9B:04:95:9C:43:B1:08:5C:EC:AF
Certificate issuer:       /CN=A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478
Certificate serial:       413D78CFCC59E6FF71974AF0BF29854638FCB861
Authority key identifier: A9:96:A5:FE:83:CD:F4:C0:C2:A3:11:F2:2A:2C:F3:DB:1D:02:C4:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/3137372e39312e3234382e302f32312d3234203d3e20323633323234.roa
Signing time:             Tue 05 Mar 2024 17:45:53 +0000
ROA not before:           Tue 05 Mar 2024 17:40:53 +0000
ROA not after:            Tue 04 Mar 2025 17:45:53 +0000
asID:                     263224
IP address blocks:        177.91.248.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:3d:78:cf:cc:59:e6:ff:71:97:4a:f0:bf:29:85:46:38:fc:b8:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478
        Validity
            Not Before: Mar  5 17:40:53 2024 GMT
            Not After : Mar  4 17:45:53 2025 GMT
        Subject: CN=5EFF66BD9C0D71CBA4B59B04959C43B1085CECAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:81:6a:d3:17:f9:a0:cc:de:e7:66:46:48:45:
                    12:3c:f4:88:f0:ee:22:46:73:8d:fb:a2:49:f1:c6:
                    e4:83:7f:02:3f:d9:2e:e2:8a:de:16:08:54:50:8d:
                    f3:0c:cc:5d:71:a1:14:c3:be:e0:65:5f:82:c3:1c:
                    fc:72:42:c9:cd:1f:3b:9e:09:e1:1e:47:4b:6a:2f:
                    07:c0:2a:5e:8b:be:6d:8e:bb:52:21:d4:f2:03:32:
                    fa:21:2f:ee:7b:bf:7b:be:9e:21:e1:31:a7:db:22:
                    20:eb:8e:ae:6b:60:82:8f:af:67:1e:f9:50:ba:10:
                    5f:fe:92:d7:72:7c:d4:a1:90:6f:a1:a5:b3:64:72:
                    e4:96:65:02:d5:87:19:8c:40:46:81:02:58:8c:06:
                    ff:3b:ee:59:40:19:de:9e:3e:1e:4c:2f:b7:1a:ba:
                    1c:5c:3c:35:85:65:4f:66:f3:ac:53:c0:76:f2:21:
                    55:5b:56:60:cf:2a:b0:a5:1f:a3:fa:83:9d:a2:ae:
                    9c:b5:65:b1:c4:fa:8c:eb:6c:28:10:f0:61:03:21:
                    f4:52:b5:ae:83:4e:37:54:63:c5:bb:6d:ee:9c:2c:
                    c9:23:c1:b8:36:47:fe:e9:d8:fe:15:39:ad:81:4f:
                    7d:b4:ae:f2:19:9c:c2:5c:0b:fa:f8:0b:0b:16:b4:
                    7b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FF:66:BD:9C:0D:71:CB:A4:B5:9B:04:95:9C:43:B1:08:5C:EC:AF
            X509v3 Authority Key Identifier:
                keyid:A9:96:A5:FE:83:CD:F4:C0:C2:A3:11:F2:2A:2C:F3:DB:1D:02:C4:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/3137372e39312e3234382e302f32312d3234203d3e20323633323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         43:0a:50:42:89:39:0b:f0:53:0b:ca:9e:f5:3e:90:9f:09:0e:
         bb:f5:fa:8a:e9:29:29:61:02:84:de:9f:87:8c:49:2d:cf:30:
         49:97:84:b9:fa:84:f0:3b:fb:9b:4c:49:05:8f:2f:59:a4:0d:
         0b:2f:40:15:90:3b:53:a4:63:68:8f:89:5f:48:56:2c:e4:2e:
         3a:32:b7:f0:93:1e:07:16:0f:35:04:6b:8f:a8:3e:35:61:d6:
         f0:79:0a:1d:92:33:05:1c:8c:7a:d5:97:13:e2:a5:7a:d1:f2:
         60:f7:b9:87:14:00:23:fc:37:9a:dd:18:44:ec:03:fa:63:9d:
         2c:e3:8d:15:4e:a1:a4:97:b7:75:4b:35:ef:f6:41:eb:30:f2:
         1c:2e:2d:79:79:72:3c:a8:14:67:dc:95:73:27:6f:bb:a9:bc:
         37:fd:a9:7d:20:9a:9f:6e:45:12:fb:38:35:68:b5:25:ac:64:
         56:d6:ce:e3:d8:cd:56:62:30:8a:2c:a6:9f:26:a4:e0:34:ca:
         41:db:42:6b:1f:88:9b:67:05:91:e3:bb:4c:f2:e0:14:d6:9c:
         6e:93:64:2b:78:26:36:4f:9b:8b:69:b6:af:0f:2b:ad:61:9f:
         80:eb:79:56:d4:b5:f4:f5:f0:0d:4a:3f:90:07:5e:ae:5e:60:
         4b:9a:b7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:20 2024 by rpki-client on console-fra.rpki-client.org