Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3137372e31312e3235342e302f32332d3233203d3e20323732303236.roa
File:                     3137372e31312e3235342e302f32332d3233203d3e20323732303236.roa (raw, json)
Hash identifier:          Z0dhBvoFT/q7aO7HENN40AFZ2ltG/Id+22oXppwTagU=
Subject key identifier:   44:39:62:3A:D2:89:CC:20:4A:B3:C8:66:D1:AD:2D:EF:43:D0:D3:6C
Certificate issuer:       /CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
Certificate serial:       675B8F78089A5407D92E3F8A524FD494E233E5D9
Authority key identifier: 3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3137372e31312e3235342e302f32332d3233203d3e20323732303236.roa
Signing time:             Sun 26 May 2024 03:55:01 +0000
ROA not before:           Sun 26 May 2024 03:50:01 +0000
ROA not after:            Sun 25 May 2025 03:55:01 +0000
asID:                     272026
IP address blocks:        177.11.254.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 23:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:5b:8f:78:08:9a:54:07:d9:2e:3f:8a:52:4f:d4:94:e2:33:e5:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
        Validity
            Not Before: May 26 03:50:01 2024 GMT
            Not After : May 25 03:55:01 2025 GMT
        Subject: CN=4439623AD289CC204AB3C866D1AD2DEF43D0D36C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cd:fa:88:a0:ce:a8:5f:e9:53:59:1c:0a:ff:
                    33:2b:11:90:cf:55:97:ce:f2:bf:29:6e:f2:54:b0:
                    49:64:32:05:a1:7e:95:5f:f6:19:f2:72:1c:48:02:
                    6b:a5:6e:ec:ed:d5:a8:36:e4:be:db:16:a3:9a:84:
                    a4:20:0e:0a:c2:eb:8d:ee:ff:bb:77:d9:f8:7c:0f:
                    50:b5:b3:bb:19:66:f8:04:fc:34:c3:7c:d5:24:87:
                    9e:43:c8:a2:bf:00:ea:37:89:9a:f1:3e:9f:b6:52:
                    50:55:c9:a0:00:45:1b:73:8b:6f:bc:d0:9f:ad:db:
                    1a:7f:91:29:ea:ba:15:b4:ee:a3:76:81:a0:de:0c:
                    db:27:e3:2c:89:c7:0b:1c:02:26:b8:93:2d:7e:32:
                    a3:bd:a4:dd:3e:b5:ce:b0:43:17:50:d4:51:32:33:
                    25:2c:c3:ff:41:4c:05:a8:86:8e:89:c0:47:82:87:
                    37:1c:d1:54:26:a9:c9:c5:69:7b:01:c1:06:70:72:
                    b3:9a:e0:ae:eb:23:58:d4:e9:aa:89:72:27:62:6a:
                    56:48:c2:e4:26:7f:8c:03:c8:f2:ac:08:10:60:4a:
                    b8:89:09:13:5a:05:9d:25:dc:35:66:0d:79:8b:95:
                    93:80:47:72:f9:58:33:b0:44:66:e3:ae:11:89:a9:
                    dd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:39:62:3A:D2:89:CC:20:4A:B3:C8:66:D1:AD:2D:EF:43:D0:D3:6C
            X509v3 Authority Key Identifier:
                keyid:3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3137372e31312e3235342e302f32332d3233203d3e20323732303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:fb:7f:a8:c1:ce:f2:b4:ff:1b:29:8c:7c:5a:e4:55:a5:9c:
         53:81:5f:a7:7d:ba:6d:e0:70:7b:31:1a:80:17:87:ba:af:0e:
         0b:18:85:a7:a0:2d:0e:7f:d2:82:fa:5f:77:30:4a:25:33:70:
         d0:4b:6e:0b:99:d5:9e:a7:d8:d9:52:a1:5b:b7:bc:a5:e5:4c:
         82:54:a3:60:d0:c7:cb:fc:5c:11:c0:56:a9:0e:f3:30:96:f4:
         f4:af:2d:16:a6:61:dc:30:b4:3e:7d:db:a2:28:fe:b1:96:d6:
         f1:37:07:7f:c2:06:2e:04:c4:26:62:66:a0:1c:62:70:59:b6:
         8e:58:56:bb:db:39:fe:57:d9:ed:e9:9f:a0:22:82:c9:2d:18:
         87:3f:ca:64:7a:3f:96:a5:d6:45:35:4a:cb:c9:54:12:b1:22:
         be:7d:c9:39:7a:fc:3e:cf:ba:be:ef:fa:c0:96:c6:43:11:ca:
         91:5e:9a:8f:3c:72:02:db:38:86:a3:ed:96:7e:ab:de:94:86:
         01:56:a7:00:b7:d6:c7:7e:32:4a:05:d5:e2:3a:3d:53:8b:50:
         40:15:e1:a0:a1:d1:b3:0c:db:af:0f:37:82:88:87:bb:d8:4e:
         59:59:e3:95:4c:f7:df:97:6c:0a:65:66:c6:24:6d:ef:c6:cd:
         03:ed:60:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:16 2024 by rpki-client on console-fra.rpki-client.org