Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3137372e31312e3235342e302f32332d3234203d3e20323732303236.roa
File:                     3137372e31312e3235342e302f32332d3234203d3e20323732303236.roa (raw, json)
Hash identifier:          so3rSsLGncyBljpG54ILYsXU7bv4ZP79dNdCIgf/Qas=
Subject key identifier:   8D:A0:13:77:43:11:30:D1:06:5E:32:52:C7:54:FE:1A:36:D8:E2:71
Certificate issuer:       /CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
Certificate serial:       102F814335A7B45BF0960EB3610A38FC2F58CB21
Authority key identifier: 3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3137372e31312e3235342e302f32332d3234203d3e20323732303236.roa
Signing time:             Tue 05 Mar 2024 18:20:02 +0000
ROA not before:           Tue 05 Mar 2024 18:15:02 +0000
ROA not after:            Tue 04 Mar 2025 18:20:02 +0000
asID:                     272026
IP address blocks:        177.11.254.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:2f:81:43:35:a7:b4:5b:f0:96:0e:b3:61:0a:38:fc:2f:58:cb:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
        Validity
            Not Before: Mar  5 18:15:02 2024 GMT
            Not After : Mar  4 18:20:02 2025 GMT
        Subject: CN=8DA01377431130D1065E3252C754FE1A36D8E271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b1:81:d1:75:ea:0e:7e:51:26:df:a0:ff:55:
                    ae:19:1b:fa:3c:c8:2d:32:bc:e3:2c:49:eb:e4:99:
                    e6:69:6c:69:80:6d:d1:82:da:27:f2:03:05:87:4b:
                    99:c9:c4:d8:2e:5a:75:e8:c1:89:a1:04:1d:46:a3:
                    55:b3:a1:bb:64:45:62:1a:0f:ef:ef:96:21:cd:e4:
                    3c:aa:7a:55:86:4e:f8:cc:59:83:49:e9:c8:79:c0:
                    b1:0c:f8:0c:f6:5e:fa:ab:7a:d6:2e:16:59:b1:4f:
                    60:68:da:25:06:2f:da:f6:8e:f8:b2:e5:ec:b1:2d:
                    99:aa:ea:55:90:92:0d:0d:c0:3a:76:9e:4a:3f:4a:
                    fc:22:70:d5:b4:25:6b:df:30:32:3d:66:3b:a0:9e:
                    da:5b:c9:83:a1:63:50:20:29:22:c9:98:60:7d:e3:
                    f2:91:93:4f:91:57:fa:9d:33:4c:a7:4a:c9:9b:8d:
                    83:4d:d1:29:f7:2e:a7:31:16:2d:5d:fc:40:3d:29:
                    00:a3:37:d7:c3:50:c5:5e:47:c7:3d:73:7d:09:99:
                    0a:33:e5:00:df:e1:96:46:4b:b1:6e:67:b6:ec:e8:
                    82:62:7a:0f:fd:4d:ce:eb:51:17:1a:61:3c:fd:0a:
                    cc:7e:a9:4b:bb:85:d6:06:e5:5a:0d:5e:75:d7:d8:
                    b6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A0:13:77:43:11:30:D1:06:5E:32:52:C7:54:FE:1A:36:D8:E2:71
            X509v3 Authority Key Identifier:
                keyid:3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3137372e31312e3235342e302f32332d3234203d3e20323732303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:ec:17:2e:ec:f1:1b:56:5d:71:78:02:de:19:c5:aa:80:5c:
         24:8e:73:ef:cb:8b:91:61:59:75:21:f4:2b:c1:a2:06:11:9c:
         9e:26:7c:cb:35:83:c1:8b:6d:1d:31:6d:63:45:53:c7:30:01:
         b7:eb:c3:58:a6:ad:44:53:32:4c:dc:f0:6c:1a:41:da:d8:41:
         01:4c:29:a9:56:8e:15:07:1a:81:68:9c:ed:cd:8a:85:fe:cd:
         4b:23:79:a7:a8:0f:ca:68:89:b7:00:64:77:58:b5:a8:9f:0b:
         26:89:73:a5:91:a2:37:ae:b6:0d:05:51:44:c5:f9:00:50:09:
         a6:29:54:f2:80:e8:17:0d:e8:c2:28:29:96:8c:83:38:56:da:
         56:be:aa:e4:01:c2:43:82:66:ba:5a:db:a1:9f:47:0a:b5:09:
         09:d5:2c:b0:42:b9:fc:b3:c5:a5:d3:a0:98:c1:60:7d:5d:a3:
         6f:4b:4d:a6:ff:00:71:33:82:bc:58:33:69:79:a4:8f:6e:38:
         b1:c2:f5:94:03:e0:10:4d:fe:88:79:6a:4e:72:cb:c9:91:fc:
         2d:10:56:a9:bf:ac:ae:ce:75:54:7f:0c:04:b3:ad:42:e1:8c:
         f5:53:33:76:00:49:2b:95:b1:d5:2c:61:6f:20:9e:c6:ac:a0:
         9d:17:fe:1f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUEC+BQzWntFvwlg6zYQo4/C9YyyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0MzQjdCNDY5Q0FDNDg1Qzc5NjQwNDMwRjY1RkI3RTU0
Rjk5QTg5MDAeFw0yNDAzMDUxODE1MDJaFw0yNTAzMDQxODIwMDJaMDMxMTAvBgNV
BAMTKDhEQTAxMzc3NDMxMTMwRDEwNjVFMzI1MkM3NTRGRTFBMzZEOEUyNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCksYHRdeoOflEm36D/Va4ZG/o8
yC0yvOMsSevkmeZpbGmAbdGC2ifyAwWHS5nJxNguWnXowYmhBB1Go1WzobtkRWIa
D+/vliHN5DyqelWGTvjMWYNJ6ch5wLEM+Az2XvqretYuFlmxT2Bo2iUGL9r2jviy
5eyxLZmq6lWQkg0NwDp2nko/SvwicNW0JWvfMDI9ZjugntpbyYOhY1AgKSLJmGB9
4/KRk0+RV/qdM0ynSsmbjYNN0Sn3LqcxFi1d/EA9KQCjN9fDUMVeR8c9c30JmQoz
5QDf4ZZGS7FuZ7bs6IJieg/9Tc7rURcaYTz9Csx+qUu7hdYG5VoNXnXX2LYnAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUjaATd0MRMNEGXjJSx1T+GjbY4nEwHwYDVR0j
BBgwFoAUPDt7RpysSFx5ZAQw9l+35U+ZqJAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQjUwOTExMTVDMURBMDMxQjc5MkVBREZGNTQ0OThBQTNB
Q0E1NjZFQUZDNzdGNjUwRUVCOUJGOEM2NzcwNzI4LzAvM0MzQjdCNDY5Q0FDNDg1
Qzc5NjQwNDMwRjY1RkI3RTU0Rjk5QTg5MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQzNCN0I0NjlDQUM0ODVDNzk2
NDA0MzBGNjVGQjdFNTRGOTlBODkwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUI1MDkxMTE1QzFEQTAzMUI3OTJFQURGRjU0NDk4QUEzQUNBNTY2RUFG
Qzc3RjY1MEVFQjlCRjhDNjc3MDcyOC8wLzMxMzczNzJlMzEzMTJlMzIzNTM0MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNzMyMzAzMjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsQv+
MA0GCSqGSIb3DQEBCwUAA4IBAQBj7Bcu7PEbVl1xeALeGcWqgFwkjnPvy4uRYVl1
IfQrwaIGEZyeJnzLNYPBi20dMW1jRVPHMAG368NYpq1EUzJM3PBsGkHa2EEBTCmp
Vo4VBxqBaJztzYqF/s1LI3mnqA/KaIm3AGR3WLWonwsmiXOlkaI3rrYNBVFExfkA
UAmmKVTygOgXDejCKCmWjIM4VtpWvqrkAcJDgma6Wtuhn0cKtQkJ1SywQrn8s8Wl
06CYwWB9XaNvS02m/wBxM4K8WDNpeaSPbjixwvWUA+AQTf6IeWpOcsvJkfwtEFap
v6yuznVUfwwEs61C4Yz1UzN2AEkrlbHVLGFvIJ7GrKCdF/4f
-----END CERTIFICATE-----
Generated at Tue Apr 30 19:14:24 2024 by rpki-client on console-ams.rpki-client.org