Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3137372e31312e3235342e302f32342d3234203d3e20323732303236.roa
File:                     3137372e31312e3235342e302f32342d3234203d3e20323732303236.roa (raw, json)
Hash identifier:          mZwY2Da0PZZiwg5UBCPkgOG1XBDkiaYJZWTJYTYDDyU=
Subject key identifier:   76:5B:43:12:19:C0:87:99:F6:15:6E:DA:6B:FA:86:ED:A1:C9:E4:7B
Certificate issuer:       /CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
Certificate serial:       70E69DF60F48DEFB0C8FD6FB5B2B45A72DE0D3F2
Authority key identifier: 3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3137372e31312e3235342e302f32342d3234203d3e20323732303236.roa
Signing time:             Sun 26 May 2024 03:55:02 +0000
ROA not before:           Sun 26 May 2024 03:50:02 +0000
ROA not after:            Sun 25 May 2025 03:55:02 +0000
asID:                     272026
IP address blocks:        177.11.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e6:9d:f6:0f:48:de:fb:0c:8f:d6:fb:5b:2b:45:a7:2d:e0:d3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
        Validity
            Not Before: May 26 03:50:02 2024 GMT
            Not After : May 25 03:55:02 2025 GMT
        Subject: CN=765B431219C08799F6156EDA6BFA86EDA1C9E47B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b2:41:aa:b9:38:b5:d7:ca:64:2f:72:c7:96:
                    9a:41:b5:cd:35:c2:a0:1d:25:ba:1f:9c:40:85:ec:
                    a0:fd:73:05:e8:5c:c0:22:2c:1b:cf:e7:e0:f3:78:
                    61:fe:4c:62:a0:2a:b8:04:a3:72:d0:e4:58:11:4b:
                    6e:02:09:5d:2c:bf:9d:d6:fc:1b:e6:63:75:b0:dd:
                    59:4c:ec:7f:97:34:76:25:00:d3:f4:42:5c:10:fc:
                    8e:1e:a5:81:35:ec:2e:ad:3c:9a:6a:a0:af:9f:ab:
                    e3:4d:db:b3:b2:eb:32:df:47:85:10:c6:57:28:ab:
                    42:b4:57:65:ab:9d:63:b8:b7:83:c1:2d:61:c5:fd:
                    db:17:49:3d:fa:b4:75:30:56:07:74:1c:43:31:81:
                    db:8b:f7:e4:ca:97:53:d0:d7:73:51:44:1e:6a:4b:
                    8f:ee:a3:94:d4:83:35:85:15:0d:8b:cd:be:72:ba:
                    39:50:01:f5:29:ef:d0:b1:0f:9f:e4:f6:f3:c3:ba:
                    ed:5a:48:88:5c:84:60:ca:58:3d:e0:32:d2:32:46:
                    49:82:2c:cd:5b:2f:a1:b9:d2:94:ab:18:f2:9e:69:
                    8c:6a:05:0c:f1:e4:0a:77:8e:95:72:51:2e:f0:d3:
                    5a:22:c7:32:03:4e:4e:fe:53:32:27:f9:64:b3:27:
                    4b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5B:43:12:19:C0:87:99:F6:15:6E:DA:6B:FA:86:ED:A1:C9:E4:7B
            X509v3 Authority Key Identifier:
                keyid:3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3137372e31312e3235342e302f32342d3234203d3e20323732303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:36:b2:26:1f:ac:c5:5e:50:69:f2:2a:28:9d:0c:0f:0f:be:
         e1:75:47:b1:9f:5d:d3:61:24:49:e0:e2:8f:7b:aa:b6:ed:7a:
         f5:14:34:88:34:a5:ee:0a:bc:64:9f:6c:53:02:42:87:d1:e0:
         f2:0a:f4:67:34:07:c2:d6:bb:30:c4:eb:c8:d3:ff:ba:42:10:
         51:a1:f3:ad:cd:56:0f:9a:19:40:2f:7d:84:70:c7:1c:33:00:
         f7:a5:25:10:10:da:2f:e8:4a:82:60:fd:92:aa:fe:1e:10:fb:
         c4:f5:5b:fe:2d:e9:6d:3b:da:6c:81:47:2b:cb:82:84:28:49:
         e9:84:2c:b4:c8:1d:be:8a:72:c2:41:9f:4a:d0:fa:63:e5:ae:
         28:58:2e:a8:09:9c:7d:37:e1:9b:03:0c:aa:b8:89:66:43:37:
         0c:03:3d:e7:45:0c:4d:6a:ff:af:07:a8:50:69:ce:a8:a1:fa:
         e7:26:b3:fe:d3:b3:06:34:b9:27:06:a6:0b:f4:81:8b:1a:8f:
         d9:15:c0:b4:bd:81:3f:a6:79:68:c5:de:60:f7:d3:1a:a2:14:
         7e:8e:33:ad:4e:94:18:1f:30:7a:18:6d:54:2d:9e:b0:04:8b:
         8c:fb:09:97:f3:9d:27:62:6f:85:70:6d:6b:2b:78:39:82:6f:
         38:b2:76:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:41 2024 by rpki-client on console-fra.rpki-client.org