Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3137372e31312e3235352e302f32342d3234203d3e20323732303236.roa
File:                     3137372e31312e3235352e302f32342d3234203d3e20323732303236.roa (raw, json)
Hash identifier:          62+cvRNxW1qANxUXNhN4gdqPp2nJpJCix+wDoRv4OHg=
Subject key identifier:   A3:E7:3E:8A:F8:8B:E2:45:31:83:EA:86:C7:C4:98:55:1A:0C:AD:5B
Certificate issuer:       /CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
Certificate serial:       04212DF56F8FAA804B305065B37BDF48A1EA37F1
Authority key identifier: 3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3137372e31312e3235352e302f32342d3234203d3e20323732303236.roa
Signing time:             Sun 26 May 2024 03:55:00 +0000
ROA not before:           Sun 26 May 2024 03:50:00 +0000
ROA not after:            Sun 25 May 2025 03:55:00 +0000
asID:                     272026
IP address blocks:        177.11.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:21:2d:f5:6f:8f:aa:80:4b:30:50:65:b3:7b:df:48:a1:ea:37:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
        Validity
            Not Before: May 26 03:50:00 2024 GMT
            Not After : May 25 03:55:00 2025 GMT
        Subject: CN=A3E73E8AF88BE2453183EA86C7C498551A0CAD5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7d:4c:02:2b:1d:53:7a:8f:4f:ef:6d:1f:2e:
                    e8:36:12:c0:8b:5c:4f:79:b8:81:c0:54:1a:a4:19:
                    35:2a:83:65:38:07:1c:42:7c:7a:6e:b2:df:e1:21:
                    ad:ba:ae:f6:a0:fe:a3:1c:e9:de:9b:fb:91:fa:27:
                    da:fa:3c:12:d8:b4:97:2a:58:80:1c:28:06:64:34:
                    a2:28:71:40:b3:ea:49:1f:83:08:6e:ae:21:b2:ef:
                    a1:17:6a:00:5b:8a:b8:45:d3:b6:87:a3:5e:9f:6f:
                    95:ee:34:5e:b2:69:80:1e:79:dc:1d:4e:7e:16:b4:
                    22:15:fe:9d:84:df:bd:e8:58:da:4e:17:3c:67:79:
                    46:8f:3b:8e:03:b1:b1:e4:e0:f4:5b:47:cc:c1:51:
                    0a:4f:dc:54:d9:86:23:c1:7e:d0:6e:d8:98:12:98:
                    0a:6a:fa:5f:ad:a0:e1:a1:eb:49:a2:e7:a4:e6:32:
                    44:ed:6d:11:03:29:0b:b0:71:1f:02:a0:58:35:8a:
                    71:69:07:41:56:b5:56:81:ad:84:5b:ad:3f:24:cf:
                    21:b6:00:03:2e:83:c6:56:58:bb:9c:57:4c:5f:1b:
                    6f:41:7e:95:68:59:7c:b5:5f:33:f8:4a:a9:90:8c:
                    31:33:23:c2:6e:e0:8f:98:26:27:e7:2a:ad:b3:46:
                    11:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E7:3E:8A:F8:8B:E2:45:31:83:EA:86:C7:C4:98:55:1A:0C:AD:5B
            X509v3 Authority Key Identifier:
                keyid:3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3137372e31312e3235352e302f32342d3234203d3e20323732303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:79:cb:5d:a5:8f:a7:e9:28:1b:3e:de:eb:5e:b1:b1:80:81:
         c6:2d:80:6d:64:e5:11:f9:c9:28:0c:85:3f:f7:28:7d:5f:89:
         a2:d9:18:7b:da:34:88:58:5a:76:51:f3:d0:ad:6c:13:1f:82:
         0a:63:9f:ac:20:62:0b:36:17:ae:c2:00:8a:7f:21:f0:6a:2b:
         9c:e8:78:d6:59:34:10:a3:29:4f:9d:c0:5b:c1:22:3b:0c:b4:
         16:34:87:9a:9c:12:c0:46:91:b2:9c:c8:f0:c4:1c:7b:ab:e6:
         6e:ed:04:9a:3d:7d:4e:18:d5:e9:55:4b:f7:de:33:47:44:5f:
         a7:01:c3:19:87:7f:25:2d:96:b5:be:52:89:66:1d:f2:22:6f:
         32:23:a8:d5:a7:37:c6:40:01:c3:3f:54:2f:fd:be:17:52:4d:
         75:d4:32:b5:38:e0:98:79:88:e7:6a:bf:8b:66:b5:7c:f7:d4:
         69:ec:44:5d:52:27:5c:78:7c:80:2f:c5:95:21:1a:df:fb:ad:
         bf:8f:b9:d3:33:1a:58:31:35:f6:df:f1:41:09:23:8b:3b:a7:
         49:3f:48:9a:03:49:01:b2:3c:19:3b:bb:4c:0f:a1:9a:7c:58:
         b7:7c:15:95:58:27:e2:cd:c7:8f:da:be:91:2f:a1:f2:f2:12:
         2b:0a:51:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:41 2024 by rpki-client on console-fra.rpki-client.org