Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37302e302f32342d3234203d3e20323733383332.roa
File:                     36362e3233312e37302e302f32342d3234203d3e20323733383332.roa (raw, json)
Hash identifier:          5AjZwHuXc1OImJMfu7sJEJM2XyeBW59tmW5ZniVMdUg=
Subject key identifier:   DC:F7:73:B6:92:EC:61:74:2A:7F:93:36:7D:47:22:9A:6A:9B:86:0A
Certificate issuer:       /CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Certificate serial:       2655EB6ABA2E154A84A6A577167ED5B426DDCE9A
Authority key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37302e302f32342d3234203d3e20323733383332.roa
Signing time:             Wed 22 May 2024 23:10:00 +0000
ROA not before:           Wed 22 May 2024 23:05:00 +0000
ROA not after:            Wed 21 May 2025 23:10:00 +0000
asID:                     273832
IP address blocks:        66.231.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:55:eb:6a:ba:2e:15:4a:84:a6:a5:77:16:7e:d5:b4:26:dd:ce:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
        Validity
            Not Before: May 22 23:05:00 2024 GMT
            Not After : May 21 23:10:00 2025 GMT
        Subject: CN=DCF773B692EC61742A7F93367D47229A6A9B860A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:45:9a:45:c5:48:d5:bd:de:25:23:b0:de:bf:
                    26:b4:71:68:7f:7a:c6:c5:b2:6f:22:21:4c:07:90:
                    77:28:30:12:92:e2:ea:cd:a0:4d:f1:94:d8:bd:de:
                    e8:ed:68:c5:63:9a:ee:14:b9:45:4a:53:b5:cf:c7:
                    f9:7b:8b:2f:90:68:ff:58:55:63:da:6b:2e:48:64:
                    55:94:a7:07:d6:b2:56:7e:11:16:ca:fd:d6:ec:06:
                    5b:a5:73:3d:5e:19:97:b1:36:e4:f0:19:5f:d3:5b:
                    da:b0:15:8d:ac:a0:6f:39:f5:39:1e:35:9e:58:89:
                    c9:6a:5f:0b:83:d0:77:8c:19:f8:be:72:b3:43:0f:
                    17:fa:4b:61:5b:f6:7e:2b:ef:79:c4:10:5c:e9:0a:
                    03:35:2b:f2:4a:5f:16:b3:a9:62:f0:a6:29:1e:c6:
                    0b:7e:85:ae:69:94:53:ee:dc:4e:4e:0d:a0:2f:21:
                    b0:e6:48:95:e6:98:c6:e9:04:4b:fe:f8:2f:c2:d1:
                    79:04:15:24:6b:6c:cd:8a:1c:0a:93:59:92:d6:91:
                    77:f6:13:23:15:71:24:2f:a0:0c:49:53:40:bf:18:
                    69:1b:7f:1c:6c:d6:c3:0a:53:c3:22:29:a5:6d:5c:
                    22:34:1e:86:20:63:c3:2a:42:4c:96:51:27:a5:30:
                    15:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F7:73:B6:92:EC:61:74:2A:7F:93:36:7D:47:22:9A:6A:9B:86:0A
            X509v3 Authority Key Identifier:
                keyid:C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37302e302f32342d3234203d3e20323733383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:d1:34:cb:35:81:8e:a7:a7:23:34:2d:0e:5d:66:f1:19:7a:
         2c:3d:18:71:fa:51:ff:dd:b3:6e:9a:ed:e9:6c:b8:37:ce:5b:
         57:0f:7c:47:77:9c:28:7a:30:8c:66:a0:e1:e1:91:56:cc:bf:
         4e:7f:62:b2:17:3f:cb:1c:e5:b4:85:4c:df:f3:7e:4f:93:1b:
         6b:9c:fe:bf:ed:f8:40:24:76:be:02:21:55:1f:4d:16:2d:55:
         19:88:8a:89:be:2b:27:1a:22:ca:c0:b5:27:ae:a4:ad:ff:2c:
         5d:9c:a4:45:e9:85:5d:fa:f6:71:fb:f8:80:70:ec:76:1a:72:
         11:f2:1d:6d:cf:7d:54:06:1d:1e:e0:48:5f:3c:68:dc:e9:25:
         aa:a0:dc:64:e9:9a:0c:f4:0b:b0:cf:d0:f0:94:a8:bf:41:1e:
         0e:5c:a4:45:bd:d9:79:32:3f:e6:5d:06:e6:56:e5:60:4d:b2:
         39:68:2d:e4:4a:98:73:cb:8c:08:00:9a:83:a1:e8:b9:c8:0b:
         14:99:3e:7c:43:b6:6a:49:66:81:e0:11:4f:e6:3f:dd:2f:35:
         78:c6:69:ba:e6:e4:b4:b7:f9:cd:84:61:66:ca:4d:31:58:e7:
         d8:df:7c:a8:cb:9a:29:6b:fb:5d:95:09:b0:63:f2:c2:c0:4f:
         59:43:1f:0d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJlXrarouFUqEpqV3Fn7VtCbdzpowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI5NjdGRjMxMDlFMEFBN0VFNUVDMUM2NDAzMDBENUEw
MEZGNDFCMDAeFw0yNDA1MjIyMzA1MDBaFw0yNTA1MjEyMzEwMDBaMDMxMTAvBgNV
BAMTKERDRjc3M0I2OTJFQzYxNzQyQTdGOTMzNjdENDcyMjlBNkE5Qjg2MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4RZpFxUjVvd4lI7Devya0cWh/
esbFsm8iIUwHkHcoMBKS4urNoE3xlNi93ujtaMVjmu4UuUVKU7XPx/l7iy+QaP9Y
VWPaay5IZFWUpwfWslZ+ERbK/dbsBlulcz1eGZexNuTwGV/TW9qwFY2soG859Tke
NZ5YiclqXwuD0HeMGfi+crNDDxf6S2Fb9n4r73nEEFzpCgM1K/JKXxazqWLwpike
xgt+ha5plFPu3E5ODaAvIbDmSJXmmMbpBEv++C/C0XkEFSRrbM2KHAqTWZLWkXf2
EyMVcSQvoAxJU0C/GGkbfxxs1sMKU8MiKaVtXCI0HoYgY8MqQkyWUSelMBXPAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU3PdztpLsYXQqf5M2fUcimmqbhgowHwYDVR0j
BBgwFoAUwpZ/8xCeCqfuXsHGQDANWgD/QbAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQTEwNEQ3Nzc3QjAyOUVEQTc4MkRBQTZBNkY3NDM0RkRC
Nzc3Q0U2OEEwOTQ5Nzk3ODE0NjRFQzU5RkY4QTlBLzAvQzI5NjdGRjMxMDlFMEFB
N0VFNUVDMUM2NDAzMDBENUEwMEZGNDFCMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMjk2N0ZGMzEwOUUwQUE3RUU1
RUMxQzY0MDMwMEQ1QTAwRkY0MUIwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREExMDRENzc3N0IwMjlFREE3ODJEQUE2QTZGNzQzNEZEQjc3N0NFNjhB
MDk0OTc5NzgxNDY0RUM1OUZGOEE5QS8wLzM2MzYyZTMyMzMzMTJlMzczMDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMzM4MzMzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAELnRjAN
BgkqhkiG9w0BAQsFAAOCAQEAntE0yzWBjqenIzQtDl1m8Rl6LD0YcfpR/92zbprt
6Wy4N85bVw98R3ecKHowjGag4eGRVsy/Tn9ishc/yxzltIVM3/N+T5Mba5z+v+34
QCR2vgIhVR9NFi1VGYiKib4rJxoiysC1J66krf8sXZykRemFXfr2cfv4gHDsdhpy
EfIdbc99VAYdHuBIXzxo3OklqqDcZOmaDPQLsM/Q8JSov0EeDlykRb3ZeTI/5l0G
5lblYE2yOWgt5EqYc8uMCACag6HoucgLFJk+fEO2aklmgeART+Y/3S81eMZpuubk
tLf5zYRhZspNMVjn2N98qMuaKWv7XZUJsGPywsBPWUMfDQ==
-----END CERTIFICATE-----
Generated at Tue Jun 25 23:04:24 2024 by rpki-client on console-fra.rpki-client.org