Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3130342e302f32332d3234203d3e20323632313636.roa
File:                     3136382e3233342e3130342e302f32332d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          83Bu06h9divXQn4Qg56N5T9YzCO4YEzW18uywfG7/wI=
Subject key identifier:   4F:D0:BD:DE:2F:9D:90:8B:F6:00:29:94:1C:4D:D5:5F:B5:04:E8:D0
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       632BDC3898A46D6D7D44EC07754E33693A896DEA
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3130342e302f32332d3234203d3e20323632313636.roa
Signing time:             Tue 05 Mar 2024 17:49:26 +0000
ROA not before:           Tue 05 Mar 2024 17:44:26 +0000
ROA not after:            Tue 04 Mar 2025 17:49:26 +0000
asID:                     262166
IP address blocks:        168.234.104.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2b:dc:38:98:a4:6d:6d:7d:44:ec:07:75:4e:33:69:3a:89:6d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Mar  5 17:44:26 2024 GMT
            Not After : Mar  4 17:49:26 2025 GMT
        Subject: CN=4FD0BDDE2F9D908BF60029941C4DD55FB504E8D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1c:38:97:55:51:db:b9:a3:f8:99:d1:87:81:
                    96:70:9a:16:e8:dc:62:e5:64:e0:33:72:5b:aa:31:
                    d0:5c:10:53:1d:55:ec:0e:8c:c0:22:b4:c0:8b:18:
                    9c:37:7f:e3:3d:25:af:91:09:7d:b1:2e:d9:46:87:
                    65:d2:3a:06:f1:6d:f2:75:0a:59:1b:5a:7d:ec:30:
                    8a:94:86:5e:60:e8:32:0c:60:73:93:ea:4d:a9:5e:
                    24:f8:30:ce:73:94:b0:7f:9f:95:85:1c:89:f1:8e:
                    c9:5d:3f:11:1c:b4:1c:37:44:49:ef:dc:35:1d:98:
                    51:69:57:56:ec:77:57:e5:bd:61:79:41:a7:7d:35:
                    e3:0b:58:3b:f1:3b:ce:1b:66:23:0a:be:1d:18:c4:
                    24:2c:0b:70:5e:62:d1:90:1e:53:10:54:dd:f0:fa:
                    22:7a:1a:34:e5:d8:87:30:6f:75:b5:3f:d8:2e:89:
                    fd:83:a7:ad:3f:a0:7a:93:4b:4c:53:e4:7c:16:e8:
                    34:db:cd:9e:3c:4f:32:45:8b:7f:9a:81:e7:4f:ee:
                    77:ba:0f:b4:f2:b1:19:35:af:5b:57:cb:02:e8:d8:
                    9b:35:7c:fe:bf:51:10:90:be:ae:f2:75:30:bc:34:
                    be:2f:a4:db:25:ff:74:02:e2:6b:00:02:af:04:69:
                    bb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D0:BD:DE:2F:9D:90:8B:F6:00:29:94:1C:4D:D5:5F:B5:04:E8:D0
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3130342e302f32332d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:5f:5f:87:10:23:66:4d:5c:cc:6c:70:12:fc:58:60:4b:51:
         be:18:be:27:86:f8:a9:a0:fd:86:e6:41:3a:6f:55:b1:8a:34:
         76:b7:57:74:10:06:bf:c9:95:80:67:8b:25:cb:e6:0d:10:28:
         40:4e:5b:8a:cb:46:3e:14:85:55:4c:7b:be:d9:47:27:36:ea:
         fd:f7:e8:f7:17:38:0c:54:00:a0:5e:a1:ab:68:b8:11:91:e1:
         07:ab:c9:86:0f:f7:de:14:04:36:31:05:01:90:65:76:3b:5a:
         fb:9e:8c:9c:9d:1e:bd:ae:74:d3:1b:ca:a9:e4:3a:d5:f7:12:
         a8:42:c6:24:0b:cd:af:b4:f2:c1:8f:24:55:da:62:9e:e5:64:
         94:07:90:5e:00:40:fe:98:9c:c5:06:ef:37:5c:f0:fc:6f:49:
         28:64:9d:d5:b7:73:eb:43:c6:45:f5:40:84:23:c3:8d:1a:48:
         ba:a6:7b:0f:3c:36:2f:25:c3:66:ed:fe:6d:b2:24:53:7d:af:
         f8:bb:55:30:d3:30:0f:21:2f:9b:99:02:96:0b:64:23:59:e9:
         0e:cf:f0:40:65:19:7e:85:07:dd:41:9d:32:06:73:14:37:93:
         b7:86:91:71:10:e2:1c:63:40:fb:55:82:19:85:b0:42:39:02:
         fe:46:35:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 13:02:56 2024 by rpki-client on console-ams.rpki-client.org