Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3132382e302f32302d3234203d3e20323632313636.roa
File:                     3136382e3233342e3132382e302f32302d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          6ZbsmLBYSPi+7wALFqnnJKJmyfzeWJyOoAneHilQU+g=
Subject key identifier:   3E:FB:56:C5:4B:28:F2:F5:F4:98:21:4C:53:2E:D8:06:E8:B1:A7:76
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       24B7F723AAF9FEE131D5C56E865078497C1BA88F
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3132382e302f32302d3234203d3e20323632313636.roa
Signing time:             Tue 04 Feb 2025 17:59:51 +0000
ROA not before:           Tue 04 Feb 2025 17:54:51 +0000
ROA not after:            Tue 03 Feb 2026 17:59:51 +0000
asID:                     262166
IP address blocks:        168.234.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b7:f7:23:aa:f9:fe:e1:31:d5:c5:6e:86:50:78:49:7c:1b:a8:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Feb  4 17:54:51 2025 GMT
            Not After : Feb  3 17:59:51 2026 GMT
        Subject: CN=3EFB56C54B28F2F5F498214C532ED806E8B1A776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:f2:23:5d:a2:ec:08:b4:e7:12:cd:b7:13:
                    71:df:46:bf:96:59:cf:66:a8:c6:de:d8:d9:02:71:
                    3f:0c:b0:12:6e:0a:63:c9:28:e5:e3:b8:70:4b:48:
                    dd:ed:12:85:fd:4e:9a:d5:8a:48:8a:24:c5:2f:b9:
                    ff:bb:60:4b:07:03:ea:16:43:a7:b7:28:6a:d3:e8:
                    82:f4:70:47:50:52:e1:0e:d6:e8:eb:53:8a:8d:04:
                    36:18:6a:ad:02:78:b4:7f:fe:5f:35:82:9a:9f:b9:
                    58:1c:1b:62:af:99:12:68:d1:f0:2d:70:ce:de:60:
                    03:28:a5:db:d4:76:97:66:ba:9c:df:16:5a:84:b0:
                    b2:7a:dc:6d:c5:40:a9:a1:f2:8f:d7:a1:0d:b9:40:
                    5b:13:2a:ad:4c:4a:4c:9c:ac:d7:09:ab:ed:94:db:
                    04:72:eb:40:d4:33:17:a4:34:f7:c5:24:0f:ee:fe:
                    41:e1:f3:11:6f:48:29:16:d4:36:c2:61:40:cf:1e:
                    b2:01:db:f5:f7:3e:66:92:23:cc:3a:1b:b1:b3:a3:
                    80:0d:33:f4:4d:bf:bb:95:e2:a3:f8:f2:98:87:e8:
                    dd:54:49:57:b4:24:45:a7:bd:0f:0a:39:13:f7:fb:
                    61:70:06:db:d4:d9:6b:db:65:16:6e:2c:b6:83:f9:
                    38:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FB:56:C5:4B:28:F2:F5:F4:98:21:4C:53:2E:D8:06:E8:B1:A7:76
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3132382e302f32302d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:2b:48:f6:39:42:25:67:30:6e:4e:62:31:b2:1f:9f:92:95:
         a6:8c:55:ff:b1:e5:d5:a8:90:b2:87:e4:00:8f:ad:d9:8b:d6:
         5d:7d:a0:1f:b1:1a:80:73:0b:e4:df:af:6c:2d:a1:ee:a0:b8:
         0c:24:3e:58:11:f8:a4:a5:0a:78:ca:5a:f2:22:ab:72:70:09:
         ce:9f:8b:d7:8c:13:cc:95:b8:2f:1d:cf:f5:0a:15:85:f4:dc:
         a7:38:c1:03:8c:e8:d0:0c:42:77:e1:7e:73:2b:b7:cc:1d:ad:
         a3:5e:38:6e:02:de:d1:20:d1:29:45:cb:6d:cd:ee:21:43:82:
         07:60:16:a3:68:f1:84:9a:fd:4e:c7:ca:fa:c9:03:24:3e:37:
         c6:09:36:59:a1:e5:1f:76:0e:f3:1f:9f:ee:3f:bd:35:dd:d9:
         8a:ed:13:d4:03:3c:81:9f:1b:4d:16:2b:a7:8a:26:5d:da:b6:
         d7:33:ae:e3:50:73:48:02:1d:28:ff:0f:ff:e6:5f:02:a8:07:
         80:39:e7:af:93:4c:15:06:e7:26:14:53:74:38:1f:86:9b:ba:
         78:46:21:d8:b0:20:80:a7:d8:24:94:37:86:d0:48:53:a2:f1:
         96:bc:43:ca:37:05:0e:16:e5:c9:72:15:4d:12:36:d9:1e:e8:
         84:36:a3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:18:58 2025 by rpki-client