Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3132382e302f32302d3234203d3e20323632313636.roa
File:                     3136382e3233342e3132382e302f32302d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          5qphNwEvsNH+5HPOjAUnui2Z6Y4OWUTrl5LB67Eggm4=
Subject key identifier:   7D:84:4B:C5:5A:A8:93:CA:A5:7B:90:A6:0A:A9:CE:FA:0F:BD:65:33
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       293653FC1853E45CF77CC0AD4A8F26BFAF8DB4CB
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3132382e302f32302d3234203d3e20323632313636.roa
Signing time:             Tue 05 Mar 2024 17:49:27 +0000
ROA not before:           Tue 05 Mar 2024 17:44:27 +0000
ROA not after:            Tue 04 Mar 2025 17:49:27 +0000
asID:                     262166
IP address blocks:        168.234.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:36:53:fc:18:53:e4:5c:f7:7c:c0:ad:4a:8f:26:bf:af:8d:b4:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Mar  5 17:44:27 2024 GMT
            Not After : Mar  4 17:49:27 2025 GMT
        Subject: CN=7D844BC55AA893CAA57B90A60AA9CEFA0FBD6533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8e:0b:e5:38:d7:97:7b:bb:49:74:f5:b9:41:
                    1c:8a:bd:3c:68:6b:9a:f3:81:5a:58:69:e4:a7:2e:
                    56:7e:68:26:78:46:33:a8:f9:81:50:9b:90:47:40:
                    c4:cd:50:03:3b:c0:07:c2:80:ff:9b:41:82:cd:3c:
                    02:5f:82:d9:5f:49:a2:21:6e:09:38:bb:4d:24:b6:
                    88:ee:c9:13:51:a9:ea:e3:5a:b1:ec:e6:e9:a6:f6:
                    4d:55:2b:b1:4e:dc:d1:17:b2:4a:d9:4e:1b:c6:81:
                    c7:0c:4d:03:fb:a1:c0:5b:e4:57:05:49:be:b6:bf:
                    45:5e:a6:5a:5c:71:20:f9:8a:60:aa:e1:0d:95:ea:
                    61:1f:ac:1e:4d:8a:7e:70:da:7d:f0:36:c1:bc:79:
                    42:6f:4d:f4:f3:dd:4d:40:a1:86:62:25:16:46:3e:
                    2f:2a:b3:d5:a5:e2:e5:74:c7:50:9d:a9:8c:b8:bf:
                    08:24:58:10:04:16:69:66:3e:16:57:b3:df:75:b1:
                    79:c5:6b:c7:e1:17:02:12:02:a8:3d:5e:f3:f9:c5:
                    77:fb:52:58:e0:45:85:29:f5:ae:73:19:c0:22:ae:
                    b9:d2:aa:fa:4c:4b:f6:74:52:fd:ab:38:04:78:3d:
                    28:dc:43:47:9f:23:73:60:a9:88:4c:47:6f:a4:b7:
                    aa:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:84:4B:C5:5A:A8:93:CA:A5:7B:90:A6:0A:A9:CE:FA:0F:BD:65:33
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3132382e302f32302d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:f6:19:29:26:ec:b0:dc:2d:58:6b:46:a4:26:2a:1c:65:f2:
         4c:26:59:43:7c:5c:c1:d8:f4:44:f1:c2:3b:49:dd:f9:66:f6:
         bf:93:35:10:37:52:a5:25:5a:89:15:c3:6f:a1:11:bf:46:31:
         33:4f:23:3a:cf:b7:7b:0c:67:5a:69:f7:21:a2:3d:cd:57:9d:
         19:8a:7a:3d:4b:57:c4:f7:44:ae:9b:89:44:4f:45:93:79:fa:
         f6:e4:87:c4:51:6e:42:99:34:43:95:11:51:fc:59:34:2d:c1:
         9c:c5:19:21:da:bd:90:7e:2e:37:fe:9f:0b:9f:f7:67:13:0c:
         ab:6c:b9:d2:02:06:29:8f:e3:c5:74:42:dd:e9:dc:b6:d8:13:
         70:6d:27:ce:ce:52:51:4d:ff:49:d2:49:da:24:9e:29:cb:0a:
         3d:2e:12:82:9b:9b:29:69:14:9b:3c:2e:fd:15:e1:dd:f0:6d:
         40:da:79:10:eb:12:8b:93:f3:ff:4f:a6:40:41:92:1e:d8:3f:
         97:ee:34:22:45:49:66:20:ba:5c:f8:db:b3:e7:62:42:a8:16:
         9c:70:7c:67:58:0d:8b:48:f4:d7:10:39:16:e5:4b:bf:b2:3f:
         80:3f:c7:2a:64:0d:f3:9d:88:d1:98:ab:57:6a:87:3c:72:6e:
         1d:0d:84:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org