Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3134342e302f32312d3234203d3e20323632313636.roa
File:                     3136382e3233342e3134342e302f32312d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          H4ul84gBsThgjUpaxkYjZUQ2UduN6h5WH0FNaCZSzSA=
Subject key identifier:   BF:65:B0:C1:8B:46:3E:47:C7:34:3E:59:47:3F:FF:AE:87:F8:84:E3
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       4A24AAFEEBF5F7039E41EE53F92FBDEA5913EE17
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3134342e302f32312d3234203d3e20323632313636.roa
Signing time:             Tue 05 Mar 2024 17:49:20 +0000
ROA not before:           Tue 05 Mar 2024 17:44:20 +0000
ROA not after:            Tue 04 Mar 2025 17:49:20 +0000
asID:                     262166
IP address blocks:        168.234.144.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:24:aa:fe:eb:f5:f7:03:9e:41:ee:53:f9:2f:bd:ea:59:13:ee:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Mar  5 17:44:20 2024 GMT
            Not After : Mar  4 17:49:20 2025 GMT
        Subject: CN=BF65B0C18B463E47C7343E59473FFFAE87F884E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3d:b1:b9:41:97:8b:1b:9a:b8:76:05:79:a8:
                    a6:ab:16:ad:5d:c6:c8:8a:60:cf:be:16:b8:c8:b5:
                    3e:11:94:1e:a4:bf:2c:ae:26:0b:4c:cd:c4:27:9a:
                    09:6e:2d:58:43:d9:fe:97:a2:61:e2:99:a0:ec:43:
                    6d:4f:e5:cf:f5:0c:33:55:48:ee:6c:17:e5:87:2f:
                    ca:a0:99:d5:0e:35:1c:23:df:f0:63:3a:e7:a2:47:
                    b3:75:61:8d:61:98:a3:4c:7b:a0:27:c6:ef:80:95:
                    8f:be:f3:19:e4:b7:fb:97:79:09:45:5e:6b:1d:33:
                    c6:01:ca:9f:f3:eb:55:5a:3b:57:2a:cd:3e:80:27:
                    30:7d:f0:db:3b:80:2e:fb:f3:38:c6:de:66:ad:b0:
                    4c:ac:9f:a0:3f:d5:56:27:bc:89:19:07:55:a9:28:
                    3a:1c:d2:1b:bb:eb:85:e3:7d:18:e5:b2:55:ab:3c:
                    c7:d8:a2:5a:b1:8e:30:8d:f5:3f:60:2f:1f:00:ef:
                    59:f5:3d:e8:75:33:50:10:c6:7c:2d:36:cf:d7:30:
                    77:cf:0e:91:4e:a3:f7:f1:fb:e6:2d:fd:09:bb:4b:
                    ee:f4:00:46:a7:64:1f:db:25:9d:b3:ca:2e:2b:c4:
                    e7:17:8e:2a:57:cd:de:b2:3e:9e:d0:38:01:00:14:
                    4c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:65:B0:C1:8B:46:3E:47:C7:34:3E:59:47:3F:FF:AE:87:F8:84:E3
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3134342e302f32312d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1c:3d:21:a7:50:bc:3c:e0:ec:0f:c9:e0:50:d7:0e:a2:96:49:
         c7:e0:03:b9:f8:29:a6:3e:af:66:36:0c:4f:87:4c:23:ae:09:
         b2:af:92:3c:fa:5b:0b:35:7e:40:02:48:59:d3:af:5c:83:4b:
         65:99:06:ef:c7:76:7d:b3:6d:68:f4:80:75:a3:10:21:7d:e8:
         9b:a7:68:e2:09:2a:0b:63:11:22:1b:fe:f7:4c:63:99:89:e4:
         cd:b0:39:53:6c:1c:a2:8b:ce:30:6c:9a:61:e2:c4:19:bb:a5:
         e8:67:27:3d:45:9e:65:cf:2f:67:93:30:a5:ce:60:c1:97:6f:
         5f:8f:b1:6c:5d:f1:9c:8d:ff:f2:9f:87:77:18:b3:3b:aa:12:
         95:3e:bc:07:02:92:77:9d:69:bb:9b:d0:2b:15:ec:34:ab:fc:
         a9:03:8b:cd:1e:f1:93:62:8f:4d:21:78:12:3d:cf:16:5b:7a:
         e5:3a:bc:1a:a2:a6:7e:ba:d7:c6:ac:bf:6b:19:ad:79:1d:83:
         3c:4c:8d:55:65:9b:56:e5:a7:6b:18:ac:aa:55:59:78:9a:da:
         ef:52:27:17:c9:9b:e8:43:9c:86:21:cb:e1:93:f6:c1:2a:51:
         15:ea:f0:b3:97:99:f7:db:d5:fd:e9:92:c0:58:56:99:6f:22:
         05:02:ad:a8
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUSiSq/uv19wOeQe5T+S+96lkT7hcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQxNzk3MDQzRjdGNTI5RjEzOTUyQ0VFNjQ2QUU3MzY1
MzkyQkJDMzAeFw0yNDAzMDUxNzQ0MjBaFw0yNTAzMDQxNzQ5MjBaMDMxMTAvBgNV
BAMTKEJGNjVCMEMxOEI0NjNFNDdDNzM0M0U1OTQ3M0ZGRkFFODdGODg0RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0PbG5QZeLG5q4dgV5qKarFq1d
xsiKYM++FrjItT4RlB6kvyyuJgtMzcQnmgluLVhD2f6XomHimaDsQ21P5c/1DDNV
SO5sF+WHL8qgmdUONRwj3/BjOueiR7N1YY1hmKNMe6Anxu+AlY++8xnkt/uXeQlF
XmsdM8YByp/z61VaO1cqzT6AJzB98Ns7gC778zjG3matsEysn6A/1VYnvIkZB1Wp
KDoc0hu764XjfRjlslWrPMfYolqxjjCN9T9gLx8A71n1Peh1M1AQxnwtNs/XMHfP
DpFOo/fx++Yt/Qm7S+70AEanZB/bJZ2zyi4rxOcXjipXzd6yPp7QOAEAFEwHAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUv2WwwYtGPkfHND5ZRz//rof4hOMwHwYDVR0j
BBgwFoAUDReXBD9/Up8TlSzuZGrnNlOSu8MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNjM1NDU0M0QyMjQyNzJDRjQ3MjJGRjRENzE4MTk4RUI4
RTJGRjhDQkQ2RDlCN0I5N0NEQTg2MEQ5QzFDRDNCLzAvMEQxNzk3MDQzRjdGNTI5
RjEzOTUyQ0VFNjQ2QUU3MzY1MzkyQkJDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDE3OTcwNDNGN0Y1MjlGMTM5
NTJDRUU2NDZBRTczNjUzOTJCQkMzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzYzNTQ1NDNEMjI0MjcyQ0Y0NzIyRkY0RDcxODE5OEVCOEUyRkY4Q0JE
NkQ5QjdCOTdDREE4NjBEOUMxQ0QzQi8wLzMxMzYzODJlMzIzMzM0MmUzMTM0MzQy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM2MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOo
6pAwDQYJKoZIhvcNAQELBQADggEBABw9IadQvDzg7A/J4FDXDqKWScfgA7n4KaY+
r2Y2DE+HTCOuCbKvkjz6Wws1fkACSFnTr1yDS2WZBu/Hdn2zbWj0gHWjECF96Jun
aOIJKgtjESIb/vdMY5mJ5M2wOVNsHKKLzjBsmmHixBm7pehnJz1FnmXPL2eTMKXO
YMGXb1+PsWxd8ZyN//Kfh3cYszuqEpU+vAcCknedabub0CsV7DSr/KkDi80e8ZNi
j00heBI9zxZbeuU6vBqipn6618asv2sZrXkdgzxMjVVlm1blp2sYrKpVWXia2u9S
JxfJm+hDnIYhy+GT9sEqURXq8LOXmffb1f3pksBYVplvIgUCrag=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org