Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3135342e302f32332d3234203d3e20323632313636.roa
File:                     3136382e3233342e3135342e302f32332d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          8yqr1Lx57rJpA5H+JKZUfiTzQHPFHRiXMQZizztHqzg=
Subject key identifier:   CA:9F:57:99:32:C0:17:4E:89:83:1E:3F:AB:85:EF:A9:7D:DA:46:80
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       2E39BD0E33D7A20D30B5079A3423614B46B55D83
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3135342e302f32332d3234203d3e20323632313636.roa
Signing time:             Tue 04 Feb 2025 17:59:39 +0000
ROA not before:           Tue 04 Feb 2025 17:54:39 +0000
ROA not after:            Tue 03 Feb 2026 17:59:39 +0000
asID:                     262166
IP address blocks:        168.234.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:39:bd:0e:33:d7:a2:0d:30:b5:07:9a:34:23:61:4b:46:b5:5d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Feb  4 17:54:39 2025 GMT
            Not After : Feb  3 17:59:39 2026 GMT
        Subject: CN=CA9F579932C0174E89831E3FAB85EFA97DDA4680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:da:1d:a3:31:2e:46:c6:d2:8d:34:fa:ed:d7:
                    13:2e:38:89:0d:08:fa:09:bf:c2:f7:16:6a:6f:e9:
                    f4:bd:c5:63:35:e8:81:40:be:cc:5f:f6:72:89:3a:
                    24:a5:26:a5:12:13:04:23:1c:5a:13:ae:cc:c2:46:
                    db:aa:5a:15:33:54:86:63:cc:81:ee:7e:0f:e7:a1:
                    cb:8c:70:ec:9b:8b:f1:f8:f3:e4:fc:4a:13:15:e1:
                    16:bc:66:7b:5f:00:b8:f9:7b:70:c4:2c:cd:63:65:
                    32:c8:ca:4f:a9:f7:83:2d:2a:3a:ed:b3:52:e5:77:
                    3c:45:2f:8e:13:c1:96:99:39:03:98:92:fa:e1:5a:
                    a3:46:0b:89:7f:34:65:f1:7e:ab:3f:5b:76:cf:58:
                    44:53:8f:ff:26:7d:36:7e:3d:8f:a3:27:99:0c:7b:
                    e8:aa:6b:75:d8:ab:cf:dd:aa:7e:d2:0e:49:08:51:
                    e3:8a:0c:a2:3a:98:86:84:47:d2:dd:6c:2d:d8:0b:
                    b6:ff:43:2e:d1:e5:21:c6:ac:8f:8d:9f:85:1f:8b:
                    36:73:47:78:11:24:9a:67:2f:71:68:f9:f5:73:0d:
                    c2:ae:de:cd:23:8b:16:31:99:76:65:78:42:82:02:
                    01:4a:ff:4c:44:46:e0:cb:74:d8:34:a3:88:53:b8:
                    36:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9F:57:99:32:C0:17:4E:89:83:1E:3F:AB:85:EF:A9:7D:DA:46:80
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3135342e302f32332d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:eb:25:1b:c4:57:5e:2f:3b:f0:7a:1c:5f:03:da:35:c2:d8:
         24:5c:9d:44:fb:4a:91:c3:8f:e2:ca:6e:7a:fa:4d:ce:c6:c1:
         49:be:55:5b:ca:85:ca:fc:7a:9d:b6:04:1d:1a:70:64:03:cf:
         cd:b6:46:c0:10:b1:5c:c1:e2:0e:4d:14:4b:b8:10:aa:17:08:
         a4:4c:bc:07:0a:35:e4:bd:7e:f1:26:78:29:c8:9b:c3:9b:24:
         e1:d0:b3:2b:cd:25:6b:57:3f:fb:f5:68:88:d4:e4:5e:d4:3c:
         e0:39:32:92:a1:ff:8f:9e:0b:b1:18:9a:50:5e:70:46:ae:40:
         e7:ba:f0:74:85:2b:f5:04:e4:f7:bf:14:e8:e6:ce:04:6b:e7:
         88:e4:23:fa:55:3d:70:0d:81:25:f0:56:2f:ec:3e:30:ba:ef:
         13:d6:ac:b8:44:5b:e2:8c:7e:32:f0:d5:cb:62:22:7e:6b:bd:
         e1:dd:48:7c:75:83:36:3d:6d:e9:58:6c:3e:93:2e:56:68:09:
         9d:1b:36:88:dc:2e:25:e2:ad:e6:42:f4:f9:5e:49:ba:51:bb:
         a1:32:ab:41:e1:43:96:44:b3:59:98:1c:c2:d2:5d:0c:80:23:
         d5:8f:86:d5:d8:62:61:84:13:eb:88:54:e2:f9:40:bf:19:7c:
         e6:ff:10:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:22:06 2025 by rpki-client