Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3135362e302f32342d3234203d3e20323632313636.roa
File:                     3136382e3233342e3135362e302f32342d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          hdVqccw6zN26lTN/SStXN8bHwAjRyJdspDPACxbOLhQ=
Subject key identifier:   F3:92:3D:60:2E:F3:61:93:E2:83:FE:17:FE:DF:F1:50:70:20:D5:B8
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       741C408F7A07CD804AD8F8D4D40C67AD254C31E5
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3135362e302f32342d3234203d3e20323632313636.roa
Signing time:             Tue 05 Mar 2024 17:49:18 +0000
ROA not before:           Tue 05 Mar 2024 17:44:18 +0000
ROA not after:            Tue 04 Mar 2025 17:49:18 +0000
asID:                     262166
IP address blocks:        168.234.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:1c:40:8f:7a:07:cd:80:4a:d8:f8:d4:d4:0c:67:ad:25:4c:31:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Mar  5 17:44:18 2024 GMT
            Not After : Mar  4 17:49:18 2025 GMT
        Subject: CN=F3923D602EF36193E283FE17FEDFF1507020D5B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:03:fd:fa:01:69:5b:e5:2e:63:c5:4f:dd:9a:
                    f2:d0:27:96:96:76:14:fd:84:48:6c:86:bb:c9:f3:
                    6c:4d:9e:55:02:82:af:e2:46:c4:c2:2d:af:21:34:
                    4a:f5:cb:46:e9:a6:70:8b:5a:77:88:72:05:ad:02:
                    70:d5:64:43:6e:33:5f:79:b1:b6:a6:b4:e8:b1:6c:
                    58:6d:5b:0e:5a:5b:7e:9c:92:9c:ad:04:e4:00:dd:
                    98:2f:94:63:a3:8a:95:48:5f:c0:86:c3:bb:4d:c9:
                    46:e0:1b:79:04:f1:e5:83:fe:31:28:38:53:e4:2b:
                    66:cd:9e:6f:e4:00:7e:0a:59:36:66:f6:99:ce:e1:
                    81:f8:48:7d:fd:f9:0d:90:a1:f7:55:e1:f5:62:01:
                    3e:20:34:6e:6b:7e:33:01:83:96:5d:6d:aa:5e:56:
                    54:6e:04:04:00:1d:38:a3:9f:ac:ee:a9:0c:0c:3f:
                    6d:d5:56:27:43:74:4a:11:59:09:2c:13:ae:d9:a1:
                    57:52:a3:a4:02:38:bb:22:7a:8e:34:8e:f6:b0:d3:
                    d8:97:6c:78:11:13:42:d9:1c:8f:75:2d:57:18:0c:
                    3f:0e:cb:48:66:68:5f:66:fd:ac:38:fa:e5:63:93:
                    47:7a:d0:49:89:4c:65:84:0e:c9:85:7e:95:70:1e:
                    b1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:92:3D:60:2E:F3:61:93:E2:83:FE:17:FE:DF:F1:50:70:20:D5:B8
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3135362e302f32342d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:fd:2a:be:5a:4a:f7:19:b8:36:d2:13:10:74:79:30:18:4d:
         48:18:25:b8:78:99:a1:9a:6d:bc:ec:18:82:c8:e1:9b:ba:bf:
         0d:e1:fc:6b:2c:38:b8:2e:1a:9f:ab:a9:3b:be:39:7c:e8:37:
         aa:04:a0:69:ba:3f:82:c4:17:ac:bc:e7:53:1a:5c:e6:11:d9:
         3c:d7:47:a8:78:cf:7c:17:12:ce:73:12:96:4e:33:2f:58:d5:
         ab:b8:80:83:a6:fc:10:45:08:10:d6:09:fe:ef:80:bb:92:5a:
         65:56:b4:d0:54:db:94:11:ca:52:9d:4c:f2:31:59:c2:43:0b:
         61:88:55:ef:5e:d6:3f:77:e9:cf:81:9e:29:9c:85:a8:58:0e:
         86:f9:98:83:ac:30:d9:20:1a:57:78:c8:29:bf:10:3c:08:cd:
         9f:ea:52:e0:1f:50:63:80:c5:f5:22:bd:64:06:d1:d3:97:9d:
         06:4b:ef:90:9b:7f:ee:8d:8c:5e:f6:76:64:a7:fe:02:d0:26:
         bf:4f:dd:e3:70:23:dc:84:10:cc:42:ab:7d:2f:e3:73:3d:2c:
         88:ca:01:53:b8:ba:e6:12:a4:69:f5:bc:90:67:ad:39:9d:98:
         6b:69:d6:ab:b0:23:44:4d:28:d1:fd:86:9a:7f:8e:84:b9:51:
         c5:63:32:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org