Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3136392e302f32342d3234203d3e20323632313636.roa
File:                     3136382e3233342e3136392e302f32342d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          KOe5xfsonCMA1oVpa27EJKuvd5KKam705c6Z0UU2rYk=
Subject key identifier:   A0:96:ED:4C:D8:66:5F:56:A0:47:66:E7:74:DC:7E:00:65:E8:31:A5
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       33BE7C78C1411F0E22FBBCAB60EE16177F018445
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3136392e302f32342d3234203d3e20323632313636.roa
Signing time:             Tue 05 Mar 2024 17:49:19 +0000
ROA not before:           Tue 05 Mar 2024 17:44:19 +0000
ROA not after:            Tue 04 Mar 2025 17:49:19 +0000
asID:                     262166
IP address blocks:        168.234.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:be:7c:78:c1:41:1f:0e:22:fb:bc:ab:60:ee:16:17:7f:01:84:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Mar  5 17:44:19 2024 GMT
            Not After : Mar  4 17:49:19 2025 GMT
        Subject: CN=A096ED4CD8665F56A04766E774DC7E0065E831A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f2:40:86:14:59:de:71:98:20:86:35:46:a8:
                    d2:81:90:83:29:7d:7d:61:48:4a:da:d2:85:1d:fa:
                    5d:a0:34:b5:0e:00:17:6a:11:04:4c:d7:75:40:c5:
                    98:8b:9f:be:d9:8a:e9:33:65:e4:bb:3e:fd:38:3d:
                    c2:51:5c:f4:08:5e:39:00:57:df:db:96:3a:6d:9e:
                    12:dc:ed:98:20:46:96:12:7d:fc:56:fa:02:29:d9:
                    81:4e:d8:f8:78:9e:c0:43:ab:18:4f:cb:c0:04:1b:
                    9e:d9:c6:5c:d0:f6:18:80:0b:3d:29:ea:85:68:b3:
                    f2:4c:7d:81:5e:59:a4:fd:d9:41:47:16:17:cc:c9:
                    35:7c:53:d7:52:ec:ba:67:33:cd:59:a9:3c:74:e2:
                    7c:e9:66:94:b1:fe:26:e5:7e:20:38:ef:0b:54:0c:
                    08:11:a6:50:ea:77:30:46:7c:9a:0d:fd:46:f3:3f:
                    53:50:b0:45:b5:a2:a9:2a:29:e0:05:48:1c:44:8f:
                    68:c3:47:00:77:ba:fa:3d:b2:c3:0b:24:a0:7b:6b:
                    19:4b:bf:e9:50:72:1b:2f:fa:b6:f3:2d:44:3c:62:
                    6f:21:ba:6f:c2:8c:3e:2b:bf:3d:bc:37:7a:b4:f9:
                    77:3a:b8:73:72:d4:d8:29:d1:ac:94:a6:d0:4e:5d:
                    85:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:96:ED:4C:D8:66:5F:56:A0:47:66:E7:74:DC:7E:00:65:E8:31:A5
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3136392e302f32342d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:fb:2c:da:c8:e9:ea:55:46:6a:c8:59:c3:07:fa:1d:1c:1e:
         5a:57:b9:b5:83:64:c3:e4:ea:91:6f:74:25:69:93:bf:cd:2e:
         2f:cb:9f:8d:bd:0c:9c:ee:67:84:a3:62:68:7c:b1:e6:bb:38:
         73:89:ac:c5:86:29:ec:20:02:73:4a:b6:79:a8:4b:38:77:94:
         c8:ca:4f:ff:84:11:f3:89:77:80:cd:46:32:88:60:cd:bd:c9:
         83:cb:e6:a8:b0:f6:a7:f1:ee:ef:5f:63:fd:07:1c:0a:e2:9a:
         70:52:1b:dc:f8:1f:8f:2f:d9:98:62:65:47:fa:4c:f3:af:22:
         94:3d:e7:df:2b:a4:9d:b2:e2:70:88:f5:d2:7b:d9:a7:78:64:
         2b:0a:4e:ed:56:66:f4:75:89:8a:13:b8:8a:3e:9b:a7:dc:1f:
         ce:d8:36:bd:70:21:91:b9:97:27:e0:c1:11:a3:a2:77:6e:3f:
         84:8d:a8:bd:0e:4f:b4:48:c6:cf:5e:3d:c6:84:e9:b5:88:d2:
         09:b6:45:ec:e7:b2:9b:f1:43:f0:81:e2:8d:c8:c3:1e:f1:c4:
         d2:b8:72:fd:70:6a:5b:22:71:75:0e:a1:23:82:df:f4:3f:f2:
         58:55:8c:a3:d5:77:e9:cc:eb:d3:62:e5:fb:92:7c:80:f2:8e:
         59:ba:07:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org