Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3138302e302f32342d3234203d3e20323632313636.roa
File:                     3136382e3233342e3138302e302f32342d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          +YEWmxUeDxKmTvbvEJ47dKzsiwjJVL8mPwkpq+De960=
Subject key identifier:   6E:5C:7E:35:33:33:F1:F1:8E:FE:DC:1E:62:AA:CE:EC:0E:5F:9E:FE
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       1ED506EA2ABD2E0DFE0226AB87ACE57693A52561
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3138302e302f32342d3234203d3e20323632313636.roa
Signing time:             Tue 04 Feb 2025 17:59:49 +0000
ROA not before:           Tue 04 Feb 2025 17:54:49 +0000
ROA not after:            Tue 03 Feb 2026 17:59:49 +0000
asID:                     262166
IP address blocks:        168.234.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 20:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d5:06:ea:2a:bd:2e:0d:fe:02:26:ab:87:ac:e5:76:93:a5:25:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Feb  4 17:54:49 2025 GMT
            Not After : Feb  3 17:59:49 2026 GMT
        Subject: CN=6E5C7E353333F1F18EFEDC1E62AACEEC0E5F9EFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:49:c9:a0:61:92:b7:6c:21:20:f1:8c:b5:d8:
                    9d:bd:c0:0c:11:93:2a:d2:b4:7c:53:c8:6d:ab:b0:
                    c2:aa:d5:32:ce:59:32:0c:ed:87:0b:96:e9:3a:75:
                    31:0e:39:98:2b:2c:76:79:78:2f:47:d6:22:dc:13:
                    b4:b8:17:79:e0:10:ca:37:25:08:4d:6c:4a:cf:02:
                    98:b5:2e:7d:4d:55:b5:64:6e:1f:dd:27:98:68:d8:
                    0c:11:3a:a0:2a:f1:4b:7b:32:63:89:59:8d:3b:df:
                    b0:09:0a:fe:bf:4f:fe:b6:e8:a5:b5:21:33:eb:fc:
                    bf:58:5f:a5:77:93:6b:16:01:1a:8f:3c:2c:84:ed:
                    86:25:16:02:a4:1f:9b:9e:9b:3b:e0:71:90:a7:f4:
                    a4:61:42:5b:79:2f:c3:8f:c0:4d:51:89:5e:f9:5c:
                    e7:c9:ec:0b:70:27:66:1f:6c:2d:83:a5:57:1d:d8:
                    8f:c0:c8:1a:fd:c1:b3:d4:c7:f8:3f:b0:b5:71:d7:
                    fa:75:5d:e3:87:09:47:47:f3:53:18:79:dd:b5:95:
                    27:81:c2:af:ea:f0:af:9b:60:ac:38:c8:d0:cc:1a:
                    5f:ad:8d:c9:e7:b6:a0:9a:0e:39:fe:72:b3:65:3d:
                    7b:46:f6:d6:e9:1d:28:89:0c:8d:ee:4d:49:75:3a:
                    22:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5C:7E:35:33:33:F1:F1:8E:FE:DC:1E:62:AA:CE:EC:0E:5F:9E:FE
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3138302e302f32342d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:65:bb:76:fe:c9:78:38:22:6e:5e:43:81:4b:82:fb:68:30:
         de:44:ab:7e:91:6c:37:b4:73:18:3b:c4:37:38:a9:93:4f:e2:
         a3:59:db:6c:69:e4:e3:f5:7b:c7:94:17:36:60:c7:34:2e:ad:
         3f:3d:39:9b:d7:6d:97:60:be:19:23:5e:9c:d5:9f:d9:a4:52:
         be:5b:e2:ca:6d:08:20:ff:2f:36:c6:e5:ea:28:3d:73:33:2d:
         d2:0d:74:5a:52:03:a4:77:3e:41:b1:2c:55:ad:35:21:a2:b6:
         ed:80:52:62:b6:3a:0c:4e:53:00:c6:4a:01:30:4f:46:2f:55:
         33:b5:bc:a5:7e:1c:2c:eb:eb:29:59:ad:f8:59:a6:6e:a6:a0:
         26:e0:1b:3a:0e:2a:fe:61:ae:56:eb:14:f2:12:ca:3d:65:aa:
         2a:42:78:6f:4e:69:f8:9a:38:a5:12:98:b0:dd:8a:2b:3d:48:
         e4:9b:cc:8f:6e:e1:cd:36:c5:87:dd:cd:9c:c0:0b:17:c3:8d:
         cb:e2:6e:1d:0a:66:66:ce:6b:da:77:c0:42:ce:ee:db:08:ba:
         51:3d:33:83:c3:28:8a:35:4a:33:c1:f7:c2:41:75:79:2c:a7:
         3f:8f:d7:01:5f:c3:7f:3c:04:57:ab:8c:15:c1:d2:ba:54:c8:
         e8:d1:b2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:55:16 2025 by rpki-client