Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3138302e302f32342d3234203d3e20323632313636.roa
File:                     3136382e3233342e3138302e302f32342d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          ZVtWngoXydskEZStqjVbuMjfmsaW8AlXFFNRgUdqBLM=
Subject key identifier:   EA:71:E1:59:CC:87:CC:45:3D:9E:F8:D7:64:74:AD:75:A7:2E:77:39
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       16BD7C317945A2215189EABC829C5B564759FA78
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3138302e302f32342d3234203d3e20323632313636.roa
Signing time:             Tue 05 Mar 2024 17:49:30 +0000
ROA not before:           Tue 05 Mar 2024 17:44:30 +0000
ROA not after:            Tue 04 Mar 2025 17:49:30 +0000
asID:                     262166
IP address blocks:        168.234.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:bd:7c:31:79:45:a2:21:51:89:ea:bc:82:9c:5b:56:47:59:fa:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Mar  5 17:44:30 2024 GMT
            Not After : Mar  4 17:49:30 2025 GMT
        Subject: CN=EA71E159CC87CC453D9EF8D76474AD75A72E7739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:94:67:14:89:ed:88:96:76:f6:f1:99:ac:95:
                    20:0b:ca:b8:be:fd:ef:ca:e3:b7:8f:3a:6e:d6:75:
                    43:c5:de:6a:28:7c:12:8b:d7:96:bf:b0:2d:ec:b6:
                    65:68:3c:46:a0:f3:c4:b7:f5:ba:1e:44:25:a6:19:
                    29:15:78:60:c7:de:54:df:13:43:28:94:a1:8e:ef:
                    65:8b:a9:07:c1:2c:14:cf:a9:a0:20:45:51:81:d8:
                    1e:31:b0:be:87:d1:3a:8e:c7:bc:f2:6f:d3:a2:a9:
                    7a:8e:71:14:33:f2:7e:ad:c0:10:6c:16:3a:8a:e9:
                    b9:63:7c:20:c2:7e:70:fd:ec:4a:93:b8:df:a7:8a:
                    b8:72:b6:7b:53:44:34:ae:09:d8:60:40:2f:7f:87:
                    aa:91:e0:b2:ea:5d:38:e6:16:b6:7a:93:17:7d:29:
                    5a:df:31:f1:b7:4b:b5:f1:b0:63:00:dc:66:10:e4:
                    22:0a:6c:e2:b9:83:ed:31:ff:a1:8f:09:71:8a:00:
                    65:6c:9e:f3:ac:44:b4:b4:e0:1e:60:87:ba:5d:fc:
                    06:ee:f7:b1:5b:57:c8:64:62:2d:3b:8a:63:4c:5a:
                    82:57:8d:8c:23:dd:f0:f0:d7:26:97:bc:87:15:c0:
                    06:8a:0c:b6:44:c5:53:40:8f:d3:43:ff:f8:01:99:
                    1f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:71:E1:59:CC:87:CC:45:3D:9E:F8:D7:64:74:AD:75:A7:2E:77:39
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3138302e302f32342d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:16:1d:82:55:fe:31:2a:1d:7d:7c:bf:f5:83:97:93:72:ff:
         de:d8:3d:b8:18:43:1d:93:79:f4:da:cc:22:90:4f:4f:7c:ce:
         59:65:4a:ee:48:27:e0:8d:57:31:0e:74:fd:d1:75:21:71:03:
         25:90:f0:8a:7b:f8:66:14:aa:ba:01:f2:78:07:ef:c9:87:9b:
         b8:bd:e5:31:1c:e3:25:83:bd:47:73:03:54:9d:8f:4e:86:b7:
         98:81:40:87:9a:37:b4:1c:ef:ba:d0:01:87:30:2d:8e:cc:30:
         b6:32:a4:d2:17:9c:6e:0a:87:af:11:63:a9:68:91:ba:07:1c:
         41:40:5a:81:50:6e:7f:71:50:27:bd:3a:fc:b1:86:c1:bd:b3:
         ba:1a:6e:cb:c0:db:fc:34:a5:b8:b5:81:28:18:23:3e:1e:7b:
         c6:bf:6f:e4:4f:e4:9d:40:b1:dc:32:0f:3a:cf:70:71:e7:f2:
         53:a5:1a:94:af:bf:4d:8d:19:27:55:82:1e:66:f0:32:9f:97:
         11:27:59:82:b3:ec:5d:f2:32:44:13:09:2e:62:6f:8e:af:99:
         6f:a1:0c:9f:fd:de:b3:ef:7a:48:ba:64:fe:a2:d2:98:39:c3:
         5e:fe:20:ae:11:87:98:a2:aa:92:85:c3:01:a3:7e:43:3c:8e:
         ab:e0:43:79
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUFr18MXlFoiFRieq8gpxbVkdZ+ngwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQxNzk3MDQzRjdGNTI5RjEzOTUyQ0VFNjQ2QUU3MzY1
MzkyQkJDMzAeFw0yNDAzMDUxNzQ0MzBaFw0yNTAzMDQxNzQ5MzBaMDMxMTAvBgNV
BAMTKEVBNzFFMTU5Q0M4N0NDNDUzRDlFRjhENzY0NzRBRDc1QTcyRTc3MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSlGcUie2Ilnb28ZmslSALyri+
/e/K47ePOm7WdUPF3moofBKL15a/sC3stmVoPEag88S39boeRCWmGSkVeGDH3lTf
E0MolKGO72WLqQfBLBTPqaAgRVGB2B4xsL6H0TqOx7zyb9OiqXqOcRQz8n6twBBs
FjqK6bljfCDCfnD97EqTuN+nirhytntTRDSuCdhgQC9/h6qR4LLqXTjmFrZ6kxd9
KVrfMfG3S7XxsGMA3GYQ5CIKbOK5g+0x/6GPCXGKAGVsnvOsRLS04B5gh7pd/Abu
97FbV8hkYi07imNMWoJXjYwj3fDw1yaXvIcVwAaKDLZExVNAj9ND//gBmR+tAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU6nHhWcyHzEU9nvjXZHStdacudzkwHwYDVR0j
BBgwFoAUDReXBD9/Up8TlSzuZGrnNlOSu8MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNjM1NDU0M0QyMjQyNzJDRjQ3MjJGRjRENzE4MTk4RUI4
RTJGRjhDQkQ2RDlCN0I5N0NEQTg2MEQ5QzFDRDNCLzAvMEQxNzk3MDQzRjdGNTI5
RjEzOTUyQ0VFNjQ2QUU3MzY1MzkyQkJDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDE3OTcwNDNGN0Y1MjlGMTM5
NTJDRUU2NDZBRTczNjUzOTJCQkMzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzYzNTQ1NDNEMjI0MjcyQ0Y0NzIyRkY0RDcxODE5OEVCOEUyRkY4Q0JE
NkQ5QjdCOTdDREE4NjBEOUMxQ0QzQi8wLzMxMzYzODJlMzIzMzM0MmUzMTM4MzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM2MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACo
6rQwDQYJKoZIhvcNAQELBQADggEBAAsWHYJV/jEqHX18v/WDl5Ny/97YPbgYQx2T
efTazCKQT098zlllSu5IJ+CNVzEOdP3RdSFxAyWQ8Ip7+GYUqroB8ngH78mHm7i9
5TEc4yWDvUdzA1Sdj06Gt5iBQIeaN7Qc77rQAYcwLY7MMLYypNIXnG4Kh68RY6lo
kboHHEFAWoFQbn9xUCe9OvyxhsG9s7oabsvA2/w0pbi1gSgYIz4ee8a/b+RP5J1A
sdwyDzrPcHHn8lOlGpSvv02NGSdVgh5m8DKflxEnWYKz7F3yMkQTCS5ib46vmW+h
DJ/93rPveki6ZP6i0pg5w17+IK4Rh5iiqpKFwwGjfkM8jqvgQ3k=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org