Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e31392e302f32342d3234203d3e20323632313636.roa
File:                     3136382e3233342e31392e302f32342d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          LjfY8wT+I8zQje+vq2VtyQzCH8ojCGsBhRLDG/vbpK8=
Subject key identifier:   B6:18:63:12:DF:36:0F:4E:46:F4:03:79:73:41:2A:CB:C1:73:37:2E
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       73446DDA40B31DC72752EF57DD7A2EDFFBC3BB2A
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e31392e302f32342d3234203d3e20323632313636.roa
Signing time:             Tue 05 Mar 2024 17:49:24 +0000
ROA not before:           Tue 05 Mar 2024 17:44:24 +0000
ROA not after:            Tue 04 Mar 2025 17:49:24 +0000
asID:                     262166
IP address blocks:        168.234.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:44:6d:da:40:b3:1d:c7:27:52:ef:57:dd:7a:2e:df:fb:c3:bb:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Mar  5 17:44:24 2024 GMT
            Not After : Mar  4 17:49:24 2025 GMT
        Subject: CN=B6186312DF360F4E46F4037973412ACBC173372E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:af:63:52:c3:33:2c:5f:01:67:97:2a:8f:23:
                    c0:49:3c:95:6b:40:ef:e5:fe:11:b4:81:64:ea:43:
                    48:fd:9a:67:e4:c8:6f:8b:bf:d7:0d:a7:d2:e9:4d:
                    6d:b4:17:a2:20:e8:75:59:48:c5:79:5c:71:9e:21:
                    6e:bb:61:b3:ae:66:9e:d8:f2:3f:3f:85:2f:d0:4e:
                    68:23:95:25:53:2c:68:03:7a:2d:ce:b4:79:23:ef:
                    9d:99:30:72:7c:a7:47:8c:0d:b3:32:7c:87:75:fb:
                    b0:00:c2:8f:57:83:27:e4:e5:54:88:ae:1c:63:8b:
                    24:60:15:ff:b4:58:d6:b9:d2:1f:62:08:1f:23:73:
                    55:84:bc:b8:7b:85:51:22:0d:d2:b4:f9:03:11:05:
                    66:b6:bd:36:4f:52:0a:7b:89:32:18:19:40:fa:9f:
                    47:44:21:26:4a:ab:e0:18:9e:bf:b4:73:d4:6a:06:
                    5b:4c:08:b0:98:81:eb:70:37:b6:85:7e:fe:2b:af:
                    f2:bb:f3:2f:e0:77:fd:d2:2c:4e:1b:57:aa:5b:ba:
                    f2:19:df:65:de:19:73:bb:ab:00:4e:af:91:1d:8c:
                    a6:9b:79:fa:48:8f:91:1f:cd:a4:33:6a:37:28:f5:
                    2e:2a:57:a8:8d:2a:75:66:18:b8:8f:d5:c1:19:48:
                    43:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:18:63:12:DF:36:0F:4E:46:F4:03:79:73:41:2A:CB:C1:73:37:2E
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e31392e302f32342d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:be:fa:bf:b3:7f:d8:72:e1:b3:82:18:cb:8f:e4:9a:05:41:
         88:34:b7:35:d0:40:5f:d2:f3:b8:dd:69:c2:94:ac:df:ca:ee:
         55:4a:c2:dd:c9:1e:d3:64:2a:eb:23:42:5b:af:4d:d3:b0:29:
         7e:65:fe:7c:3c:a5:f4:66:36:5b:09:49:e5:a2:53:0b:38:28:
         c4:93:8d:ba:0f:64:6b:e9:cc:db:9b:38:97:44:51:44:cd:4f:
         41:2f:fb:71:24:d7:2c:3c:82:9a:58:23:1e:01:84:02:34:f5:
         78:b9:97:86:19:eb:94:9d:26:64:9b:da:ab:c2:7a:cd:0c:11:
         00:8b:41:df:ca:c7:41:35:93:a6:b2:6a:7f:9a:e0:17:8a:1d:
         1f:38:86:e3:32:15:20:a7:07:71:76:3c:95:56:ec:d5:54:58:
         2b:6c:89:8c:eb:d2:63:07:c0:c8:8e:df:99:2b:02:a6:cf:c4:
         c6:52:1f:73:03:55:66:fa:ef:0c:b9:b7:0d:77:3e:5d:97:5b:
         f2:42:ab:01:18:e5:85:27:cb:f0:01:4d:ce:af:d8:62:a6:d4:
         de:55:75:db:81:9a:76:fd:a0:8e:02:89:b8:0c:5c:a3:82:7f:
         ba:60:90:53:d6:3f:2b:91:67:49:8f:70:28:b2:02:49:3d:57:
         9e:d5:44:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org