Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3230332e302f32342d3234203d3e20323632313636.roa
File:                     3136382e3233342e3230332e302f32342d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          xME1RgsNWFziYGbpH9RdPeC+qr6JJG+ALH+8Ic2eEBA=
Subject key identifier:   D0:97:95:21:6F:4C:44:E5:19:95:1D:83:FF:EA:EB:77:9C:06:2A:A7
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       332A13AB94DDDC0CA0F6CA60FDD2F016465AEB6C
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3230332e302f32342d3234203d3e20323632313636.roa
Signing time:             Tue 05 Mar 2024 17:49:20 +0000
ROA not before:           Tue 05 Mar 2024 17:44:20 +0000
ROA not after:            Tue 04 Mar 2025 17:49:20 +0000
asID:                     262166
IP address blocks:        168.234.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:2a:13:ab:94:dd:dc:0c:a0:f6:ca:60:fd:d2:f0:16:46:5a:eb:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Mar  5 17:44:20 2024 GMT
            Not After : Mar  4 17:49:20 2025 GMT
        Subject: CN=D09795216F4C44E519951D83FFEAEB779C062AA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c4:cf:2f:f3:95:45:0f:47:82:ed:93:e6:a8:
                    28:af:64:9b:42:0f:5b:37:a7:46:0f:47:4f:b2:8e:
                    1c:78:45:9f:72:e2:68:d2:9c:af:25:5e:bc:aa:13:
                    49:82:1d:78:f3:30:e7:c5:56:fd:f5:1f:49:98:3c:
                    b8:46:f9:b7:de:62:ef:77:76:30:38:cf:3f:76:ae:
                    01:6e:87:af:1c:da:08:4c:8a:33:d0:d2:d1:cc:6c:
                    17:be:4c:03:10:7e:f5:d7:41:61:d1:52:72:fa:56:
                    e5:24:04:0e:b7:75:41:e9:59:6b:46:6f:b0:26:57:
                    f4:54:15:57:0a:e6:7a:47:0d:67:55:b2:2f:0e:7e:
                    6c:5f:55:94:06:f7:f2:5a:5a:a6:c4:99:2d:3a:23:
                    58:c8:17:76:74:81:b3:2a:63:36:c5:9e:16:1b:fa:
                    d7:46:c2:ed:75:d3:bb:ad:f0:32:d1:3c:a4:a1:2c:
                    48:2d:e8:5f:c3:1e:5a:0c:e8:9c:f4:a9:35:43:39:
                    30:6d:26:9b:ce:f1:b8:44:b4:8f:7b:f5:33:bc:92:
                    e2:6b:d9:ec:68:90:9b:5b:b2:0c:e1:5f:d8:6c:a1:
                    7b:13:6f:a2:fe:fb:6a:d4:50:ec:e4:c7:cc:04:1d:
                    39:16:ff:95:17:f3:4a:73:0c:08:d5:58:46:34:91:
                    5f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:97:95:21:6F:4C:44:E5:19:95:1D:83:FF:EA:EB:77:9C:06:2A:A7
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3230332e302f32342d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:c0:05:67:58:b5:f2:72:82:f5:88:15:d4:45:6d:e0:74:db:
         4f:e5:5e:8f:6e:c2:8e:a3:96:f2:04:66:28:b7:77:84:78:ae:
         08:1d:6d:04:d2:db:a5:28:53:46:8a:7b:cf:88:3d:ec:72:92:
         7e:da:d0:e1:6a:12:dc:3a:ee:88:12:77:47:07:62:0d:2f:fd:
         8c:8c:d1:a5:47:03:32:0e:9e:ce:85:cd:5d:2e:2e:49:7c:9c:
         e0:a0:df:2c:38:2f:bd:be:26:e1:c9:fe:64:15:51:2e:c5:17:
         f3:fa:92:fd:a2:0d:eb:db:9d:a6:e5:10:9f:06:d0:72:ac:ff:
         1f:7b:fd:b3:1e:f9:ee:d2:47:29:1e:9a:4f:fd:ab:68:c7:7d:
         9c:e8:cb:6a:f6:2c:6b:23:78:90:f2:e3:1e:45:9a:84:d4:3e:
         e3:37:6c:31:5e:b6:0a:43:bc:c3:23:a1:89:97:5a:2b:ca:43:
         c4:48:02:b0:b5:fe:eb:84:45:ff:4b:f6:74:6f:ca:c9:d9:3d:
         b0:de:c3:78:ce:1d:b9:29:61:e1:eb:81:23:3b:ef:32:46:8d:
         01:47:68:c0:f1:c5:e1:cb:c3:b9:13:08:c6:10:1b:c5:25:f5:
         d8:46:6d:37:97:e7:fb:47:34:3f:f0:f8:48:3f:98:21:2a:34:
         1e:7a:cc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org