Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3230352e302f32342d3234203d3e20323632313636.roa
File:                     3136382e3233342e3230352e302f32342d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          5XAstgjrzkiDeE0JOLhWsTkuNjCTzMo9ewLnRQ34KdQ=
Subject key identifier:   34:BA:2F:34:7C:E1:08:13:96:3C:A8:DA:BE:14:34:FA:10:98:D4:8A
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       3CFDBDF1BAE84C31A0637AA465F370E482ECA435
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3230352e302f32342d3234203d3e20323632313636.roa
Signing time:             Tue 05 Mar 2024 17:49:24 +0000
ROA not before:           Tue 05 Mar 2024 17:44:24 +0000
ROA not after:            Tue 04 Mar 2025 17:49:24 +0000
asID:                     262166
IP address blocks:        168.234.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:fd:bd:f1:ba:e8:4c:31:a0:63:7a:a4:65:f3:70:e4:82:ec:a4:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Mar  5 17:44:24 2024 GMT
            Not After : Mar  4 17:49:24 2025 GMT
        Subject: CN=34BA2F347CE10813963CA8DABE1434FA1098D48A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:71:24:a2:eb:43:f3:54:4f:71:f7:9e:39:42:
                    58:ff:0a:4a:61:25:e0:9a:41:da:be:1b:b3:a1:d9:
                    9e:fc:2e:11:66:0a:56:35:e7:a1:b4:d5:5f:27:48:
                    15:92:ef:2a:7d:a7:15:61:0f:a3:69:aa:d4:c4:61:
                    c7:85:eb:56:4d:1e:71:4f:47:41:f4:34:3d:f5:9e:
                    08:89:11:6f:a1:49:e1:fa:29:bf:2d:f4:5e:d1:8b:
                    1f:09:e2:6c:cd:04:41:94:9a:53:71:6d:97:89:10:
                    2b:68:2f:5a:77:db:23:3d:ce:f3:5d:db:03:1c:6d:
                    59:19:3b:66:0d:61:22:d7:9c:17:e5:63:18:af:f3:
                    88:eb:cd:d1:90:83:e4:3c:28:c0:f6:1b:71:c8:b6:
                    4f:3a:96:1b:40:6c:1e:32:7c:51:a7:9a:13:d2:11:
                    a6:5d:8d:5c:ae:05:be:7b:c9:94:08:b4:68:16:ad:
                    80:54:da:db:a9:44:5f:9d:c7:3f:4e:28:94:ab:9d:
                    62:ab:c4:d5:51:ea:5f:ec:62:c4:b1:9f:47:84:a8:
                    1b:0b:db:e6:3c:75:ed:c9:19:7e:35:bb:74:67:92:
                    fd:dc:16:81:cf:b2:40:36:dc:1b:56:8e:bd:da:6d:
                    45:f5:29:a0:b9:33:15:ae:f1:32:b5:e5:56:6f:4c:
                    bb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BA:2F:34:7C:E1:08:13:96:3C:A8:DA:BE:14:34:FA:10:98:D4:8A
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3230352e302f32342d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:9c:c8:ec:ef:74:f5:c2:b9:2c:c4:d7:34:88:96:f3:61:0d:
         98:0d:0c:64:f8:ed:90:97:e7:58:20:99:c9:9c:af:17:b0:8d:
         32:2e:3a:80:bd:2a:ad:c8:f7:df:97:b5:c1:21:8e:b4:9a:8a:
         b0:9f:77:82:b1:0a:5c:f7:45:a3:12:57:87:b3:6c:fd:7a:6e:
         a8:07:56:45:f1:29:0b:1a:3d:71:7b:cb:0b:e8:4b:bd:1f:2c:
         0e:b1:49:5f:d0:1f:d2:34:6d:fa:12:7d:91:38:93:28:26:54:
         40:97:72:43:00:71:5d:86:f9:1d:e5:57:47:ba:18:0d:5a:c9:
         e7:5f:52:60:f2:0f:45:03:42:17:ad:a8:a5:0a:7d:0e:b1:81:
         93:5d:39:24:ba:79:9f:c5:86:e0:60:07:84:4b:d3:64:cb:4e:
         bc:89:bc:ee:19:43:71:e5:3f:2e:c5:12:00:4a:d4:44:bd:b4:
         85:9b:b8:df:23:8b:a6:9c:54:f1:8f:72:c5:01:d9:b1:03:87:
         4e:60:03:6c:d9:0c:b0:fb:2d:9e:8f:3e:ca:7d:92:09:70:06:
         7f:40:ad:a2:9e:28:38:aa:37:91:ef:8f:8d:84:7f:27:21:e3:
         1a:f7:36:75:e7:86:df:2d:ed:82:aa:5a:36:92:e0:31:be:4e:
         ea:3e:91:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org