Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3230382e302f32312d3234203d3e20323632313636.roa
File:                     3136382e3233342e3230382e302f32312d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          rVy5fV+quA+eP/iiOziMPeTbTaoTjbsI2m3loVQPZ7Q=
Subject key identifier:   3A:27:6B:30:72:AD:34:B6:1C:24:CD:18:1B:7C:00:33:CE:BA:C3:EA
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       52611A2393C230C706A41D8221E0079549ADD402
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3230382e302f32312d3234203d3e20323632313636.roa
Signing time:             Tue 04 Feb 2025 17:59:44 +0000
ROA not before:           Tue 04 Feb 2025 17:54:44 +0000
ROA not after:            Tue 03 Feb 2026 17:59:44 +0000
asID:                     262166
IP address blocks:        168.234.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Apr 2025 12:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:61:1a:23:93:c2:30:c7:06:a4:1d:82:21:e0:07:95:49:ad:d4:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Feb  4 17:54:44 2025 GMT
            Not After : Feb  3 17:59:44 2026 GMT
        Subject: CN=3A276B3072AD34B61C24CD181B7C0033CEBAC3EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:10:56:4f:34:68:91:10:34:72:a2:90:d2:cf:
                    df:82:de:f5:6f:fc:89:8c:1f:99:8c:f6:bd:dd:32:
                    b8:0f:07:fa:3a:c3:a6:3d:55:07:b6:17:df:28:f5:
                    c5:3e:9d:da:68:7e:9d:be:dd:40:b6:d2:a6:0a:38:
                    8a:66:86:16:dd:74:a9:bc:71:3e:b7:e1:53:94:14:
                    b5:78:24:e2:e4:e1:9e:ff:ce:94:ff:67:97:1d:61:
                    4e:c5:ed:7c:b9:0c:03:2e:23:02:95:af:ac:8e:b0:
                    16:08:8d:5f:58:5d:d6:ad:00:30:af:60:72:af:8c:
                    63:7d:4b:5c:39:d0:b7:16:05:73:46:35:55:c0:1e:
                    be:9f:a4:31:c8:2c:de:72:b4:0d:76:af:c5:46:14:
                    8b:7d:61:00:e1:54:6b:96:ba:ee:55:d7:d3:07:49:
                    49:27:47:4e:6b:06:8a:27:6a:7c:10:a4:88:81:3c:
                    aa:cc:5e:87:40:e1:6a:6a:e5:ac:1e:42:6d:1c:c7:
                    82:34:37:1f:7a:3d:48:c7:72:fc:bb:99:70:fe:ff:
                    02:93:61:03:b3:a8:c9:44:f0:fc:27:e2:e4:e5:e1:
                    00:fe:25:32:60:db:89:36:a8:6c:03:61:83:8c:eb:
                    62:ef:47:b5:81:a5:20:52:7b:39:53:ec:4c:77:a6:
                    cb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:27:6B:30:72:AD:34:B6:1C:24:CD:18:1B:7C:00:33:CE:BA:C3:EA
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3230382e302f32312d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9d:b8:b1:13:d5:f9:16:d3:90:42:65:09:62:96:76:32:c3:5d:
         72:f6:25:13:4f:5e:65:d1:66:cb:14:ea:14:40:14:b2:09:1d:
         74:c6:03:86:90:f1:85:51:9c:08:de:11:dc:b5:e0:83:90:03:
         01:84:33:0c:17:f8:d5:fc:c9:97:27:bc:d5:23:c6:7e:aa:fb:
         0c:1d:b0:77:13:ac:e9:6f:a3:80:26:00:30:0e:5e:5f:e5:8e:
         fd:37:7b:9f:fc:b6:93:d1:fd:6f:f5:5f:da:2f:ef:e1:ab:58:
         54:92:e1:3c:a4:fa:d9:b3:d9:b3:1e:03:08:43:3b:2f:51:21:
         2b:4d:ae:7a:48:d6:67:35:24:17:5e:30:c1:81:1c:46:5d:89:
         49:65:df:9b:da:ed:27:2c:78:5e:62:17:26:83:5c:9c:c8:98:
         99:a2:71:f0:21:90:54:82:4c:c4:4a:f1:63:82:10:55:06:68:
         d8:c4:ac:1b:2a:6d:de:c7:cb:34:25:d7:38:66:b5:de:6e:ce:
         2f:e9:06:5b:bf:31:41:ee:b0:0f:95:a6:db:d3:62:a2:0c:22:
         85:7b:57:1b:02:44:1a:05:90:e7:3b:ef:ae:42:3d:85:76:58:
         08:10:97:f9:2c:7a:70:63:57:0f:3a:8d:4b:92:fd:a9:f9:4d:
         bc:09:78:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:54 2025 by rpki-client