Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3231382e302f32342d3234203d3e20323632313636.roa
File:                     3136382e3233342e3231382e302f32342d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          dzfqKJeV8LLbJpfqofZajRG/BH6OWaJtUeMDdtUApLg=
Subject key identifier:   C8:F4:C6:0E:D0:E5:AA:16:F4:02:4B:55:E5:AB:4D:18:55:C5:00:47
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       66938911CDD3FE13CCB214A29C664425023D2525
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3231382e302f32342d3234203d3e20323632313636.roa
Signing time:             Tue 05 Mar 2024 17:49:22 +0000
ROA not before:           Tue 05 Mar 2024 17:44:22 +0000
ROA not after:            Tue 04 Mar 2025 17:49:22 +0000
asID:                     262166
IP address blocks:        168.234.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:93:89:11:cd:d3:fe:13:cc:b2:14:a2:9c:66:44:25:02:3d:25:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Mar  5 17:44:22 2024 GMT
            Not After : Mar  4 17:49:22 2025 GMT
        Subject: CN=C8F4C60ED0E5AA16F4024B55E5AB4D1855C50047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bf:06:8d:bf:8f:56:ab:a7:9d:ed:5c:a4:21:
                    e7:99:0f:b5:fc:90:23:dd:68:74:ad:90:e1:98:14:
                    bd:4a:45:db:b8:55:c4:42:cc:da:76:50:e5:6d:ed:
                    e6:a5:c4:3f:53:02:6d:b9:59:e9:c2:6f:5c:3a:51:
                    4c:50:d6:d5:ff:52:7c:9e:90:ab:93:2b:00:7f:5b:
                    6f:67:58:6b:ca:4b:2a:8b:fa:e2:37:60:b6:db:a1:
                    13:07:c4:06:98:c0:20:5f:ba:13:24:ac:6a:a8:ef:
                    43:c0:78:15:db:cd:94:48:b6:98:e6:a4:22:1e:bf:
                    b3:01:7e:4d:42:9f:5b:95:d7:50:d0:29:c1:1f:5a:
                    e0:68:d8:f0:b9:64:a0:d3:a1:2d:70:8a:20:91:10:
                    c0:21:66:c9:10:d8:e4:02:58:8b:81:6c:2b:55:46:
                    2f:cb:13:a9:3b:b1:09:39:00:c7:39:17:a9:b8:78:
                    17:93:96:f0:8a:04:3c:b8:7a:e4:e8:38:80:e6:02:
                    16:61:79:61:32:e0:93:3a:ba:c1:59:05:38:ff:b3:
                    08:92:c4:fa:b0:59:c7:bb:53:36:b0:e3:56:8c:73:
                    31:3b:e1:dc:c5:e8:83:29:73:93:94:8d:ec:22:62:
                    a1:16:b6:bc:0c:97:eb:28:50:04:3c:e2:c3:dd:4a:
                    76:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F4:C6:0E:D0:E5:AA:16:F4:02:4B:55:E5:AB:4D:18:55:C5:00:47
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3231382e302f32342d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:8f:46:c0:37:62:c0:c1:37:22:e6:c2:aa:29:14:e9:1a:ce:
         34:74:c4:70:03:c4:0a:aa:5e:43:55:c8:ad:dd:93:5e:eb:52:
         f5:99:72:ac:45:24:f9:e6:0c:b8:a5:f5:59:ba:f0:d3:e8:77:
         64:1e:61:eb:07:3e:fd:a7:90:1f:93:8a:fa:b8:5e:49:c4:2b:
         54:38:79:b5:73:75:1c:2d:60:3b:df:41:88:6d:88:66:f5:f1:
         ad:d9:70:2e:f8:df:4f:60:8d:3a:aa:89:97:0b:50:bb:de:b9:
         12:f9:4b:02:20:e0:14:31:40:72:51:49:d6:31:28:16:6b:c5:
         11:da:f9:d6:00:6a:21:e3:26:f4:ac:fe:4a:07:f9:20:ae:a6:
         b7:7a:11:84:bc:6e:c7:88:ca:21:3f:41:23:54:fc:da:b9:d4:
         43:cf:4e:7b:49:a6:8e:47:ec:ff:82:4e:66:39:f1:16:0c:4d:
         46:eb:fc:c4:d8:39:79:3a:59:38:93:89:c3:f0:9c:67:6a:34:
         c0:fe:f0:84:3a:d2:49:89:98:d5:8d:5e:2d:ac:53:aa:3d:ba:
         f7:13:2b:4e:aa:96:87:40:1a:c8:ca:79:ca:ae:34:fc:a6:1a:
         5f:bc:5b:28:ee:d4:62:73:a9:a8:b2:e2:31:3f:f4:ea:23:c8:
         68:9e:6d:9e
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUZpOJEc3T/hPMshSinGZEJQI9JSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQxNzk3MDQzRjdGNTI5RjEzOTUyQ0VFNjQ2QUU3MzY1
MzkyQkJDMzAeFw0yNDAzMDUxNzQ0MjJaFw0yNTAzMDQxNzQ5MjJaMDMxMTAvBgNV
BAMTKEM4RjRDNjBFRDBFNUFBMTZGNDAyNEI1NUU1QUI0RDE4NTVDNTAwNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfvwaNv49Wq6ed7VykIeeZD7X8
kCPdaHStkOGYFL1KRdu4VcRCzNp2UOVt7ealxD9TAm25WenCb1w6UUxQ1tX/Unye
kKuTKwB/W29nWGvKSyqL+uI3YLbboRMHxAaYwCBfuhMkrGqo70PAeBXbzZRItpjm
pCIev7MBfk1Cn1uV11DQKcEfWuBo2PC5ZKDToS1wiiCREMAhZskQ2OQCWIuBbCtV
Ri/LE6k7sQk5AMc5F6m4eBeTlvCKBDy4euToOIDmAhZheWEy4JM6usFZBTj/swiS
xPqwWce7Uzaw41aMczE74dzF6IMpc5OUjewiYqEWtrwMl+soUAQ84sPdSnYfAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUyPTGDtDlqhb0AktV5atNGFXFAEcwHwYDVR0j
BBgwFoAUDReXBD9/Up8TlSzuZGrnNlOSu8MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNjM1NDU0M0QyMjQyNzJDRjQ3MjJGRjRENzE4MTk4RUI4
RTJGRjhDQkQ2RDlCN0I5N0NEQTg2MEQ5QzFDRDNCLzAvMEQxNzk3MDQzRjdGNTI5
RjEzOTUyQ0VFNjQ2QUU3MzY1MzkyQkJDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDE3OTcwNDNGN0Y1MjlGMTM5
NTJDRUU2NDZBRTczNjUzOTJCQkMzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzYzNTQ1NDNEMjI0MjcyQ0Y0NzIyRkY0RDcxODE5OEVCOEUyRkY4Q0JE
NkQ5QjdCOTdDREE4NjBEOUMxQ0QzQi8wLzMxMzYzODJlMzIzMzM0MmUzMjMxMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM2MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACo
6towDQYJKoZIhvcNAQELBQADggEBAIGPRsA3YsDBNyLmwqopFOkazjR0xHADxAqq
XkNVyK3dk17rUvWZcqxFJPnmDLil9Vm68NPod2QeYesHPv2nkB+Tivq4XknEK1Q4
ebVzdRwtYDvfQYhtiGb18a3ZcC74309gjTqqiZcLULveuRL5SwIg4BQxQHJRSdYx
KBZrxRHa+dYAaiHjJvSs/koH+SCuprd6EYS8bseIyiE/QSNU/Nq51EPPTntJpo5H
7P+CTmY58RYMTUbr/MTYOXk6WTiTicPwnGdqNMD+8IQ60kmJmNWNXi2sU6o9uvcT
K06qlodAGsjKecquNPymGl+8Wyju1GJzqaiy4jE/9OojyGiebZ4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org