Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3232322e302f32332d3234203d3e20323632313636.roa
File:                     3136382e3233342e3232322e302f32332d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          SVKDDLUwSsSg+j6hlgDhi61MzriuuW5/9YV3wzKh1lo=
Subject key identifier:   3D:7A:58:C4:09:32:14:61:B0:EB:9D:40:CF:0D:47:ED:C4:AC:35:EA
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       3A81047D2C3B2E6525D22BD6504663DDCBB80E8A
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3232322e302f32332d3234203d3e20323632313636.roa
Signing time:             Tue 05 Mar 2024 17:49:21 +0000
ROA not before:           Tue 05 Mar 2024 17:44:21 +0000
ROA not after:            Tue 04 Mar 2025 17:49:21 +0000
asID:                     262166
IP address blocks:        168.234.222.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:81:04:7d:2c:3b:2e:65:25:d2:2b:d6:50:46:63:dd:cb:b8:0e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Mar  5 17:44:21 2024 GMT
            Not After : Mar  4 17:49:21 2025 GMT
        Subject: CN=3D7A58C409321461B0EB9D40CF0D47EDC4AC35EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:20:f2:f0:ed:12:0e:3f:88:b5:95:bb:33:e5:
                    5c:d4:73:3f:fc:d6:76:bd:2e:06:18:a5:bb:c4:b9:
                    a7:95:25:dd:2c:21:d7:bb:90:13:eb:25:74:9c:60:
                    b8:51:61:37:96:ae:f6:f2:86:25:5e:23:47:20:33:
                    67:9e:14:05:df:ca:9c:8a:0f:bf:7d:81:13:89:3e:
                    dd:ef:c0:d4:40:83:06:09:d2:b4:ab:d7:8f:63:4b:
                    3c:41:b1:5e:9f:62:2f:17:cd:37:7e:25:7f:d0:c8:
                    ea:60:28:7e:f4:15:ea:a1:85:4e:c7:1a:32:69:5b:
                    77:5b:11:9d:5a:f2:28:6d:e1:2b:a6:b0:a5:99:8b:
                    cf:21:5d:e9:a5:9e:6e:99:ad:dc:99:09:40:bb:c2:
                    68:4d:04:74:3b:e9:cf:61:6b:b3:43:57:0f:f5:9e:
                    06:72:48:bb:f5:02:69:61:11:4c:49:9a:a6:da:31:
                    53:33:cf:1e:c6:42:c8:1d:1c:35:2b:98:30:be:61:
                    fe:24:a5:46:6b:ea:bc:e5:10:1c:c4:df:13:20:50:
                    13:c0:9e:d4:7c:67:e1:27:22:1d:5c:6c:d4:8b:03:
                    03:87:71:53:3c:e6:d1:aa:97:7b:a1:ec:94:b2:7f:
                    69:a6:33:18:48:68:7c:88:77:49:62:18:7a:ab:5b:
                    4b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7A:58:C4:09:32:14:61:B0:EB:9D:40:CF:0D:47:ED:C4:AC:35:EA
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3232322e302f32332d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:29:4a:2a:e1:dd:e5:bc:52:0a:30:ef:4b:73:a2:d5:7b:e8:
         9d:64:14:3c:bd:17:69:b4:91:91:36:e8:93:39:70:28:2e:e4:
         1e:53:a5:3a:e6:78:20:c8:a6:14:2a:90:08:2d:6b:29:2e:c6:
         cf:3d:1c:9d:cc:ec:41:74:fa:ad:da:fe:3c:c1:ab:9f:53:d6:
         a2:f2:fe:52:7e:56:5f:f0:f3:9e:95:f7:07:16:5d:50:2a:e4:
         56:6e:72:03:9b:b0:62:12:fb:35:22:80:89:0b:82:f3:5e:7b:
         e3:6b:49:9c:45:5e:6e:2c:ea:35:d5:4d:43:c4:d2:a3:18:d2:
         f5:5d:b1:84:93:19:4b:d0:10:1e:f7:66:ac:b6:f7:57:03:bb:
         3e:63:36:c4:ba:4a:7a:29:e8:01:d3:94:f9:6e:02:76:a6:14:
         8d:3d:26:fb:6c:aa:66:ae:db:75:fd:44:a5:78:45:6b:b6:ad:
         b7:6e:24:56:33:e7:85:4a:64:4f:e9:a4:c0:2b:45:34:fa:c0:
         16:fb:ed:33:68:95:58:c8:3e:3a:8f:78:b9:2c:d4:2b:65:83:
         22:bf:b8:ad:f0:b6:16:33:5f:f7:52:fd:24:22:b0:9c:2e:77:
         a4:8d:c3:23:47:ed:17:96:3d:9f:69:3a:bf:83:fb:6b:b2:da:
         db:60:d5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org