Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e32342e302f32312d3234203d3e20323632313636.roa
File:                     3136382e3233342e32342e302f32312d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          sSU3jxFhYm3s2P+IJ755yrP2Nj2rOqRi8NVejyIUTKk=
Subject key identifier:   8C:AE:75:1A:2D:6F:38:30:3F:F9:7E:6D:0E:BF:33:B3:53:88:34:72
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       42E3C4E337D3F7C943BC3F93E0FD6BDFFBC41B04
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e32342e302f32312d3234203d3e20323632313636.roa
Signing time:             Tue 05 Mar 2024 17:49:27 +0000
ROA not before:           Tue 05 Mar 2024 17:44:27 +0000
ROA not after:            Tue 04 Mar 2025 17:49:27 +0000
asID:                     262166
IP address blocks:        168.234.24.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e3:c4:e3:37:d3:f7:c9:43:bc:3f:93:e0:fd:6b:df:fb:c4:1b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Mar  5 17:44:27 2024 GMT
            Not After : Mar  4 17:49:27 2025 GMT
        Subject: CN=8CAE751A2D6F38303FF97E6D0EBF33B353883472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:b1:5e:35:2a:c1:6f:51:a9:15:d2:ea:a4:
                    1d:dd:f4:f7:aa:3b:9e:1d:b4:c5:4f:00:44:d8:76:
                    98:f3:90:04:51:b9:a5:ef:a0:06:b5:9d:aa:a1:56:
                    60:da:06:08:06:5c:00:c2:58:ea:22:37:3f:59:60:
                    11:7d:4b:5a:79:3f:fb:3d:2b:63:1e:38:ad:87:92:
                    2b:28:9f:90:82:94:5c:02:fb:d2:02:81:e0:4b:3a:
                    3d:89:fc:7b:8f:70:49:a6:7f:b8:b6:52:c0:da:2a:
                    ec:10:53:90:06:24:cc:9f:6a:c0:7f:1c:28:18:2d:
                    59:22:17:d4:2a:67:58:43:51:39:33:75:cb:71:76:
                    38:04:37:41:66:3c:2c:22:18:b1:81:75:b5:52:b9:
                    79:fd:6b:c4:32:76:cf:ff:ef:72:1c:be:d8:c2:5c:
                    85:de:5e:13:9f:32:a7:55:83:dd:b1:62:6c:f1:4c:
                    56:d3:5a:11:8d:04:66:c3:10:19:fe:24:63:44:ec:
                    48:f9:ef:03:1f:d8:49:34:54:91:6a:f3:a9:41:da:
                    72:09:93:c8:3f:6b:1b:34:da:4b:b4:11:d7:0f:93:
                    8a:c7:0e:ba:1e:fe:dc:bb:de:7a:e6:ce:64:b4:85:
                    7d:1d:dc:db:8b:5d:c5:af:44:f2:e1:c6:22:21:10:
                    45:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AE:75:1A:2D:6F:38:30:3F:F9:7E:6D:0E:BF:33:B3:53:88:34:72
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e32342e302f32312d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         72:2f:bf:56:dd:cd:e7:5d:85:30:cc:37:96:ff:5a:61:e0:00:
         a7:ef:20:2c:82:f6:c2:9c:68:a0:f7:c2:6c:1d:0d:02:a8:42:
         af:f4:85:6d:4c:08:65:fa:7b:88:ce:ed:63:b1:0c:10:1a:d1:
         ea:24:6c:88:3f:76:22:3d:b8:6e:73:c7:d4:93:18:31:52:29:
         09:6c:03:b1:f3:cb:04:3d:a9:54:b3:7e:e2:cf:8e:5c:e1:c8:
         8b:cc:ee:30:07:bd:36:df:b3:a0:78:a8:04:94:49:f5:d2:b0:
         3d:6c:c2:0a:34:4c:92:9f:89:43:9d:bc:58:f0:41:a5:1f:e3:
         1c:02:45:d7:db:a5:f9:72:11:0c:b6:41:ce:ce:02:ba:3c:08:
         29:ad:06:5a:fc:62:04:31:a1:74:43:f9:78:57:e4:13:61:73:
         86:49:54:85:6f:df:b6:a7:20:73:80:4a:33:c0:08:17:cd:1d:
         91:0e:6e:b7:ff:6c:51:77:18:09:b5:5e:01:24:ce:9c:39:06:
         6a:a7:24:73:c7:6b:a4:c8:2c:79:a4:cf:6f:29:84:3b:a4:0a:
         85:77:b0:8e:02:f3:0d:99:70:3e:e3:0e:7a:18:95:3b:a6:e3:
         25:52:62:af:ae:28:02:c4:2e:af:54:b1:94:49:14:87:e6:28:
         b7:91:4e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:01 2024 by rpki-client on console-fra.rpki-client.org