Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e35312e302f32342d3234203d3e20323632313636.roa
File:                     3136382e3233342e35312e302f32342d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          tP8ZHQKfdy1WbSPypKHnji6y9706HLOto+PFsAsIdzI=
Subject key identifier:   36:BB:91:2F:7A:C4:7F:1C:26:E7:47:1D:CA:05:DE:CE:64:F0:69:F4
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       62D43B5B3D1BE3DB01E469A4A8EB3AF8223062B1
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e35312e302f32342d3234203d3e20323632313636.roa
Signing time:             Tue 05 Mar 2024 17:49:29 +0000
ROA not before:           Tue 05 Mar 2024 17:44:29 +0000
ROA not after:            Tue 04 Mar 2025 17:49:29 +0000
asID:                     262166
IP address blocks:        168.234.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d4:3b:5b:3d:1b:e3:db:01:e4:69:a4:a8:eb:3a:f8:22:30:62:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Mar  5 17:44:29 2024 GMT
            Not After : Mar  4 17:49:29 2025 GMT
        Subject: CN=36BB912F7AC47F1C26E7471DCA05DECE64F069F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3e:43:b4:72:20:e9:c0:28:73:73:f7:58:e9:
                    b8:32:fc:33:8b:96:04:5c:bb:72:57:56:da:70:74:
                    98:48:ea:2d:a3:85:78:c7:6e:3f:4a:0b:ad:56:84:
                    41:61:62:05:55:0a:6f:12:91:3b:94:29:99:38:b0:
                    ac:1b:d9:fd:51:ab:80:c6:d9:de:c5:32:cc:e7:ce:
                    15:eb:49:db:02:bd:ac:c2:03:83:14:29:85:64:a5:
                    4a:69:fd:fe:06:fe:4e:eb:96:ae:25:fd:13:79:ff:
                    26:ff:51:9b:13:94:f2:9f:b2:38:9b:47:6e:eb:2b:
                    06:b2:88:c6:69:60:ee:e6:cb:cf:68:55:d8:e2:7d:
                    30:8e:da:82:57:4c:d5:4a:6f:8b:15:4e:7f:ee:3f:
                    53:9f:53:01:db:87:7c:39:3a:24:e4:3d:da:27:5f:
                    8e:cd:2e:92:90:f6:92:0d:10:b7:92:72:be:56:60:
                    c6:32:f9:29:6f:69:1c:34:c0:a1:f1:4d:97:7a:32:
                    4f:8d:90:b3:55:9f:81:c9:39:27:c2:73:2c:3d:dc:
                    21:6c:66:f7:89:d1:84:1f:97:ce:eb:5e:b8:62:4e:
                    c6:b4:b0:ed:6b:39:63:98:1f:f4:e1:fa:2f:11:df:
                    ff:bc:49:e5:a0:76:43:eb:ed:d6:06:99:22:2b:94:
                    ef:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BB:91:2F:7A:C4:7F:1C:26:E7:47:1D:CA:05:DE:CE:64:F0:69:F4
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e35312e302f32342d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:f3:c2:07:05:ef:3c:3c:7b:26:dc:e9:6d:9a:a7:b2:8f:bd:
         28:ca:8b:25:c0:e0:e6:97:81:b5:8c:e0:3b:c4:d3:14:9e:b0:
         46:3b:b5:2d:47:98:e4:1d:1f:9e:11:b7:47:c7:87:f7:0b:5a:
         9a:7b:15:df:97:69:dd:a1:02:18:a3:bb:c7:5d:fc:01:48:a1:
         19:ce:5b:2c:d3:bc:c7:d2:73:c5:27:40:2e:9e:1b:6e:2d:fd:
         29:04:c7:89:78:a4:e3:e2:8a:bc:42:bc:0d:1e:69:ae:11:fc:
         84:11:66:8c:3f:6a:4e:2b:5f:ac:b9:24:95:3e:4e:81:d9:d4:
         4d:ab:88:23:b3:76:a5:10:d1:0e:32:b5:f7:1b:7f:1b:30:f1:
         da:85:db:5e:c8:09:15:f3:27:eb:2c:0d:ea:e6:7b:e1:63:8a:
         c9:f3:34:d1:b0:39:69:4c:39:67:6a:5d:a2:b2:fd:a0:36:6c:
         c6:76:34:f6:62:c4:ae:97:d4:38:2e:33:85:b7:74:97:bd:d0:
         b5:83:b9:e9:6c:64:b7:cf:32:1d:9c:9b:2e:c9:ab:9c:47:0b:
         60:92:e8:63:6b:46:12:62:ab:2c:6b:8f:7b:98:80:80:cf:19:
         ae:24:11:6d:06:49:7c:e6:dc:65:e8:f2:b5:2e:fc:04:38:f5:
         f7:59:c9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org