Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e35312e302f32342d3234203d3e20323632313636.roa
File:                     3136382e3233342e35312e302f32342d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          U6jh0psiYkXf6+3VKzmwff7tyimqSSdXKEjxtpOXAhY=
Subject key identifier:   23:71:16:6E:0D:E8:91:2A:70:3B:5C:3D:24:47:DD:ED:FC:0B:7F:47
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       1BA4306069460A39F9580DA4EBC453C0E22780C9
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e35312e302f32342d3234203d3e20323632313636.roa
Signing time:             Tue 04 Feb 2025 17:59:51 +0000
ROA not before:           Tue 04 Feb 2025 17:54:51 +0000
ROA not after:            Tue 03 Feb 2026 17:59:51 +0000
asID:                     262166
IP address blocks:        168.234.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a4:30:60:69:46:0a:39:f9:58:0d:a4:eb:c4:53:c0:e2:27:80:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Feb  4 17:54:51 2025 GMT
            Not After : Feb  3 17:59:51 2026 GMT
        Subject: CN=2371166E0DE8912A703B5C3D2447DDEDFC0B7F47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f1:7c:02:4b:17:6f:78:e6:59:9b:05:02:09:
                    49:92:fd:00:92:fa:48:41:33:ae:70:68:12:e4:e9:
                    2c:71:26:1d:79:cf:69:6d:96:28:8d:3f:d3:92:b4:
                    f1:b6:03:98:e0:87:f2:69:38:aa:a9:b3:0b:3c:43:
                    91:6e:c2:90:0e:7c:a5:c4:1c:9f:47:5e:fd:89:04:
                    7e:fb:e8:6c:34:c6:fb:cc:62:55:6e:14:e9:fc:b7:
                    d0:dc:50:e5:6f:bd:19:fd:a8:b5:06:7a:bd:1b:c9:
                    80:6f:1d:a1:b2:1a:cd:bb:5e:87:34:41:d2:8d:82:
                    c5:5d:b7:31:b0:46:37:24:5e:fa:e4:be:ec:95:f7:
                    d7:39:23:07:70:33:9b:ac:f4:7d:e9:ca:6e:d7:14:
                    4e:70:22:30:d7:15:44:b2:1d:d7:50:bf:3e:44:86:
                    96:3b:50:d3:bc:90:5b:cd:9b:47:e8:56:17:9d:b3:
                    ff:a3:1d:f6:fa:cf:c5:33:72:2e:cb:62:40:b1:79:
                    ca:cc:e4:79:e8:55:10:22:a6:e1:2b:c6:0a:bc:a6:
                    62:ff:b3:9b:bd:72:ae:da:55:9b:f3:32:f0:db:55:
                    e7:91:66:4f:6d:63:64:fd:79:26:1e:ec:d8:9a:33:
                    d4:78:c0:f4:b4:30:a1:67:d0:bd:88:75:b3:c0:f3:
                    db:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:71:16:6E:0D:E8:91:2A:70:3B:5C:3D:24:47:DD:ED:FC:0B:7F:47
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e35312e302f32342d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:05:ab:9e:3c:d2:03:a4:9a:57:02:e1:d4:bf:16:d7:3e:f9:
         c0:24:92:8b:80:84:75:4c:eb:33:94:6d:95:8f:73:36:db:08:
         b9:a9:0d:f5:47:19:88:11:48:91:fb:ed:93:fd:6c:b0:37:30:
         9f:b3:76:d3:74:8b:7d:16:8c:60:7f:1a:3f:f1:57:0c:d2:67:
         b7:b3:b8:42:8b:e0:ea:5f:26:d3:e8:1e:6b:c4:21:89:8c:25:
         10:3e:b2:b8:41:51:9d:e3:5b:93:1c:80:82:99:d2:25:5f:e0:
         9c:f4:5f:e8:aa:71:38:ec:44:97:38:87:88:50:ea:62:34:39:
         e0:11:fa:ec:37:5a:14:c5:da:61:e3:bf:e6:22:8a:67:45:23:
         6d:e0:24:2d:75:e9:67:1f:ac:4a:90:b5:c5:1c:17:40:94:e0:
         fb:44:01:f5:04:82:c8:83:08:96:fa:05:c4:cf:4c:9c:58:a5:
         a0:54:62:88:0d:34:ae:06:3e:08:b4:4d:99:78:d9:23:77:c9:
         c1:cc:1b:b6:b6:64:73:e9:75:f2:55:bc:79:b6:1a:80:9f:8b:
         ee:24:2b:46:58:48:96:49:6a:d8:81:9f:5f:34:3b:e1:15:43:
         48:22:93:38:55:3c:11:74:6e:80:97:dc:bb:10:9d:b0:21:77:
         e3:34:cf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:23:32 2025 by rpki-client