Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e35312e302f32342d3234203d3e20323632323535.roa
File:                     3136382e3233342e35312e302f32342d3234203d3e20323632323535.roa (raw, json)
Hash identifier:          KuspEqU4VWHLM8zUUCyEHEoGsTWebFoPWKbR16NQo6Q=
Subject key identifier:   71:EE:76:97:8A:62:DC:B5:B7:80:64:B9:29:EF:C0:21:5A:84:CF:BF
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       7E12677E3C96B55334543C705B733E1447A8E5A5
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e35312e302f32342d3234203d3e20323632323535.roa
Signing time:             Tue 05 Mar 2024 17:49:24 +0000
ROA not before:           Tue 05 Mar 2024 17:44:24 +0000
ROA not after:            Tue 04 Mar 2025 17:49:24 +0000
asID:                     262255
IP address blocks:        168.234.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:12:67:7e:3c:96:b5:53:34:54:3c:70:5b:73:3e:14:47:a8:e5:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Mar  5 17:44:24 2024 GMT
            Not After : Mar  4 17:49:24 2025 GMT
        Subject: CN=71EE76978A62DCB5B78064B929EFC0215A84CFBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1f:33:82:58:f1:eb:5a:60:85:f7:43:cc:78:
                    23:5f:a2:1b:95:35:39:59:59:14:3c:1d:fe:e5:99:
                    8c:fb:01:44:0e:de:9a:97:d2:d2:cf:fb:c2:b5:49:
                    9f:bd:7f:f9:de:50:4d:cf:c0:42:d2:c9:80:a8:52:
                    ed:2b:24:72:04:b3:70:05:90:20:79:9e:84:26:d9:
                    b5:47:9e:3d:85:61:3a:e6:93:61:af:d0:99:e3:1f:
                    23:cf:da:31:ea:7a:37:a1:9d:59:05:70:91:7e:1b:
                    75:5a:ec:04:36:c3:d5:b8:12:8c:63:d4:f0:ad:92:
                    fc:18:8e:ae:70:a7:9c:d6:a8:31:8d:11:3a:ec:ab:
                    22:63:eb:48:79:2c:3b:b3:ca:79:7e:3c:ab:38:5e:
                    8f:7d:a7:54:e2:32:4d:c5:85:c9:07:45:a7:d0:31:
                    cd:1d:f7:a3:e9:16:6c:e3:ae:98:e8:5a:43:10:72:
                    96:b8:3f:50:56:c9:75:64:64:bc:4e:7b:66:2a:27:
                    8d:4c:dd:5e:82:f6:c2:f0:87:e2:f6:7b:9d:cb:ae:
                    66:a2:11:2c:a8:26:37:18:33:eb:9c:cf:94:7d:7b:
                    8c:b3:0e:60:ac:ac:7f:c3:6f:95:61:40:61:9b:56:
                    e1:ec:5b:e6:0d:0a:42:a0:82:bf:7d:5f:e4:57:f3:
                    e4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EE:76:97:8A:62:DC:B5:B7:80:64:B9:29:EF:C0:21:5A:84:CF:BF
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e35312e302f32342d3234203d3e20323632323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:44:53:40:62:6d:1b:c0:ab:ce:d6:8c:f9:e3:46:98:15:ab:
         e6:53:68:2f:67:51:cf:46:e6:2a:e7:08:58:62:62:70:5b:5f:
         46:43:ef:b4:c9:23:a7:41:48:80:dc:a6:01:e1:51:0e:dd:72:
         cc:2a:8f:30:4c:e8:91:4a:43:2c:04:5c:53:05:d7:92:61:20:
         36:c9:86:d6:83:73:7f:11:69:2b:f9:45:b4:22:3e:45:c4:5c:
         f7:59:1a:c5:00:b4:b0:f3:70:cb:aa:98:79:c7:e0:ac:af:1c:
         79:a6:c8:e2:85:f0:6d:8d:37:7a:49:a7:78:14:91:26:30:c6:
         43:1d:7e:43:bf:75:68:a2:b8:b0:15:82:c0:9f:79:59:33:e0:
         4b:0e:b8:61:02:b9:f1:4b:c5:5e:83:dc:df:7f:8f:a6:6f:c6:
         02:0d:98:22:b3:cd:5f:35:10:58:3c:65:06:fc:d1:a4:96:18:
         8c:09:58:04:57:00:bb:ad:83:8b:85:fb:9b:e3:ad:eb:0e:ca:
         b3:f0:a9:50:9d:b7:9d:39:8d:03:93:63:33:02:7d:76:16:fb:
         88:84:32:99:32:b4:02:99:7f:32:62:73:22:33:10:8c:29:2d:
         2b:87:6b:96:98:ad:e1:48:1e:49:20:e1:02:36:67:2c:73:41:
         04:88:47:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org