Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e35362e302f32332d3234203d3e20323632313636.roa
File:                     3136382e3233342e35362e302f32332d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          MPf8BxRZSqBBrFUGIuOxDNo7KdoTWV8vxFcyHUycdoQ=
Subject key identifier:   FA:02:94:DD:2C:5F:63:EC:5B:41:69:35:8D:EC:93:DC:9A:0E:FD:2E
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       620CEB032C84011D5D410AB4FCBDBCF8D8F079B3
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e35362e302f32332d3234203d3e20323632313636.roa
Signing time:             Tue 05 Mar 2024 17:49:28 +0000
ROA not before:           Tue 05 Mar 2024 17:44:28 +0000
ROA not after:            Tue 04 Mar 2025 17:49:28 +0000
asID:                     262166
IP address blocks:        168.234.56.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:0c:eb:03:2c:84:01:1d:5d:41:0a:b4:fc:bd:bc:f8:d8:f0:79:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Mar  5 17:44:28 2024 GMT
            Not After : Mar  4 17:49:28 2025 GMT
        Subject: CN=FA0294DD2C5F63EC5B4169358DEC93DC9A0EFD2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:68:d1:2d:53:1a:39:35:b4:19:b4:fc:a7:4e:
                    21:4b:fc:f2:fe:87:6b:15:9f:0b:dc:3e:6e:ec:eb:
                    8d:a0:97:6e:9a:77:8a:07:76:e5:d7:9c:67:4c:1c:
                    85:f4:fd:69:f3:ab:5f:ba:02:98:80:51:26:6f:36:
                    9f:54:3a:87:d9:07:fc:40:b1:c8:ae:8f:1d:02:22:
                    27:55:ec:16:70:14:de:8c:f8:f6:ee:6e:d8:90:8d:
                    43:b2:5e:a1:68:c5:fb:9f:48:22:a5:15:57:09:c8:
                    ab:cf:05:36:b2:f1:2e:61:9d:4f:5a:ae:77:27:61:
                    2a:98:0f:e8:b3:26:81:3d:a0:58:6f:f7:77:fb:13:
                    20:a9:8f:1e:a5:e9:fd:44:5a:ac:99:1b:7e:04:12:
                    d6:1d:c7:66:fe:34:ea:e8:e4:cc:84:0f:92:55:ff:
                    5c:9f:4f:ff:11:b4:62:39:4c:a3:5e:35:77:86:73:
                    bd:d5:94:ce:97:fd:2d:da:f9:5a:10:72:14:1f:f6:
                    23:26:ec:c7:88:2f:ed:6d:6a:4f:7a:58:b8:cb:fc:
                    47:0b:4c:72:2c:26:a1:4d:8f:a7:a6:8b:51:4b:dc:
                    8d:b3:dd:b2:32:17:b0:8f:7c:50:7d:3d:f2:95:0c:
                    ee:3f:d9:e3:6a:3a:23:cf:1c:bc:fd:47:bf:a4:09:
                    87:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:02:94:DD:2C:5F:63:EC:5B:41:69:35:8D:EC:93:DC:9A:0E:FD:2E
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e35362e302f32332d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:68:d5:a0:c4:fa:00:db:3d:39:ea:a7:80:12:36:6c:07:99:
         a8:5e:37:4e:1c:8f:e9:16:f6:cb:63:9c:5b:5c:a0:a4:d5:ed:
         9c:fe:f1:e0:33:2f:38:18:3f:cd:60:7b:24:1a:a1:e2:07:4a:
         67:15:28:b6:2d:a2:e7:39:99:58:c8:ef:cb:71:54:26:58:e4:
         48:e8:46:32:be:9b:7c:4d:ba:8d:10:e4:82:24:41:e8:15:c7:
         f0:ba:86:4f:bb:5e:ed:55:c0:1e:89:ed:f8:aa:c7:48:33:e8:
         85:fa:11:10:9a:f7:05:af:7f:44:8f:11:79:9e:cd:0b:1c:1b:
         ae:af:4b:54:91:05:b5:88:19:ae:81:98:bd:71:8b:75:3d:65:
         0f:56:5e:10:b4:20:54:a8:0a:be:06:75:f6:68:d5:61:ce:0c:
         d3:6d:42:47:89:41:6b:f9:6f:21:d7:48:78:29:06:30:5f:1a:
         5b:2f:3b:87:6d:34:5b:50:77:11:fd:ae:2a:88:87:06:19:52:
         14:12:08:fa:99:8b:4b:8a:dc:cb:71:53:c2:cd:c8:9e:3f:f3:
         7b:b3:d5:f1:5f:56:64:f8:bb:c7:d5:8d:52:ec:5a:cc:92:74:
         ea:59:74:64:b4:49:e4:ed:86:13:ba:18:3a:00:9f:79:73:fc:
         bc:76:7e:f5
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYgzrAyyEAR1dQQq0/L28+NjwebMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQxNzk3MDQzRjdGNTI5RjEzOTUyQ0VFNjQ2QUU3MzY1
MzkyQkJDMzAeFw0yNDAzMDUxNzQ0MjhaFw0yNTAzMDQxNzQ5MjhaMDMxMTAvBgNV
BAMTKEZBMDI5NEREMkM1RjYzRUM1QjQxNjkzNThERUM5M0RDOUEwRUZEMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjaNEtUxo5NbQZtPynTiFL/PL+
h2sVnwvcPm7s642gl26ad4oHduXXnGdMHIX0/Wnzq1+6ApiAUSZvNp9UOofZB/xA
sciujx0CIidV7BZwFN6M+PbubtiQjUOyXqFoxfufSCKlFVcJyKvPBTay8S5hnU9a
rncnYSqYD+izJoE9oFhv93f7EyCpjx6l6f1EWqyZG34EEtYdx2b+NOro5MyED5JV
/1yfT/8RtGI5TKNeNXeGc73VlM6X/S3a+VoQchQf9iMm7MeIL+1tak96WLjL/EcL
THIsJqFNj6emi1FL3I2z3bIyF7CPfFB9PfKVDO4/2eNqOiPPHLz9R7+kCYdzAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU+gKU3SxfY+xbQWk1jeyT3JoO/S4wHwYDVR0j
BBgwFoAUDReXBD9/Up8TlSzuZGrnNlOSu8MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNjM1NDU0M0QyMjQyNzJDRjQ3MjJGRjRENzE4MTk4RUI4
RTJGRjhDQkQ2RDlCN0I5N0NEQTg2MEQ5QzFDRDNCLzAvMEQxNzk3MDQzRjdGNTI5
RjEzOTUyQ0VFNjQ2QUU3MzY1MzkyQkJDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDE3OTcwNDNGN0Y1MjlGMTM5
NTJDRUU2NDZBRTczNjUzOTJCQkMzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzYzNTQ1NDNEMjI0MjcyQ0Y0NzIyRkY0RDcxODE5OEVCOEUyRkY4Q0JE
NkQ5QjdCOTdDREE4NjBEOUMxQ0QzQi8wLzMxMzYzODJlMzIzMzM0MmUzNTM2MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjMyMzEzNjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqOo4
MA0GCSqGSIb3DQEBCwUAA4IBAQAgaNWgxPoA2z056qeAEjZsB5moXjdOHI/pFvbL
Y5xbXKCk1e2c/vHgMy84GD/NYHskGqHiB0pnFSi2LaLnOZlYyO/LcVQmWORI6EYy
vpt8TbqNEOSCJEHoFcfwuoZPu17tVcAeie34qsdIM+iF+hEQmvcFr39EjxF5ns0L
HBuur0tUkQW1iBmugZi9cYt1PWUPVl4QtCBUqAq+BnX2aNVhzgzTbUJHiUFr+W8h
10h4KQYwXxpbLzuHbTRbUHcR/a4qiIcGGVIUEgj6mYtLitzLcVPCzcieP/N7s9Xx
X1Zk+LvH1Y1S7FrMknTqWXRktEnk7YYTuhg6AJ95c/y8dn71
-----END CERTIFICATE-----
Generated at Fri May 31 10:41:51 2024 by rpki-client on console-fra.rpki-client.org