Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e37322e302f32312d3234203d3e203237393239.roa
File:                     3136382e3233342e37322e302f32312d3234203d3e203237393239.roa (raw, json)
Hash identifier:          AbIggi3vbhxmG+vZcPSTIObcNpz8UAJ7IRn5K39rLAM=
Subject key identifier:   05:8A:29:8D:FE:33:22:A7:BD:9A:79:CD:DB:8C:A2:D6:F4:83:84:F7
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       1F705383A71EAE880FC985E990D1C5C5BBF0C12F
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e37322e302f32312d3234203d3e203237393239.roa
Signing time:             Tue 05 Mar 2024 17:49:29 +0000
ROA not before:           Tue 05 Mar 2024 17:44:29 +0000
ROA not after:            Tue 04 Mar 2025 17:49:29 +0000
asID:                     27929
IP address blocks:        168.234.72.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:70:53:83:a7:1e:ae:88:0f:c9:85:e9:90:d1:c5:c5:bb:f0:c1:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Mar  5 17:44:29 2024 GMT
            Not After : Mar  4 17:49:29 2025 GMT
        Subject: CN=058A298DFE3322A7BD9A79CDDB8CA2D6F48384F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7b:ae:1a:bd:c8:4c:7a:ab:7f:b2:60:c4:70:
                    31:65:62:7e:cc:f5:0d:7e:b8:d0:1c:1a:c0:9f:1f:
                    ee:d4:aa:d6:10:cf:a2:8d:7f:ff:b1:10:50:45:d9:
                    63:d4:fa:62:47:5e:49:2a:5b:65:6a:6d:11:97:ca:
                    2f:ca:3a:83:f6:ca:fe:ee:f1:7d:8b:7f:1c:33:e2:
                    86:90:a0:2a:75:80:bd:92:f8:7b:8f:02:ba:b6:4e:
                    d8:5d:a6:d7:ad:e7:95:98:11:23:54:2c:37:b2:dc:
                    3e:73:7e:f4:d5:31:f4:b7:ef:4f:e0:15:e8:e4:b4:
                    12:21:23:ed:55:66:e6:5d:b8:bf:37:42:1e:f4:ce:
                    ef:0c:e3:9e:a5:18:61:b9:92:ac:05:8f:a5:34:a1:
                    db:f3:c4:ee:05:06:cf:1c:cc:b2:3b:de:85:a0:f5:
                    19:d0:5b:fc:cf:03:5c:a6:df:1f:38:68:58:e8:a2:
                    d8:1c:a4:b5:3a:6b:d0:18:fc:74:38:0e:4e:e4:22:
                    9e:0e:24:72:ac:28:87:a5:8d:7a:71:9e:71:e8:23:
                    b6:84:7f:96:67:bc:53:6c:2b:47:d4:fd:8d:12:59:
                    59:4a:28:ee:42:a2:46:8c:26:29:ef:8c:a1:d0:5c:
                    7f:9b:bc:c7:7b:59:ec:71:3d:2d:fd:24:2e:cf:d5:
                    38:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8A:29:8D:FE:33:22:A7:BD:9A:79:CD:DB:8C:A2:D6:F4:83:84:F7
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e37322e302f32312d3234203d3e203237393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:cb:cc:e7:97:c2:73:d9:ff:ee:c5:84:32:d9:96:9c:92:18:
         b0:ca:51:ec:30:b2:6f:55:09:f5:79:d5:3c:19:38:fa:7c:6b:
         5f:94:78:5f:7b:d1:b0:fb:68:16:1f:ce:c5:38:6f:0a:be:7c:
         23:3d:b7:fa:fc:74:71:b8:43:01:db:c6:e6:9c:1d:ef:b3:7d:
         b3:5d:88:f5:c8:9b:76:02:34:d5:ec:2c:5c:96:a2:23:16:01:
         55:dc:7f:9c:1e:a5:1d:02:f7:27:89:03:c1:22:b2:c4:33:79:
         79:46:0f:ef:7b:72:fd:bd:86:de:2b:df:de:fe:37:53:f2:1d:
         60:3c:5c:43:3a:16:78:6d:ae:5a:53:4b:f1:ed:07:16:96:1d:
         d5:d9:45:b4:80:69:53:5e:37:81:80:d7:ae:6f:39:76:2d:72:
         38:c0:3c:bc:32:f0:87:e1:41:d4:ce:0c:e5:73:ec:28:98:41:
         c1:8c:90:45:2e:34:50:82:61:33:0c:c5:0d:c4:fa:e3:df:f6:
         75:a4:53:4b:3f:2b:02:17:1e:0d:c9:29:37:c9:e2:90:d4:13:
         d2:1b:a8:1d:65:6f:c9:ed:40:4e:51:b4:09:ca:76:2b:fd:74:
         58:e3:08:e5:d7:4b:91:9f:19:c7:6a:bd:71:d7:8a:f3:dc:26:
         84:f1:60:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org