Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e37352e302f32342d3234203d3e20323733303431.roa
File:                     3136382e3233342e37352e302f32342d3234203d3e20323733303431.roa (raw, json)
Hash identifier:          bL7iAveCnzTVkl7452wbEbkZzmpx2iK5PH/kwXfhV3M=
Subject key identifier:   4D:58:C6:20:D9:D2:51:D5:8C:0A:A1:AA:38:FB:6A:64:A8:C3:DD:86
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       023C9639AD74E029D97551E38E20A28B0A4169CD
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e37352e302f32342d3234203d3e20323733303431.roa
Signing time:             Tue 04 Feb 2025 17:59:37 +0000
ROA not before:           Tue 04 Feb 2025 17:54:37 +0000
ROA not after:            Tue 03 Feb 2026 17:59:37 +0000
asID:                     273041
IP address blocks:        168.234.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:3c:96:39:ad:74:e0:29:d9:75:51:e3:8e:20:a2:8b:0a:41:69:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Feb  4 17:54:37 2025 GMT
            Not After : Feb  3 17:59:37 2026 GMT
        Subject: CN=4D58C620D9D251D58C0AA1AA38FB6A64A8C3DD86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9a:76:95:08:41:2e:72:fd:18:ae:47:f2:73:
                    9f:60:48:b2:8f:4e:bc:91:04:8b:7b:32:6d:05:99:
                    24:cd:cf:23:ac:86:c9:cb:17:21:35:6a:53:7e:a9:
                    01:f7:f6:7e:5c:31:ad:3f:7a:da:f2:52:c9:d8:38:
                    6f:4f:02:ee:7b:9a:9e:e9:ec:f0:9b:eb:a9:6d:a4:
                    e5:ab:07:b2:be:d2:43:7c:89:73:f9:92:18:dc:b3:
                    5a:3f:06:bb:f5:5e:25:0e:b4:8d:0f:60:18:12:78:
                    d1:70:c8:36:07:c9:86:85:4c:50:e0:f5:95:a6:33:
                    a4:d4:a1:5c:d2:e6:e4:d7:d2:d5:52:22:4f:d7:6e:
                    87:13:73:d4:3a:3e:bd:81:1d:6f:61:ff:a0:61:1e:
                    0a:6c:c0:72:aa:4a:f0:da:be:88:1e:d1:e9:36:2e:
                    ef:9c:a5:1d:3a:7a:f3:2d:1c:ec:c0:00:c5:ed:e8:
                    59:32:0c:ff:1f:c6:41:a6:f8:95:4a:39:c3:42:9d:
                    ea:ab:8e:13:5f:92:26:e7:ba:57:b6:17:5e:b9:c4:
                    dd:e2:c0:d2:18:26:57:c4:8a:48:56:94:24:93:74:
                    cb:a5:cf:d2:e8:23:d2:fc:a0:08:0c:a4:e2:52:c2:
                    7f:e4:bd:d2:0e:e4:b9:da:ec:69:85:34:cf:4a:f8:
                    d3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:58:C6:20:D9:D2:51:D5:8C:0A:A1:AA:38:FB:6A:64:A8:C3:DD:86
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e37352e302f32342d3234203d3e20323733303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:20:c9:e7:50:ff:60:3a:9f:38:da:17:53:d9:23:ff:41:a2:
         d8:de:0b:8a:27:b7:7e:00:27:14:7b:33:51:d5:a7:02:55:7c:
         e5:a8:21:60:26:3e:15:da:04:d6:94:fe:5f:d2:24:4b:eb:06:
         2e:11:5f:cf:68:2d:8c:a0:b8:f4:65:dd:e9:59:bf:cd:ce:f9:
         2c:8b:77:da:27:44:14:02:ca:74:40:de:94:75:cc:ba:71:3d:
         75:5f:19:b1:ea:a3:d6:c3:ac:18:e4:dd:cd:93:be:bc:91:42:
         5e:9a:66:85:94:7e:3e:40:7d:78:0b:08:f6:44:3e:58:9e:95:
         00:5e:a4:87:49:19:0e:3f:1a:7f:50:ef:bd:1b:66:cf:a3:19:
         13:25:95:77:15:12:32:cc:d3:93:c5:80:ed:1c:2b:4c:60:5a:
         5d:50:cd:66:4a:55:e5:c6:a4:27:fe:dc:18:53:ec:b8:c8:54:
         68:43:1d:aa:08:f3:27:73:76:89:ac:31:cb:bc:97:5e:8b:b8:
         1f:be:8c:41:3c:e9:d9:cd:12:21:28:cb:d1:19:a8:de:6e:70:
         0f:d0:a7:e9:15:61:ae:4a:82:d8:64:1f:8c:91:aa:6b:77:a0:
         8e:f4:67:45:00:a2:7c:fd:83:c6:18:ad:e6:e0:4e:2a:33:34:
         69:74:5d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:21:12 2025 by rpki-client