Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e37372e302f32342d3234203d3e20323731383835.roa
File:                     3136382e3233342e37372e302f32342d3234203d3e20323731383835.roa (raw, json)
Hash identifier:          ro0DAgLcHVMJG4EHs9V/9v7R08I/ZCwzL2niM0Q0ad4=
Subject key identifier:   AE:FD:AA:4F:11:37:60:E8:73:53:46:58:40:41:95:72:AB:23:6D:4F
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       7E75455B657434E0C6A612CA7088C8C1F91A0DA1
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e37372e302f32342d3234203d3e20323731383835.roa
Signing time:             Tue 05 Mar 2024 17:49:18 +0000
ROA not before:           Tue 05 Mar 2024 17:44:18 +0000
ROA not after:            Tue 04 Mar 2025 17:49:18 +0000
asID:                     271885
IP address blocks:        168.234.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:75:45:5b:65:74:34:e0:c6:a6:12:ca:70:88:c8:c1:f9:1a:0d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Mar  5 17:44:18 2024 GMT
            Not After : Mar  4 17:49:18 2025 GMT
        Subject: CN=AEFDAA4F113760E87353465840419572AB236D4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:50:be:c2:ce:77:b1:0c:86:c4:36:29:ec:1f:
                    a5:09:1e:61:f8:a0:4a:a6:e2:79:a2:a6:77:85:d6:
                    9a:f2:0e:41:fc:40:af:ea:c7:01:a2:7f:f5:48:10:
                    09:e9:1f:e4:b0:f7:fd:a6:99:d2:72:cd:00:3c:d3:
                    05:0f:bb:7c:57:11:4c:54:3d:2e:02:c2:17:16:be:
                    79:82:a2:47:e2:6f:97:49:ce:8c:ed:9d:c5:72:c2:
                    50:56:c6:8c:82:f7:9c:ae:7e:67:31:9e:4e:a2:d8:
                    5f:a8:d9:b0:7a:d3:48:b3:47:ec:e7:21:21:a6:bc:
                    4c:e9:3e:4c:27:06:2f:eb:c2:1c:26:78:a3:d3:b0:
                    af:d8:2c:f8:14:92:da:77:5e:34:bc:ef:bf:4e:4b:
                    b9:61:de:3c:45:bd:f1:34:9b:5c:ed:5a:94:26:f5:
                    cc:73:fc:b8:8f:b1:a4:ed:e3:a5:97:63:44:ec:ca:
                    9a:38:a7:ee:61:f6:5a:56:58:11:16:8e:1a:91:a2:
                    4a:ac:4f:e6:72:be:ab:54:48:64:10:b3:10:80:b9:
                    ed:c4:0c:83:60:d1:33:68:bd:12:72:d2:76:72:48:
                    c3:dc:6c:cd:4c:90:56:7f:c1:c4:81:1a:a6:1f:76:
                    79:d2:99:b6:25:1f:d7:56:de:8e:cf:3d:64:d0:ab:
                    0b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FD:AA:4F:11:37:60:E8:73:53:46:58:40:41:95:72:AB:23:6D:4F
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e37372e302f32342d3234203d3e20323731383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:5d:78:da:38:c1:ab:55:01:62:8c:fb:53:54:c5:a1:de:be:
         c6:83:34:9e:9a:e0:9e:1d:a0:f1:c7:d1:97:df:77:af:f6:38:
         2f:ca:67:8c:08:4c:ae:34:cb:99:d1:d7:6a:33:55:e9:57:d9:
         27:96:99:14:0b:c7:47:5d:4c:78:f0:50:c2:14:77:e0:90:e6:
         c4:96:57:db:68:b1:55:87:b8:1c:fa:1d:e6:21:e3:19:21:cc:
         75:6f:a8:62:59:f3:78:e8:a1:69:49:0a:3d:67:53:54:94:ae:
         8f:8f:f5:e1:25:cf:d5:79:63:31:ae:ca:b2:c4:00:18:25:72:
         74:1f:60:2b:5d:6e:d4:3d:64:16:93:b7:a3:b7:1f:39:01:ce:
         8d:57:5e:0b:26:bc:b0:de:3a:42:11:be:08:00:ba:82:5d:bf:
         af:b5:2e:6e:00:55:05:1e:be:97:ed:98:5a:da:1a:25:b3:c3:
         33:4e:b8:6d:16:e0:90:21:54:80:4b:7d:a6:73:f8:7e:0b:e0:
         7a:b0:c9:4a:28:60:c2:f3:d3:4b:2f:c1:84:a2:ad:b8:47:dd:
         fb:a7:01:d3:73:9c:b9:b4:e2:ab:07:53:79:6f:05:8e:ae:ef:
         53:a5:6a:81:f8:a8:15:59:c0:37:51:78:83:2e:f7:66:21:77:
         e2:dc:d1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org