Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS23360.roa
File:                     AS23360.roa (raw, json)
Hash identifier:          kgI6BASdZ3TdcjHPvzBtO+OR/qs5atQ4Efd11QUuA34=
Subject key identifier:   38:24:D3:6A:8F:E1:07:CF:04:08:01:3E:3A:E3:44:62:48:35:59:64
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       64A86BE181F499037B52A6D4DEE0956091FB933C
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS23360.roa
Signing time:             Tue 04 Feb 2025 18:02:42 +0000
ROA not before:           Tue 04 Feb 2025 17:57:42 +0000
ROA not after:            Tue 03 Feb 2026 18:02:42 +0000
asID:                     23360
IP address blocks:        200.46.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a8:6b:e1:81:f4:99:03:7b:52:a6:d4:de:e0:95:60:91:fb:93:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Feb  4 17:57:42 2025 GMT
            Not After : Feb  3 18:02:42 2026 GMT
        Subject: CN=3824D36A8FE107CF0408013E3AE3446248355964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b8:af:36:a0:51:0b:04:57:32:6a:35:a1:b7:
                    b9:51:3b:16:cf:c4:2c:51:1b:03:d1:04:cf:c7:4b:
                    0d:f7:83:93:d3:29:99:db:08:28:10:34:bb:d4:97:
                    a3:5b:b1:50:10:fa:b2:c8:01:91:55:20:c2:00:5e:
                    66:37:6a:f4:03:cb:3f:f7:cd:f3:37:26:b4:a7:f3:
                    29:74:91:b1:c8:33:a1:73:24:b5:3a:47:c2:7a:bc:
                    29:2a:b1:5f:b7:4e:1e:20:86:ea:3b:dc:84:77:7c:
                    43:cd:70:1b:84:9b:fd:a9:78:8f:b0:82:0e:3d:a4:
                    12:37:02:2e:6a:d7:a9:68:39:dd:30:b8:d8:f6:16:
                    f5:fe:4b:1d:07:79:57:b3:2a:d6:f9:df:83:40:b4:
                    70:ba:24:dc:82:a6:59:04:43:86:63:d0:4e:f8:91:
                    77:3c:26:3d:b3:f7:fa:d7:39:42:c3:00:e5:9f:93:
                    09:c6:bc:aa:82:03:65:f0:ad:34:4d:75:b1:b7:cf:
                    bd:c5:b6:29:21:7b:47:a7:21:30:e7:42:70:ab:77:
                    0b:31:2d:7e:7e:af:89:5d:cc:1f:f8:dd:68:d7:a6:
                    03:26:1f:18:08:ab:87:29:f2:fa:08:f0:78:68:61:
                    57:93:78:19:2e:33:5c:ed:73:e1:38:3f:88:66:36:
                    5c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:24:D3:6A:8F:E1:07:CF:04:08:01:3E:3A:E3:44:62:48:35:59:64
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS23360.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:d3:35:59:54:ee:3a:76:16:f5:d2:b7:c7:76:3a:66:22:d0:
         0e:f6:ad:bc:06:9e:e7:bb:44:99:55:35:ce:bf:da:c4:23:84:
         57:18:22:7d:6e:6a:64:26:54:df:26:f3:59:d5:e5:60:1b:d8:
         24:64:0b:8d:05:a1:02:39:1f:f5:c0:ea:aa:8a:fb:73:3f:14:
         73:5a:bd:2f:b8:95:ca:f1:35:bf:79:40:89:30:0d:b1:5e:a6:
         8a:cd:12:ec:b3:7a:c0:57:72:9f:16:76:48:db:af:c2:4b:a9:
         8c:ca:e0:fd:0e:bd:59:4b:67:f1:de:f6:8a:d1:f8:d3:8c:e6:
         25:eb:f0:8e:12:b3:85:75:4b:fc:a0:44:87:8f:91:ab:e7:9d:
         51:3a:74:74:49:eb:bb:21:fd:67:5a:aa:13:d8:10:5e:8b:da:
         8b:5d:2c:fe:ac:dc:17:f6:02:07:e8:25:4b:b7:59:db:8b:9a:
         70:04:84:2f:d2:93:f7:90:a6:f6:1b:14:8a:55:64:98:df:7a:
         ae:c4:69:c7:e0:42:90:14:62:b4:c0:f6:ca:c7:ec:67:de:f9:
         df:f5:10:5c:83:4a:14:6b:65:24:d7:ef:b1:5d:40:52:ce:28:
         ac:c6:04:40:c8:92:54:8f:78:12:d7:14:65:90:71:24:1d:ca:
         90:38:df:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:59:29 2025 by rpki-client