Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36342e302f32302d3234203d3e203233303331.roa
File:                     36362e3233312e36342e302f32302d3234203d3e203233303331.roa (raw, json)
Hash identifier:          WS/N+VUeXkZ34B8dWmz7MmQkT4wetN93ijNaDzd3Eo4=
Subject key identifier:   9D:19:2D:B8:83:61:AA:DA:D0:CB:15:B7:E3:64:71:E6:1C:84:FE:93
Certificate issuer:       /CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Certificate serial:       1081981063B43FEB5BC24C127AC0DC68F28623D6
Authority key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36342e302f32302d3234203d3e203233303331.roa
Signing time:             Tue 05 Mar 2024 18:06:23 +0000
ROA not before:           Tue 05 Mar 2024 18:01:23 +0000
ROA not after:            Tue 04 Mar 2025 18:06:23 +0000
asID:                     23031
IP address blocks:        66.231.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:81:98:10:63:b4:3f:eb:5b:c2:4c:12:7a:c0:dc:68:f2:86:23:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
        Validity
            Not Before: Mar  5 18:01:23 2024 GMT
            Not After : Mar  4 18:06:23 2025 GMT
        Subject: CN=9D192DB88361AADAD0CB15B7E36471E61C84FE93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f5:56:a6:cc:76:00:8b:76:47:36:18:02:c9:
                    56:70:8f:e8:6c:98:71:2b:f8:06:ad:99:a3:4f:6c:
                    76:d4:62:c1:a6:09:cc:97:fd:4c:6e:be:88:5c:5e:
                    59:af:e9:b2:06:c9:fb:f5:79:b0:ae:07:e1:c7:22:
                    10:ae:a5:26:84:14:68:1e:ea:53:44:2b:0f:62:9d:
                    06:74:0b:ac:aa:63:be:3c:24:04:06:37:47:4f:19:
                    35:4c:c5:e8:9a:fe:ec:69:5b:7b:dc:1b:3b:a3:2b:
                    f0:fe:23:1e:23:6a:02:d3:88:2a:46:bd:9c:ce:87:
                    2a:8f:bd:2a:0b:c9:87:c8:bf:af:72:d9:2b:2f:a6:
                    52:e8:b8:52:2e:5d:7e:90:94:61:b8:5f:0d:dc:3c:
                    cc:bd:21:52:31:b2:01:34:7f:57:c0:21:9f:d5:fc:
                    d9:b7:40:00:14:7c:4a:f2:a6:35:2a:14:81:33:85:
                    e3:f3:02:6e:a7:cc:9e:f3:04:18:88:a4:37:12:0a:
                    b2:8c:32:92:61:1a:15:f2:ff:b9:15:ea:e8:d3:82:
                    e6:71:b9:55:00:7d:fa:8c:bd:d4:87:37:26:7e:6a:
                    45:f7:e0:ab:ba:e7:07:e3:4b:d6:aa:80:12:aa:ea:
                    26:c5:dc:fa:40:b8:8f:0e:77:4c:3d:da:7a:d4:68:
                    8d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:19:2D:B8:83:61:AA:DA:D0:CB:15:B7:E3:64:71:E6:1C:84:FE:93
            X509v3 Authority Key Identifier:
                keyid:C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36342e302f32302d3234203d3e203233303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         aa:e3:18:c2:4e:8f:c5:2a:c1:fb:2d:a9:43:1e:23:5e:c5:ae:
         30:53:4b:79:1e:c9:32:41:22:a9:2e:3e:f6:76:a2:d9:76:57:
         92:0d:0d:23:90:9a:66:98:8a:f4:03:1e:0b:41:fa:f5:dc:60:
         81:2d:f5:a2:14:94:1b:7f:85:ca:96:e2:2c:d4:79:b5:80:a1:
         63:cd:40:b4:21:93:41:d9:a0:9b:93:ec:90:30:fd:26:fb:40:
         40:0e:c1:bf:b3:77:12:0a:b2:f1:ab:6e:79:bd:1d:fd:15:cb:
         f7:78:97:a0:33:58:47:03:7b:b6:c1:e1:7b:0f:4d:1f:95:d4:
         ae:2d:93:3f:4c:41:ef:5a:ff:ea:1e:ec:98:1e:b3:a3:71:8b:
         c1:58:3f:9a:49:fc:88:cd:1e:48:6d:bd:d0:b3:52:91:5d:b4:
         1c:df:d5:fc:fa:a0:04:f5:c9:d3:75:5e:01:cc:8f:b8:5b:68:
         f2:d3:68:67:3f:3d:69:c2:dd:56:f6:84:57:d7:d7:ff:8e:d4:
         6b:1b:1f:09:f0:06:ac:80:ca:dd:33:37:04:a1:80:ea:f6:86:
         38:64:55:c3:e0:46:a1:58:78:89:64:37:a3:7e:0f:34:8a:f8:
         d6:75:2d:ba:34:56:58:30:70:95:56:30:aa:48:28:5d:56:15:
         54:a8:01:1d
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUEIGYEGO0P+tbwkwSesDcaPKGI9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI5NjdGRjMxMDlFMEFBN0VFNUVDMUM2NDAzMDBENUEw
MEZGNDFCMDAeFw0yNDAzMDUxODAxMjNaFw0yNTAzMDQxODA2MjNaMDMxMTAvBgNV
BAMTKDlEMTkyREI4ODM2MUFBREFEMENCMTVCN0UzNjQ3MUU2MUM4NEZFOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo9VamzHYAi3ZHNhgCyVZwj+hs
mHEr+AatmaNPbHbUYsGmCcyX/UxuvohcXlmv6bIGyfv1ebCuB+HHIhCupSaEFGge
6lNEKw9inQZ0C6yqY748JAQGN0dPGTVMxeia/uxpW3vcGzujK/D+Ix4jagLTiCpG
vZzOhyqPvSoLyYfIv69y2SsvplLouFIuXX6QlGG4Xw3cPMy9IVIxsgE0f1fAIZ/V
/Nm3QAAUfErypjUqFIEzhePzAm6nzJ7zBBiIpDcSCrKMMpJhGhXy/7kV6ujTguZx
uVUAffqMvdSHNyZ+akX34Ku65wfjS9aqgBKq6ibF3PpAuI8Od0w92nrUaI01AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUnRktuINhqtrQyxW342Rx5hyE/pMwHwYDVR0j
BBgwFoAUwpZ/8xCeCqfuXsHGQDANWgD/QbAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQTEwNEQ3Nzc3QjAyOUVEQTc4MkRBQTZBNkY3NDM0RkRC
Nzc3Q0U2OEEwOTQ5Nzk3ODE0NjRFQzU5RkY4QTlBLzAvQzI5NjdGRjMxMDlFMEFB
N0VFNUVDMUM2NDAzMDBENUEwMEZGNDFCMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMjk2N0ZGMzEwOUUwQUE3RUU1
RUMxQzY0MDMwMEQ1QTAwRkY0MUIwLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREExMDRENzc3N0IwMjlFREE3ODJEQUE2QTZGNzQzNEZEQjc3N0NFNjhB
MDk0OTc5NzgxNDY0RUM1OUZGOEE5QS8wLzM2MzYyZTMyMzMzMTJlMzYzNDJlMzAy
ZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzMzMDMzMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARC50AwDQYJ
KoZIhvcNAQELBQADggEBAKrjGMJOj8UqwfstqUMeI17FrjBTS3keyTJBIqkuPvZ2
otl2V5INDSOQmmaYivQDHgtB+vXcYIEt9aIUlBt/hcqW4izUebWAoWPNQLQhk0HZ
oJuT7JAw/Sb7QEAOwb+zdxIKsvGrbnm9Hf0Vy/d4l6AzWEcDe7bB4XsPTR+V1K4t
kz9MQe9a/+oe7Jges6Nxi8FYP5pJ/IjNHkhtvdCzUpFdtBzf1fz6oAT1ydN1XgHM
j7hbaPLTaGc/PWnC3Vb2hFfX1/+O1GsbHwnwBqyAyt0zNwShgOr2hjhkVcPgRqFY
eIlkN6N+DzSK+NZ1Lbo0VlgwcJVWMKpIKF1WFVSoAR0=
-----END CERTIFICATE-----
Generated at Mon May 6 20:16:40 2024 by rpki-client on console-ams.rpki-client.org