Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36342e302f32332d3234203d3e20323730303439.roa
File:                     36362e3233312e36342e302f32332d3234203d3e20323730303439.roa (raw, json)
Hash identifier:          +UPQQmSPRwbxhs9Bwm1Kx9bqr2pBDDp5VTjQIy06jIU=
Subject key identifier:   34:25:F4:00:5A:80:B9:95:D2:A9:C1:6B:48:9F:39:FD:CD:F0:94:1E
Certificate issuer:       /CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Certificate serial:       41B47FCBC227D4674176ED14FCC7A73521698D12
Authority key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36342e302f32332d3234203d3e20323730303439.roa
Signing time:             Tue 05 Mar 2024 18:06:20 +0000
ROA not before:           Tue 05 Mar 2024 18:01:20 +0000
ROA not after:            Tue 04 Mar 2025 18:06:20 +0000
asID:                     270049
IP address blocks:        66.231.64.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b4:7f:cb:c2:27:d4:67:41:76:ed:14:fc:c7:a7:35:21:69:8d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
        Validity
            Not Before: Mar  5 18:01:20 2024 GMT
            Not After : Mar  4 18:06:20 2025 GMT
        Subject: CN=3425F4005A80B995D2A9C16B489F39FDCDF0941E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:35:7d:28:4e:31:02:99:22:f7:c7:ae:75:20:
                    ba:50:c7:8e:f3:1a:98:7e:0d:a1:e6:27:90:4d:c6:
                    0d:27:68:23:97:b1:00:9d:bb:61:17:5f:8f:a7:90:
                    a2:27:27:04:bb:64:0a:d8:9a:68:95:1d:e0:da:07:
                    02:1c:3b:fa:36:4b:4b:73:da:61:94:c7:38:5c:be:
                    9f:f0:63:8e:21:78:39:31:e2:0b:5f:71:30:2e:41:
                    59:93:a8:4a:cb:ee:0c:af:39:8b:46:cd:b0:6a:14:
                    36:bc:4c:90:42:9d:41:ed:e9:53:1b:d9:a1:d0:da:
                    e6:78:32:9e:10:92:dd:97:7b:7e:c3:03:44:56:1b:
                    f0:d6:21:e6:68:36:6c:5c:a7:c5:b6:bf:0f:e2:8e:
                    95:5c:e7:fc:db:86:86:ee:69:de:c6:2f:c8:1e:48:
                    20:08:e1:20:d9:84:c8:0d:c6:59:4a:ba:ac:55:92:
                    3d:2d:0b:b1:8b:02:23:f8:58:7b:11:b8:4d:1a:e4:
                    27:fd:22:35:a2:3e:82:9b:00:53:13:7f:07:5b:50:
                    f9:e5:f1:e4:28:f8:36:a8:93:12:41:87:47:4d:71:
                    a8:e2:c5:39:ba:91:b1:bf:6d:15:31:60:0a:4c:79:
                    f1:d4:4d:04:a4:1b:a2:7b:0e:fa:b2:c4:e0:41:8b:
                    ac:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:25:F4:00:5A:80:B9:95:D2:A9:C1:6B:48:9F:39:FD:CD:F0:94:1E
            X509v3 Authority Key Identifier:
                keyid:C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36342e302f32332d3234203d3e20323730303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:0d:62:91:91:16:7a:56:45:3a:82:4c:f6:96:eb:e6:1b:68:
         0a:f9:30:c2:28:c9:19:8e:f8:75:4c:dd:3a:cd:27:e1:19:e9:
         62:44:a7:46:66:08:1d:a2:eb:d7:e0:d3:c5:4c:25:a1:15:56:
         6c:2f:6a:42:b3:2b:fd:b1:c9:2b:f0:bf:74:3b:85:1f:ff:31:
         37:e8:f9:f5:4d:87:9f:1d:f6:fb:a9:ab:05:91:8f:14:95:83:
         68:42:cb:f4:ee:40:ab:a6:9c:e7:07:88:34:4c:c4:61:25:39:
         93:74:c7:73:cc:f0:c8:f7:f5:57:20:47:51:f5:31:2c:17:15:
         f9:cd:14:1f:57:b7:2a:47:7d:d7:cf:cf:27:1b:6d:5f:7c:84:
         55:0c:35:96:2f:28:36:29:e0:b9:d5:2d:0d:92:32:9b:99:af:
         49:c5:c9:14:3b:2f:ff:f7:c4:5a:3c:d6:4a:83:2d:56:04:2b:
         d1:38:8c:cf:47:2b:5c:f4:ca:b6:58:c7:ac:cd:e1:17:98:70:
         a6:da:9d:8f:f6:37:02:e2:74:a3:52:36:54:4c:df:35:9e:6f:
         1d:6d:db:8d:24:f7:1e:7f:0b:35:bf:2f:51:2e:a1:f2:ad:ee:
         75:ea:1f:9f:65:64:0e:5f:4e:30:a8:f7:01:62:49:db:48:dd:
         dc:f3:87:ca
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQbR/y8In1GdBdu0U/MenNSFpjRIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI5NjdGRjMxMDlFMEFBN0VFNUVDMUM2NDAzMDBENUEw
MEZGNDFCMDAeFw0yNDAzMDUxODAxMjBaFw0yNTAzMDQxODA2MjBaMDMxMTAvBgNV
BAMTKDM0MjVGNDAwNUE4MEI5OTVEMkE5QzE2QjQ4OUYzOUZEQ0RGMDk0MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyNX0oTjECmSL3x651ILpQx47z
Gph+DaHmJ5BNxg0naCOXsQCdu2EXX4+nkKInJwS7ZArYmmiVHeDaBwIcO/o2S0tz
2mGUxzhcvp/wY44heDkx4gtfcTAuQVmTqErL7gyvOYtGzbBqFDa8TJBCnUHt6VMb
2aHQ2uZ4Mp4Qkt2Xe37DA0RWG/DWIeZoNmxcp8W2vw/ijpVc5/zbhobuad7GL8ge
SCAI4SDZhMgNxllKuqxVkj0tC7GLAiP4WHsRuE0a5Cf9IjWiPoKbAFMTfwdbUPnl
8eQo+DaokxJBh0dNcajixTm6kbG/bRUxYApMefHUTQSkG6J7DvqyxOBBi6wPAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUNCX0AFqAuZXSqcFrSJ85/c3wlB4wHwYDVR0j
BBgwFoAUwpZ/8xCeCqfuXsHGQDANWgD/QbAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQTEwNEQ3Nzc3QjAyOUVEQTc4MkRBQTZBNkY3NDM0RkRC
Nzc3Q0U2OEEwOTQ5Nzk3ODE0NjRFQzU5RkY4QTlBLzAvQzI5NjdGRjMxMDlFMEFB
N0VFNUVDMUM2NDAzMDBENUEwMEZGNDFCMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMjk2N0ZGMzEwOUUwQUE3RUU1
RUMxQzY0MDMwMEQ1QTAwRkY0MUIwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREExMDRENzc3N0IwMjlFREE3ODJEQUE2QTZGNzQzNEZEQjc3N0NFNjhB
MDk0OTc5NzgxNDY0RUM1OUZGOEE5QS8wLzM2MzYyZTMyMzMzMTJlMzYzNDJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzczMDMwMzQzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAULnQDAN
BgkqhkiG9w0BAQsFAAOCAQEAmg1ikZEWelZFOoJM9pbr5htoCvkwwijJGY74dUzd
Os0n4RnpYkSnRmYIHaLr1+DTxUwloRVWbC9qQrMr/bHJK/C/dDuFH/8xN+j59U2H
nx32+6mrBZGPFJWDaELL9O5Aq6ac5weINEzEYSU5k3THc8zwyPf1VyBHUfUxLBcV
+c0UH1e3Kkd918/PJxttX3yEVQw1li8oNingudUtDZIym5mvScXJFDsv//fEWjzW
SoMtVgQr0TiMz0crXPTKtljHrM3hF5hwptqdj/Y3AuJ0o1I2VEzfNZ5vHW3bjST3
Hn8LNb8vUS6h8q3udeofn2VkDl9OMKj3AWJJ20jd3POHyg==
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:13 2024 by rpki-client on console-fra.rpki-client.org