Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36382e302f32342d3234203d3e20323731393336.roa
File:                     36362e3233312e36382e302f32342d3234203d3e20323731393336.roa (raw, json)
Hash identifier:          kINrIEeF8N7S9/0oneRcBYKRAcHWo1w0pIci+1Gl4Go=
Subject key identifier:   09:A1:87:AC:13:0E:BF:6C:16:BB:19:05:ED:99:8A:7F:59:70:33:3B
Certificate issuer:       /CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Certificate serial:       567B6C87350FE305F358ACDC9235F1473393B226
Authority key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36382e302f32342d3234203d3e20323731393336.roa
Signing time:             Tue 04 Feb 2025 18:39:37 +0000
ROA not before:           Tue 04 Feb 2025 18:34:37 +0000
ROA not after:            Tue 03 Feb 2026 18:39:37 +0000
asID:                     271936
IP address blocks:        66.231.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:7b:6c:87:35:0f:e3:05:f3:58:ac:dc:92:35:f1:47:33:93:b2:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
        Validity
            Not Before: Feb  4 18:34:37 2025 GMT
            Not After : Feb  3 18:39:37 2026 GMT
        Subject: CN=09A187AC130EBF6C16BB1905ED998A7F5970333B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:03:c7:ce:81:ac:a1:f3:5f:e3:c5:c9:76:ef:
                    93:29:43:21:65:1a:18:a5:5d:22:08:78:01:91:3e:
                    92:fb:01:50:88:57:c0:db:5d:6a:65:f9:f5:cf:44:
                    56:0c:03:9b:2a:54:dc:67:50:37:30:0d:4b:36:aa:
                    4a:65:16:b1:55:5f:26:0c:a9:23:87:e8:0c:4c:ae:
                    bd:ba:c7:1c:26:c4:b7:e8:9f:29:d1:f6:79:80:b5:
                    03:0c:c4:56:d1:1d:88:75:d5:5d:3d:2e:db:72:6b:
                    4b:0f:de:54:9b:26:92:8c:bf:e0:00:c1:e6:00:5f:
                    d6:6b:6e:ab:77:3f:04:cc:cd:f4:14:19:4c:52:a7:
                    9e:cb:fe:d7:b9:68:ac:04:ac:40:03:a5:3b:02:2a:
                    54:fe:5b:98:a3:54:72:b9:8b:4e:e1:02:89:b6:8c:
                    a8:1c:db:b3:01:79:44:df:8e:80:a8:aa:89:d9:0c:
                    5e:b7:67:91:4c:e7:52:75:e5:c2:b4:36:b1:9f:94:
                    9c:d7:1f:1d:0b:37:63:82:0f:04:66:fe:16:89:fc:
                    9e:70:ed:41:a9:61:1a:90:cf:a2:a1:c1:1f:dd:94:
                    64:72:fc:61:38:04:c5:79:f0:64:9d:22:39:6f:79:
                    10:65:72:05:0b:de:82:16:1b:a0:69:de:b5:6d:2f:
                    95:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A1:87:AC:13:0E:BF:6C:16:BB:19:05:ED:99:8A:7F:59:70:33:3B
            X509v3 Authority Key Identifier:
                keyid:C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36382e302f32342d3234203d3e20323731393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:29:4b:2f:85:fb:11:c4:29:50:25:a2:67:96:d1:aa:bb:b1:
         c8:7e:84:bf:1c:56:a3:c8:ea:09:f1:21:52:0b:12:2e:97:98:
         d7:f4:a3:00:cd:3c:c6:f3:56:52:11:ad:34:5b:79:2f:4f:22:
         84:37:31:5e:cd:01:53:42:ab:8b:5b:e7:2a:69:c4:ed:a0:ff:
         0a:5c:56:b9:58:f4:5c:1e:5b:45:ff:b6:51:83:01:09:21:af:
         15:93:c1:d4:60:1d:67:c6:0d:68:2b:05:9d:56:cb:87:11:60:
         32:f9:fe:d9:47:ab:53:54:35:5f:24:e5:9a:6f:27:76:a7:7a:
         4c:9a:56:0d:93:13:ee:69:47:e8:58:ed:d1:c1:e5:dc:b0:d9:
         11:d4:d4:ba:db:8c:3a:d0:60:27:0a:4e:e5:15:2c:36:cf:1e:
         93:81:46:f9:18:76:c1:33:4f:3f:aa:db:9c:78:a9:77:1a:ad:
         5d:d1:37:b2:44:b8:ec:55:46:4b:e0:49:87:08:d0:dd:12:89:
         bd:1c:f5:93:7a:94:ea:51:53:81:0f:a4:dc:d2:97:4c:53:20:
         7a:d7:7e:3d:ef:c9:fc:f1:e7:a1:99:c8:88:ad:9a:0e:8c:22:
         d3:87:37:70:3a:b7:d6:03:3a:63:72:1b:1b:08:c2:2f:4c:5a:
         20:58:cf:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:31:38 2025 by rpki-client