Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36392e302f32342d3234203d3e20323637363939.roa
File:                     36362e3233312e36392e302f32342d3234203d3e20323637363939.roa (raw, json)
Hash identifier:          Gy4VhCVXXGuHoT+GFpdvSjCd/vHG7UR14j4ihY/CkNE=
Subject key identifier:   90:10:7B:62:9E:8C:A8:76:97:44:1A:93:77:DC:82:32:61:00:35:B9
Certificate issuer:       /CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Certificate serial:       406036B0B0DBFBEA16461634647D7015B1180CE0
Authority key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36392e302f32342d3234203d3e20323637363939.roa
Signing time:             Tue 05 Mar 2024 18:06:20 +0000
ROA not before:           Tue 05 Mar 2024 18:01:20 +0000
ROA not after:            Tue 04 Mar 2025 18:06:20 +0000
asID:                     267699
IP address blocks:        66.231.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:60:36:b0:b0:db:fb:ea:16:46:16:34:64:7d:70:15:b1:18:0c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
        Validity
            Not Before: Mar  5 18:01:20 2024 GMT
            Not After : Mar  4 18:06:20 2025 GMT
        Subject: CN=90107B629E8CA87697441A9377DC8232610035B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b1:bf:da:22:b1:28:e3:74:9b:75:9d:6c:76:
                    87:07:19:01:85:35:0f:9d:bc:1a:1b:f9:0a:53:ef:
                    96:0d:74:3b:15:74:ae:1f:b7:59:7d:00:9a:8c:4e:
                    a0:41:d6:f3:67:20:e6:4c:0a:8f:46:1f:a6:7b:67:
                    cf:57:55:16:a1:6e:8e:73:01:f2:af:e8:48:2e:2a:
                    28:4e:96:68:9e:7e:7e:f0:7b:21:28:cc:93:a7:ca:
                    7d:24:46:ef:6a:0d:23:92:91:ec:29:f9:7c:0c:ec:
                    7b:59:4d:ae:b2:6f:0f:a2:1c:b1:96:44:29:fe:72:
                    c6:0b:56:51:a1:6c:89:2a:9c:b2:08:5c:43:f4:81:
                    7d:66:3e:77:6d:d6:a8:87:20:8a:c9:3b:cc:17:bb:
                    29:12:05:df:38:de:b1:dc:92:6b:1c:f3:76:19:b4:
                    f4:bc:8d:12:7f:fc:e7:54:8e:03:f6:1c:0c:99:73:
                    66:0a:ac:dc:d3:53:90:2c:b2:da:79:93:c1:85:a8:
                    2d:3b:c7:d7:f7:c7:38:51:62:83:e3:60:3d:98:b1:
                    0d:92:55:4c:ce:64:3f:ce:d9:b2:20:55:a0:4c:f0:
                    8f:ea:38:44:87:c7:2f:8b:06:53:53:c9:69:47:33:
                    9e:e5:22:89:ef:da:7e:60:14:64:ff:83:75:29:fd:
                    04:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:10:7B:62:9E:8C:A8:76:97:44:1A:93:77:DC:82:32:61:00:35:B9
            X509v3 Authority Key Identifier:
                keyid:C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36392e302f32342d3234203d3e20323637363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:d1:b3:2e:b6:d1:1c:b9:e1:5d:03:58:60:88:1b:8e:3a:17:
         bc:1b:8e:14:5b:c1:af:2b:5e:6e:18:50:61:7f:c8:df:57:08:
         53:c2:27:53:7d:99:95:91:cd:7d:b0:2e:8a:e1:6b:84:f5:96:
         bd:36:65:51:1b:a1:83:a2:d5:02:f0:23:8e:ff:98:75:41:19:
         37:d8:4e:ef:bf:c9:51:1d:fa:d4:07:27:e4:9b:cc:76:42:8c:
         3d:51:bd:28:12:3c:9f:c7:35:78:11:14:8a:0c:ee:84:f1:40:
         78:eb:a2:3a:23:70:f9:30:e9:2c:d4:8e:ac:98:b8:4a:20:9f:
         f6:7c:3d:59:1c:4e:86:66:3b:3e:df:7a:07:04:2e:e3:2f:29:
         bb:95:fc:34:83:87:bb:6e:1e:4a:d6:47:8c:f2:4b:24:c5:0c:
         76:6e:c3:74:f0:1f:ee:7f:29:b6:df:91:c4:93:a3:5e:2f:eb:
         71:ae:c1:61:5a:f2:d0:a8:9d:4f:b7:02:6c:fe:25:48:e8:3c:
         e3:f6:54:4a:89:e3:35:8c:8e:df:99:a5:91:6a:6a:b6:13:45:
         d0:cb:71:8c:f6:99:e5:27:ec:af:f6:64:ed:07:ee:1a:ce:26:
         fb:e5:bc:15:0a:1b:00:0c:1e:8b:19:84:39:15:ca:69:f7:bd:
         c0:20:82:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:13 2024 by rpki-client on console-fra.rpki-client.org