Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37312e302f32342d3234203d3e20323637363939.roa
File:                     36362e3233312e37312e302f32342d3234203d3e20323637363939.roa (raw, json)
Hash identifier:          24D92h+X1Irttt9jsy8oXEamktNoetZ4BONyOwWLVtM=
Subject key identifier:   3E:27:45:C0:EB:8A:3C:44:9F:59:77:1C:B8:0C:95:7D:05:F3:D2:DA
Certificate issuer:       /CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Certificate serial:       2D6B3095DEB965217ADFD38E6739EC7850842857
Authority key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37312e302f32342d3234203d3e20323637363939.roa
Signing time:             Tue 05 Mar 2024 18:06:21 +0000
ROA not before:           Tue 05 Mar 2024 18:01:21 +0000
ROA not after:            Tue 04 Mar 2025 18:06:21 +0000
asID:                     267699
IP address blocks:        66.231.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6b:30:95:de:b9:65:21:7a:df:d3:8e:67:39:ec:78:50:84:28:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
        Validity
            Not Before: Mar  5 18:01:21 2024 GMT
            Not After : Mar  4 18:06:21 2025 GMT
        Subject: CN=3E2745C0EB8A3C449F59771CB80C957D05F3D2DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0c:70:9a:42:c8:6f:1b:10:42:bf:7e:bd:f8:
                    9a:43:3c:44:cc:95:7d:dd:ed:80:8a:85:a1:d7:4a:
                    f9:fa:cb:a7:dc:4f:26:34:e7:90:a8:6c:44:54:82:
                    25:2a:43:12:40:3e:73:66:01:33:f3:40:3c:a3:16:
                    05:5f:39:8d:41:c1:eb:40:72:a5:96:27:de:a6:cd:
                    e9:6b:3c:03:ae:10:ae:22:fd:c6:5e:47:af:1c:1a:
                    49:66:aa:da:92:d4:3e:84:ea:6e:b3:af:58:d0:c6:
                    d2:aa:d3:fb:72:7f:27:74:6e:db:4d:ff:dd:4b:53:
                    18:90:79:ae:69:0a:b6:38:b2:0e:cb:40:d5:25:34:
                    0c:28:d1:59:36:fa:08:7a:22:03:82:62:92:cf:99:
                    cb:15:1e:8b:75:cb:36:2f:aa:1b:d3:89:c5:b7:db:
                    d3:32:ec:90:7c:2f:59:9d:1c:5b:6e:c8:d6:43:58:
                    c1:93:40:ab:da:76:f3:81:8d:5b:75:10:d9:8d:fc:
                    ad:2d:22:60:3b:f4:8c:f9:f5:1c:6c:0a:a3:2c:3c:
                    8e:54:f5:39:fd:58:19:2e:de:01:56:ec:e2:45:28:
                    77:fd:94:e3:de:f5:85:48:e5:ab:da:16:b2:b3:7a:
                    4f:01:c8:8b:38:a2:20:01:f9:87:86:aa:d6:ab:1c:
                    45:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:27:45:C0:EB:8A:3C:44:9F:59:77:1C:B8:0C:95:7D:05:F3:D2:DA
            X509v3 Authority Key Identifier:
                keyid:C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37312e302f32342d3234203d3e20323637363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:d0:e0:fb:f8:1a:36:56:0c:02:f1:16:b3:72:3b:18:ef:1f:
         80:16:6d:fe:58:e4:18:e0:0b:65:29:65:dc:5b:bf:a8:89:35:
         c1:62:83:53:83:e8:cb:3a:92:37:a1:55:4f:eb:e0:b4:1a:2f:
         7c:03:79:3b:8a:49:64:96:79:9b:03:79:47:1f:3c:07:ac:70:
         f6:9b:41:b9:3c:4c:3b:d3:0d:31:8a:31:83:4e:45:b1:ee:e9:
         d5:58:83:7a:fd:f0:06:63:9b:34:93:63:b9:fd:88:85:36:70:
         4f:bc:4a:36:aa:06:3e:fa:f1:93:06:b7:be:7f:a4:a6:64:bd:
         63:1a:b6:b4:21:7c:9f:b4:af:62:11:94:1b:f9:01:8e:cc:52:
         7f:29:ba:ab:6b:17:01:2f:65:d2:60:db:40:c3:19:61:95:77:
         1d:d6:3e:e0:f8:65:fb:84:7a:53:87:3f:4c:69:6a:b6:95:dc:
         50:69:8c:d6:ae:6c:8d:a1:76:51:b8:bc:5f:5b:c4:60:2c:60:
         77:f1:7e:be:10:23:50:00:b5:8b:71:ad:8d:d0:4d:90:d5:e7:
         ce:d2:21:bc:c3:59:e7:bc:d3:69:0b:54:06:49:a5:b1:08:fe:
         76:4e:ee:18:5b:93:fc:9d:79:a1:1d:d5:de:c6:ae:5f:df:fb:
         c1:04:4a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:51 2024 by rpki-client on console-ams.rpki-client.org