Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37322e302f32342d3234203d3e20323730303439.roa
File:                     36362e3233312e37322e302f32342d3234203d3e20323730303439.roa (raw, json)
Hash identifier:          /ptaPIRIbqWCxrNTOZp4TPUyyho7Eg2wZTEVqaRwQDI=
Subject key identifier:   6F:D7:3D:C4:71:14:4B:20:E3:18:F5:5D:11:8D:6D:35:E8:96:85:AB
Certificate issuer:       /CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Certificate serial:       0139F0107E0B31A8CFFBCD47B52E42D1B27607D0
Authority key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37322e302f32342d3234203d3e20323730303439.roa
Signing time:             Tue 05 Mar 2024 18:06:20 +0000
ROA not before:           Tue 05 Mar 2024 18:01:20 +0000
ROA not after:            Tue 04 Mar 2025 18:06:20 +0000
asID:                     270049
IP address blocks:        66.231.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:39:f0:10:7e:0b:31:a8:cf:fb:cd:47:b5:2e:42:d1:b2:76:07:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
        Validity
            Not Before: Mar  5 18:01:20 2024 GMT
            Not After : Mar  4 18:06:20 2025 GMT
        Subject: CN=6FD73DC471144B20E318F55D118D6D35E89685AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:be:23:b1:23:87:71:d3:ec:a7:36:14:57:ef:
                    cc:e8:c6:d6:9f:a8:a4:fb:2b:72:c2:54:a4:ba:28:
                    f2:8c:20:d6:90:a7:ba:33:07:4b:44:cd:ad:c1:c6:
                    99:20:28:77:c8:99:79:b8:46:a9:dd:da:eb:c3:db:
                    0e:a5:f3:cb:67:c2:b1:97:a2:32:14:6b:ff:f4:94:
                    24:3c:7d:e4:b9:58:64:7a:11:56:c0:e8:42:e2:de:
                    e1:92:b0:5a:2b:ca:a4:61:b5:1e:60:20:66:0b:fe:
                    86:32:52:9f:1d:27:1a:36:45:66:45:aa:1b:6e:2e:
                    91:0d:78:c7:46:65:89:90:20:31:62:a4:b8:a9:4d:
                    5e:a7:f8:c0:30:e5:fb:ac:9f:23:6e:ed:03:1d:2e:
                    68:f8:90:b8:18:69:86:89:3a:6e:44:91:bd:2c:f3:
                    61:ed:86:b7:f2:19:3f:5a:75:21:02:57:cc:f0:83:
                    f8:6b:24:86:72:c8:c1:8b:8f:a1:98:f4:d0:b1:30:
                    e9:ce:ea:6c:7e:91:04:9b:3d:ed:80:1f:b4:d9:b5:
                    a8:9a:13:9b:4b:86:e6:0f:d9:ac:4f:98:72:92:59:
                    5d:8f:6e:cf:64:95:80:a5:b0:2f:f0:0e:78:68:be:
                    0e:b0:92:c1:78:02:fb:fa:4f:4e:31:47:97:c1:c2:
                    bf:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D7:3D:C4:71:14:4B:20:E3:18:F5:5D:11:8D:6D:35:E8:96:85:AB
            X509v3 Authority Key Identifier:
                keyid:C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37322e302f32342d3234203d3e20323730303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:e5:04:c0:60:c4:8f:b9:2f:4f:6c:26:df:ae:ed:af:5c:f0:
         bb:80:e0:4e:4b:1b:d1:4f:74:40:46:7b:94:07:25:ee:91:60:
         ee:94:ba:dc:79:bc:58:30:fd:e9:ed:57:48:37:20:ed:65:2a:
         6c:c3:ee:a3:e1:df:1b:14:be:91:b6:e6:0a:7e:7b:2c:3b:4f:
         8d:5e:3f:55:bd:c7:35:ce:57:da:f5:06:15:b0:66:1b:36:c5:
         36:c6:69:36:e9:f0:e6:5b:0f:13:04:ee:15:28:7c:be:5b:dc:
         51:cf:5d:37:c7:7f:ba:6f:60:81:71:70:b3:eb:50:b3:80:00:
         96:ad:5e:24:73:d9:70:60:62:e6:ce:44:30:a7:c1:d2:02:11:
         d1:13:c1:0f:54:09:3b:46:a6:4a:30:5d:f3:ff:60:95:c3:48:
         31:63:0a:dd:bf:9b:32:ac:d3:e6:19:6a:54:d1:98:3b:02:21:
         76:48:f3:9f:5d:52:e7:ea:cd:61:71:f0:bf:a2:de:04:b9:fd:
         b1:32:1f:c3:5e:f0:d6:5d:05:54:86:76:fb:49:ea:09:4c:2e:
         78:09:4c:f4:4c:61:78:41:03:17:61:55:18:fc:85:cd:5c:6b:
         ec:95:7c:e7:52:19:1f:e1:e1:57:c8:6e:60:6c:64:5d:74:a7:
         b9:e2:19:21
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUATnwEH4LMajP+81HtS5C0bJ2B9AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI5NjdGRjMxMDlFMEFBN0VFNUVDMUM2NDAzMDBENUEw
MEZGNDFCMDAeFw0yNDAzMDUxODAxMjBaFw0yNTAzMDQxODA2MjBaMDMxMTAvBgNV
BAMTKDZGRDczREM0NzExNDRCMjBFMzE4RjU1RDExOEQ2RDM1RTg5Njg1QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChviOxI4dx0+ynNhRX78zoxtaf
qKT7K3LCVKS6KPKMINaQp7ozB0tEza3BxpkgKHfImXm4Rqnd2uvD2w6l88tnwrGX
ojIUa//0lCQ8feS5WGR6EVbA6ELi3uGSsForyqRhtR5gIGYL/oYyUp8dJxo2RWZF
qhtuLpENeMdGZYmQIDFipLipTV6n+MAw5fusnyNu7QMdLmj4kLgYaYaJOm5Ekb0s
82HthrfyGT9adSECV8zwg/hrJIZyyMGLj6GY9NCxMOnO6mx+kQSbPe2AH7TZtaia
E5tLhuYP2axPmHKSWV2Pbs9klYClsC/wDnhovg6wksF4Avv6T04xR5fBwr/HAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUb9c9xHEUSyDjGPVdEY1tNeiWhaswHwYDVR0j
BBgwFoAUwpZ/8xCeCqfuXsHGQDANWgD/QbAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQTEwNEQ3Nzc3QjAyOUVEQTc4MkRBQTZBNkY3NDM0RkRC
Nzc3Q0U2OEEwOTQ5Nzk3ODE0NjRFQzU5RkY4QTlBLzAvQzI5NjdGRjMxMDlFMEFB
N0VFNUVDMUM2NDAzMDBENUEwMEZGNDFCMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMjk2N0ZGMzEwOUUwQUE3RUU1
RUMxQzY0MDMwMEQ1QTAwRkY0MUIwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREExMDRENzc3N0IwMjlFREE3ODJEQUE2QTZGNzQzNEZEQjc3N0NFNjhB
MDk0OTc5NzgxNDY0RUM1OUZGOEE5QS8wLzM2MzYyZTMyMzMzMTJlMzczMjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMDMwMzQzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAELnSDAN
BgkqhkiG9w0BAQsFAAOCAQEAGuUEwGDEj7kvT2wm367tr1zwu4DgTksb0U90QEZ7
lAcl7pFg7pS63Hm8WDD96e1XSDcg7WUqbMPuo+HfGxS+kbbmCn57LDtPjV4/Vb3H
Nc5X2vUGFbBmGzbFNsZpNunw5lsPEwTuFSh8vlvcUc9dN8d/um9ggXFws+tQs4AA
lq1eJHPZcGBi5s5EMKfB0gIR0RPBD1QJO0amSjBd8/9glcNIMWMK3b+bMqzT5hlq
VNGYOwIhdkjzn11S5+rNYXHwv6LeBLn9sTIfw17w1l0FVIZ2+0nqCUwueAlM9Exh
eEEDF2FVGPyFzVxr7JV851IZH+HhV8huYGxkXXSnueIZIQ==
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:13 2024 by rpki-client on console-fra.rpki-client.org