Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37372e302f32342d3234203d3e20323637363939.roa
File:                     36362e3233312e37372e302f32342d3234203d3e20323637363939.roa (raw, json)
Hash identifier:          zbRk8f3LiD7fxNzV0R87ec4Vbj8/wZffyK+jsR0nu/E=
Subject key identifier:   7F:9A:84:C1:91:03:12:D0:64:62:03:8B:3C:E9:B0:AA:21:DB:85:B6
Certificate issuer:       /CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Certificate serial:       0220A312A3560B49CC79EA0E383332A7A692484F
Authority key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37372e302f32342d3234203d3e20323637363939.roa
Signing time:             Tue 05 Mar 2024 18:06:21 +0000
ROA not before:           Tue 05 Mar 2024 18:01:21 +0000
ROA not after:            Tue 04 Mar 2025 18:06:21 +0000
asID:                     267699
IP address blocks:        66.231.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:20:a3:12:a3:56:0b:49:cc:79:ea:0e:38:33:32:a7:a6:92:48:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
        Validity
            Not Before: Mar  5 18:01:21 2024 GMT
            Not After : Mar  4 18:06:21 2025 GMT
        Subject: CN=7F9A84C1910312D06462038B3CE9B0AA21DB85B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ee:35:6e:05:2c:c7:88:64:32:52:cf:88:45:
                    d1:ed:46:02:b9:7c:6d:f9:ac:5b:a9:98:8d:c2:10:
                    88:78:1a:9c:20:39:b4:7a:9c:f9:16:5c:7a:7a:13:
                    b7:0a:dd:f6:67:d6:ec:9a:4e:ba:ce:86:bd:fc:c7:
                    91:d0:ee:64:42:cd:6e:a6:06:25:12:c2:3b:f8:ca:
                    e4:2d:c1:39:5b:ab:4b:29:4d:28:0d:12:ac:d0:99:
                    b1:75:c3:3e:a8:d3:f3:bf:08:8f:1d:2a:d6:5a:91:
                    2f:a0:ba:fe:be:d0:bc:38:56:81:f8:8d:7c:af:39:
                    75:6f:8a:6f:6f:a6:33:e7:7c:a3:3e:bb:4d:7e:9e:
                    fc:eb:fe:93:76:c3:70:0d:7a:18:bb:93:30:99:a2:
                    7a:6e:be:5a:77:29:b6:51:a2:02:de:3e:4b:17:ab:
                    fa:43:94:41:35:02:1e:b2:da:0f:ce:77:93:1b:b2:
                    b7:37:2b:c4:5b:19:e5:12:b3:02:3e:57:b4:95:a6:
                    fd:58:1a:8a:fd:d1:bc:d1:4a:19:93:07:8f:b5:b4:
                    28:b7:9a:01:50:ea:51:68:38:40:23:19:b8:c1:94:
                    32:05:8e:b5:0b:5a:70:41:54:23:2c:63:ee:58:a8:
                    84:9b:08:62:d8:cc:59:c0:56:ed:88:4a:31:54:49:
                    b3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9A:84:C1:91:03:12:D0:64:62:03:8B:3C:E9:B0:AA:21:DB:85:B6
            X509v3 Authority Key Identifier:
                keyid:C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37372e302f32342d3234203d3e20323637363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:7f:21:9b:31:e3:5a:03:bd:9b:fe:1b:03:de:4f:bc:8c:21:
         06:12:1f:5a:3b:1d:c0:d2:7d:97:24:64:aa:d0:4c:fb:03:cd:
         37:2b:ee:74:13:fd:f6:b2:e0:75:d2:c4:f0:74:25:24:b7:b8:
         4d:ae:db:e7:38:4a:6c:f3:20:cc:b1:b7:82:5f:63:55:a8:7f:
         77:d3:8f:3b:a6:4a:be:d8:1f:51:14:dd:ca:ed:21:5d:15:c0:
         18:dd:26:63:05:47:87:91:dc:74:08:d2:3c:c3:8b:2c:1e:ea:
         c5:36:b0:ed:d9:89:51:ad:f3:f5:ee:22:ce:73:57:d5:df:94:
         34:e8:e1:55:c5:48:0f:46:ca:0e:1c:da:4b:e3:5e:83:3e:aa:
         72:e7:02:45:bd:62:ec:d9:68:ef:fa:e0:db:30:58:63:9e:0e:
         47:3e:0a:1a:07:39:e9:7d:74:9a:5d:3c:86:9a:be:c2:2f:3c:
         ba:79:45:57:e8:42:ff:29:57:ff:b7:30:48:88:51:96:c3:56:
         e3:47:20:a9:0e:72:9a:93:c0:20:f9:bc:90:cd:b3:5c:b4:e7:
         ad:9d:62:ad:3e:f0:4d:1b:06:95:e7:d8:d8:50:05:3f:92:5a:
         7b:5a:d7:ae:60:c4:ef:06:fa:b6:16:1f:d0:0d:92:7e:2d:25:
         53:c7:d9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:13 2024 by rpki-client on console-fra.rpki-client.org