Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37382e302f32342d3234203d3e20323730303439.roa
File:                     36362e3233312e37382e302f32342d3234203d3e20323730303439.roa (raw, json)
Hash identifier:          7+E9No4F6QMWqNJfvMqMlV6S6s9J1j1UyhYxvi/EB7E=
Subject key identifier:   52:CA:01:C9:D2:33:44:A5:AF:45:E1:A8:24:41:FC:A3:A9:18:82:E9
Certificate issuer:       /CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Certificate serial:       1155985E26688C4285FB536D3FF28D0E76C5F82D
Authority key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37382e302f32342d3234203d3e20323730303439.roa
Signing time:             Tue 05 Mar 2024 18:06:23 +0000
ROA not before:           Tue 05 Mar 2024 18:01:23 +0000
ROA not after:            Tue 04 Mar 2025 18:06:23 +0000
asID:                     270049
IP address blocks:        66.231.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:55:98:5e:26:68:8c:42:85:fb:53:6d:3f:f2:8d:0e:76:c5:f8:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
        Validity
            Not Before: Mar  5 18:01:23 2024 GMT
            Not After : Mar  4 18:06:23 2025 GMT
        Subject: CN=52CA01C9D23344A5AF45E1A82441FCA3A91882E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bf:3d:ef:4c:b7:8e:0d:0e:65:fc:0b:90:60:
                    f1:34:7c:14:1e:45:83:f8:85:bf:e8:77:41:be:50:
                    ff:10:87:3f:f6:93:35:33:7c:f0:53:ba:0d:6a:d0:
                    88:65:6e:40:51:53:bc:65:41:53:94:ee:bb:74:6c:
                    cb:51:da:38:04:7e:18:1c:62:87:1f:46:3d:76:6d:
                    53:38:91:75:a2:08:6c:9e:70:b5:7d:85:04:5a:50:
                    0f:38:98:27:cd:b7:19:87:e3:32:8d:7b:0c:75:4b:
                    a2:7c:37:1c:72:33:13:ba:8e:b6:ec:ca:22:4c:5c:
                    f3:83:48:4d:7a:d3:2a:7e:3e:a6:fb:7a:23:97:7b:
                    02:dd:75:d8:23:9f:7f:b2:bd:64:65:83:ec:73:d7:
                    99:a3:a3:99:29:88:ab:f4:4a:7d:f3:32:ae:1f:d3:
                    26:f1:3f:66:2b:25:14:77:36:ec:aa:62:ed:2c:da:
                    07:28:b9:b2:b1:b2:1f:4f:5b:09:64:92:75:e0:08:
                    9d:91:fb:80:6c:30:88:f1:4c:8f:dd:12:c1:9c:82:
                    4d:05:71:4f:51:69:69:9d:de:ff:36:cb:44:6e:5f:
                    79:dd:2b:b9:b5:13:d1:a2:dd:4a:9f:eb:d3:f4:89:
                    50:a2:1b:e2:98:16:2c:24:e9:ac:6c:1b:57:ca:0d:
                    ef:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CA:01:C9:D2:33:44:A5:AF:45:E1:A8:24:41:FC:A3:A9:18:82:E9
            X509v3 Authority Key Identifier:
                keyid:C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e37382e302f32342d3234203d3e20323730303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:22:90:64:c5:9b:1f:63:0f:92:66:05:3f:7c:3f:ff:34:65:
         d8:23:4e:42:c8:1d:58:26:9d:26:ee:14:1b:10:00:34:e9:62:
         ff:bb:83:d9:25:4a:34:87:29:64:0b:31:c1:4e:7e:5d:ac:11:
         9b:6c:04:d7:0a:8a:ea:eb:c2:38:03:f5:87:1e:f6:01:4f:02:
         5a:d4:25:11:1c:58:2f:ef:14:4e:b9:00:76:d4:32:4b:25:66:
         f8:8d:e7:af:68:24:3e:db:e6:25:8a:55:6d:1c:5b:90:5c:ea:
         4f:59:9f:e5:fc:58:70:09:a2:45:d7:1f:42:6c:2f:86:67:e0:
         9c:35:b4:86:6e:df:26:84:1e:c3:8c:59:7d:17:97:77:95:a3:
         a1:68:eb:85:4c:22:60:a3:b3:3c:13:2d:9a:25:f0:de:1f:43:
         7f:aa:69:b8:0c:79:d5:4a:7d:72:c0:23:38:89:45:41:53:66:
         34:8e:0c:5b:af:34:51:be:f4:bd:1c:bd:9b:ba:f5:bb:3a:b1:
         6a:33:71:0a:4b:15:94:0e:82:76:c5:13:2b:4d:3b:d1:8a:88:
         ba:a8:c4:eb:80:2d:d6:5b:28:d3:ba:56:59:9d:14:07:64:0a:
         bd:c5:46:89:c8:01:c4:54:02:5c:75:5e:1c:03:9d:8b:e7:76:
         b4:56:70:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:13 2024 by rpki-client on console-fra.rpki-client.org