Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3136372e3234392e3235322e302f32322d3232203d3e203238343038.roa
File:                     3136372e3234392e3235322e302f32322d3232203d3e203238343038.roa (raw, json)
Hash identifier:          6ncbNM4WoA+W76dLlnGcLjB9WxL23hY3ngPcpu6C30w=
Subject key identifier:   35:F2:B7:69:9C:DE:B4:4C:2A:63:59:27:38:1F:A2:D9:56:12:22:D9
Certificate issuer:       /CN=01ED585C7FF695D515C213CCD92F98A26AF818D7
Certificate serial:       0D66E44014BEF9223FF6338D09FEAE7670426EAC
Authority key identifier: 01:ED:58:5C:7F:F6:95:D5:15:C2:13:CC:D9:2F:98:A2:6A:F8:18:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3136372e3234392e3235322e302f32322d3232203d3e203238343038.roa
Signing time:             Tue 04 Feb 2025 18:33:52 +0000
ROA not before:           Tue 04 Feb 2025 18:28:52 +0000
ROA not after:            Tue 03 Feb 2026 18:33:52 +0000
asID:                     28408
IP address blocks:        167.249.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:66:e4:40:14:be:f9:22:3f:f6:33:8d:09:fe:ae:76:70:42:6e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01ED585C7FF695D515C213CCD92F98A26AF818D7
        Validity
            Not Before: Feb  4 18:28:52 2025 GMT
            Not After : Feb  3 18:33:52 2026 GMT
        Subject: CN=35F2B7699CDEB44C2A635927381FA2D9561222D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:79:0c:9c:0d:db:df:4f:bf:6c:03:26:1b:7f:
                    9d:f7:e5:7b:25:90:a4:d9:98:6d:48:7b:a0:ce:20:
                    cd:6b:3c:78:fc:5b:cb:43:ab:08:0c:9d:ca:97:6d:
                    8e:6d:27:af:c7:7d:79:27:69:c1:b9:d5:37:d9:37:
                    53:7e:c3:e8:8d:59:3e:c8:11:be:23:3a:2c:b2:d9:
                    a3:6f:b7:9e:60:e3:bd:c4:91:dd:00:f0:59:85:d2:
                    5d:a5:89:1f:89:8e:18:1e:a7:53:11:e5:f7:aa:14:
                    2c:fd:9d:50:9c:67:b0:d3:1a:15:7d:77:36:7a:e4:
                    eb:20:c9:a9:4f:31:e9:00:a6:26:94:6e:05:8b:2c:
                    ed:b5:09:de:fb:b5:40:90:ba:ae:a0:29:52:aa:c0:
                    8d:a9:d2:76:1e:13:be:c1:b7:fc:c3:10:2c:0a:ec:
                    1c:26:ba:1d:d5:eb:98:af:26:72:f9:43:41:52:26:
                    5a:a9:5c:ef:ea:04:fb:dd:87:3e:49:4a:26:55:d7:
                    19:30:cb:3c:a2:54:9d:d1:96:98:98:7e:6b:74:19:
                    ff:f9:ad:03:77:b4:6e:87:6b:86:2b:2e:ab:67:b3:
                    b2:26:8f:ca:df:85:e2:da:17:6e:ac:83:a9:ac:82:
                    cd:9f:fa:96:ab:fb:70:b8:08:3e:3d:cc:68:f6:83:
                    b4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F2:B7:69:9C:DE:B4:4C:2A:63:59:27:38:1F:A2:D9:56:12:22:D9
            X509v3 Authority Key Identifier:
                keyid:01:ED:58:5C:7F:F6:95:D5:15:C2:13:CC:D9:2F:98:A2:6A:F8:18:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3136372e3234392e3235322e302f32322d3232203d3e203238343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:3a:26:c1:b8:3b:86:78:32:ea:76:da:17:e9:e0:9c:e8:49:
         74:de:71:30:df:55:fc:59:06:32:69:0a:21:18:30:d7:90:f7:
         8e:68:05:8c:af:d2:aa:4a:41:b2:4a:8c:4e:67:93:59:b0:d3:
         69:a9:ab:93:0a:ba:f2:3f:c5:3c:cf:47:27:d4:5a:57:a4:4e:
         64:39:94:17:4f:20:b5:da:b5:5f:57:de:f6:db:a7:43:31:8b:
         43:a9:82:12:0c:d5:4a:1e:c0:8d:64:94:ae:b5:36:b3:50:32:
         62:b2:af:37:86:d5:d0:9b:6f:4c:fa:da:5f:a6:8e:75:9d:37:
         d7:8e:48:57:fe:b0:f3:55:ff:49:19:9e:5c:2f:c3:c0:dc:5d:
         3c:04:1e:6c:20:cf:07:86:85:42:01:ca:fc:c4:b5:08:63:6c:
         fb:0d:83:78:5c:14:9f:11:ec:98:77:dc:52:78:0f:c2:32:d1:
         f9:f1:26:84:72:f5:a1:20:8e:38:06:a6:84:92:d8:12:0d:68:
         b1:e3:45:14:54:84:3b:9f:74:29:3f:37:df:a8:46:bc:9d:50:
         2e:e1:3b:d7:3e:c4:bc:66:d3:4a:ff:de:20:9b:50:19:81:77:
         50:43:8e:69:b6:a5:28:70:36:8d:db:1f:f8:6d:5a:30:be:9b:
         fb:ff:91:a3
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUDWbkQBS++SI/9jONCf6udnBCbqwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFFRDU4NUM3RkY2OTVENTE1QzIxM0NDRDkyRjk4QTI2
QUY4MThENzAeFw0yNTAyMDQxODI4NTJaFw0yNjAyMDMxODMzNTJaMDMxMTAvBgNV
BAMTKDM1RjJCNzY5OUNERUI0NEMyQTYzNTkyNzM4MUZBMkQ5NTYxMjIyRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaeQycDdvfT79sAyYbf5335Xsl
kKTZmG1Ie6DOIM1rPHj8W8tDqwgMncqXbY5tJ6/HfXknacG51TfZN1N+w+iNWT7I
Eb4jOiyy2aNvt55g473Ekd0A8FmF0l2liR+Jjhgep1MR5feqFCz9nVCcZ7DTGhV9
dzZ65OsgyalPMekApiaUbgWLLO21Cd77tUCQuq6gKVKqwI2p0nYeE77Bt/zDECwK
7Bwmuh3V65ivJnL5Q0FSJlqpXO/qBPvdhz5JSiZV1xkwyzyiVJ3RlpiYfmt0Gf/5
rQN3tG6Ha4YrLqtns7Imj8rfheLaF26sg6msgs2f+par+3C4CD49zGj2g7QtAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUNfK3aZzetEwqY1knOB+i2VYSItkwHwYDVR0j
BBgwFoAUAe1YXH/2ldUVwhPM2S+Yomr4GNcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRDk2QTEwQTY1MUUwMUMwMzJGN0YyNUFBMjBBRjMxMUJG
RTM2RjA0Nzc2NjA2MTI1RDM3MEE2Mjc3Mjc2RjI5LzAvMDFFRDU4NUM3RkY2OTVE
NTE1QzIxM0NDRDkyRjk4QTI2QUY4MThENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMUVENTg1QzdGRjY5NUQ1MTVD
MjEzQ0NEOTJGOThBMjZBRjgxOEQ3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0Q5NkExMEE2NTFFMDFDMDMyRjdGMjVBQTIwQUYzMTFCRkUzNkYwNDc3
NjYwNjEyNUQzNzBBNjI3NzI3NkYyOS8wLzMxMzYzNzJlMzIzNDM5MmUzMjM1MzIy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4MzQzMDM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/n8
MA0GCSqGSIb3DQEBCwUAA4IBAQBrOibBuDuGeDLqdtoX6eCc6El03nEw31X8WQYy
aQohGDDXkPeOaAWMr9KqSkGySoxOZ5NZsNNpqauTCrryP8U8z0cn1FpXpE5kOZQX
TyC12rVfV97226dDMYtDqYISDNVKHsCNZJSutTazUDJisq83htXQm29M+tpfpo51
nTfXjkhX/rDzVf9JGZ5cL8PA3F08BB5sIM8HhoVCAcr8xLUIY2z7DYN4XBSfEeyY
d9xSeA/CMtH58SaEcvWhII44BqaEktgSDWix40UUVIQ7n3QpPzffqEa8nVAu4TvX
PsS8ZtNK/94gm1AZgXdQQ45ptqUocDaN2x/4bVowvpv7/5Gj
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:39:34 2025 by rpki-client