Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3136372e3234392e3235322e302f32342d3234203d3e203238343038.roa
File:                     3136372e3234392e3235322e302f32342d3234203d3e203238343038.roa (raw, json)
Hash identifier:          00J5sVSy5ChWY1KIIVpm77Ws7PJSJ0lkmHqHcGVQgxk=
Subject key identifier:   6B:9D:AC:66:33:8D:FD:AF:4E:64:AA:AB:5C:8A:CE:1B:F6:13:35:8E
Certificate issuer:       /CN=01ED585C7FF695D515C213CCD92F98A26AF818D7
Certificate serial:       661BC94B88E85571B11D27D41FE4376A72ABDB1E
Authority key identifier: 01:ED:58:5C:7F:F6:95:D5:15:C2:13:CC:D9:2F:98:A2:6A:F8:18:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3136372e3234392e3235322e302f32342d3234203d3e203238343038.roa
Signing time:             Tue 04 Feb 2025 18:33:53 +0000
ROA not before:           Tue 04 Feb 2025 18:28:53 +0000
ROA not after:            Tue 03 Feb 2026 18:33:53 +0000
asID:                     28408
IP address blocks:        167.249.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:1b:c9:4b:88:e8:55:71:b1:1d:27:d4:1f:e4:37:6a:72:ab:db:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01ED585C7FF695D515C213CCD92F98A26AF818D7
        Validity
            Not Before: Feb  4 18:28:53 2025 GMT
            Not After : Feb  3 18:33:53 2026 GMT
        Subject: CN=6B9DAC66338DFDAF4E64AAAB5C8ACE1BF613358E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:11:47:0f:db:d8:cc:85:64:3f:03:59:05:72:
                    1c:14:d3:41:c0:6a:7c:0e:90:1d:0f:39:cb:38:05:
                    02:02:08:ef:11:21:82:57:b6:38:29:a5:b4:00:cb:
                    4b:4e:c3:07:95:88:45:40:af:52:af:af:66:81:a7:
                    0a:48:70:02:9f:df:ff:90:f4:a4:e5:c6:fd:68:c4:
                    d7:04:ea:d3:c6:99:f2:68:1f:a8:90:43:18:77:b3:
                    d2:5b:cd:39:6a:67:e3:94:57:9d:7e:cc:56:e9:94:
                    93:6f:3d:67:ec:e0:a9:63:9c:ba:50:7c:c9:34:9b:
                    2a:b6:87:f5:84:7c:2a:40:f3:e5:e9:e6:4a:66:28:
                    37:94:98:c6:a5:c7:f5:1e:0c:ad:ee:69:a9:0d:90:
                    d9:f9:ad:53:80:56:97:17:db:bf:4c:6b:20:a3:e6:
                    bb:8b:72:aa:8b:8d:80:ac:4b:f1:56:96:a6:f0:df:
                    b0:a7:f3:e0:90:2e:cf:16:b6:54:29:6e:7f:02:67:
                    b4:78:a0:75:2d:2f:29:35:aa:20:24:c0:80:56:51:
                    3e:2c:f7:e3:01:c6:0d:5b:01:29:02:ad:7e:e1:e1:
                    cc:c8:f4:c4:80:84:25:4d:4c:98:2e:8b:c1:83:e2:
                    46:f2:da:8a:64:5d:5a:7f:37:88:67:6e:e4:6a:59:
                    00:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9D:AC:66:33:8D:FD:AF:4E:64:AA:AB:5C:8A:CE:1B:F6:13:35:8E
            X509v3 Authority Key Identifier:
                keyid:01:ED:58:5C:7F:F6:95:D5:15:C2:13:CC:D9:2F:98:A2:6A:F8:18:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3136372e3234392e3235322e302f32342d3234203d3e203238343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:31:40:ac:aa:be:da:71:5e:8f:74:4c:cc:38:0b:ae:69:a7:
         70:48:d2:9f:e6:4a:f3:fb:ae:11:d3:03:cb:ef:ea:72:9c:a8:
         91:98:68:57:0b:2d:86:ba:ee:f2:c2:c4:ce:88:ae:3c:7a:8e:
         79:0c:80:71:53:09:08:cc:81:b7:60:b8:2f:da:ce:09:26:cb:
         a4:0d:a5:02:52:a2:72:b4:0c:0b:9c:a2:76:d5:08:65:c4:4b:
         85:09:76:91:4f:e1:b6:89:cb:90:c0:7a:e2:87:6a:ac:01:72:
         c1:f3:86:b5:f1:66:a8:b7:81:16:ac:15:d4:2c:07:c0:9f:3d:
         0e:1a:17:65:82:e7:f9:3a:30:23:08:f7:7c:c6:1f:70:9e:92:
         aa:c6:b5:6a:38:c4:06:32:83:79:a2:9d:6e:e2:85:69:c2:e2:
         c4:b7:7f:31:03:2a:a6:d5:a7:d4:38:d3:4b:a0:ce:5a:c6:b1:
         a7:2a:cb:de:e1:b1:af:94:9e:c7:35:d4:b2:fc:7d:b9:69:31:
         a1:5a:39:d6:7f:87:31:bd:ae:5d:4e:ba:43:bc:d3:26:f3:86:
         55:c9:da:e7:56:4b:26:73:cc:ae:88:e3:10:28:b6:59:85:7f:
         52:b5:d7:01:a8:0e:2d:90:09:1f:8c:3f:38:05:8a:a2:ef:16:
         a6:37:60:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:39:34 2025 by rpki-client