Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3136372e3234392e3235352e302f32342d3234203d3e203238343038.roa
File:                     3136372e3234392e3235352e302f32342d3234203d3e203238343038.roa (raw, json)
Hash identifier:          zxPM78n63lIY04O4JwVpGeshkTa+Ns3AV/zOwweYVZc=
Subject key identifier:   F2:FB:CC:0B:D1:15:DE:1F:6C:F5:DF:9A:50:C9:04:3F:25:96:B5:F6
Certificate issuer:       /CN=01ED585C7FF695D515C213CCD92F98A26AF818D7
Certificate serial:       765206E6C5000620317BE6A9CCF8F1D352F48E8C
Authority key identifier: 01:ED:58:5C:7F:F6:95:D5:15:C2:13:CC:D9:2F:98:A2:6A:F8:18:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3136372e3234392e3235352e302f32342d3234203d3e203238343038.roa
Signing time:             Tue 04 Feb 2025 18:33:54 +0000
ROA not before:           Tue 04 Feb 2025 18:28:54 +0000
ROA not after:            Tue 03 Feb 2026 18:33:54 +0000
asID:                     28408
IP address blocks:        167.249.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:52:06:e6:c5:00:06:20:31:7b:e6:a9:cc:f8:f1:d3:52:f4:8e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01ED585C7FF695D515C213CCD92F98A26AF818D7
        Validity
            Not Before: Feb  4 18:28:54 2025 GMT
            Not After : Feb  3 18:33:54 2026 GMT
        Subject: CN=F2FBCC0BD115DE1F6CF5DF9A50C9043F2596B5F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:76:c1:97:d1:09:b5:6b:09:50:22:e2:74:64:
                    90:ca:4a:1a:3a:de:2b:f8:1d:dc:65:70:7a:6a:8f:
                    5b:02:b0:23:77:51:a6:5f:7c:26:34:4c:64:87:33:
                    4d:c6:96:2e:e3:fe:f3:cf:01:bb:39:48:dd:b3:57:
                    73:29:5e:d3:d1:86:6c:52:b7:44:6a:90:9f:e3:9a:
                    15:3d:d4:de:b7:6a:3c:1b:53:ab:06:c1:54:f4:2c:
                    11:f9:fa:eb:03:eb:7b:6e:e9:68:d5:c5:ec:1f:c3:
                    ab:63:6c:95:d2:a9:60:3a:f8:b9:a1:e7:ca:c6:4d:
                    e8:ca:ff:34:bd:2a:d1:1c:a9:58:10:30:af:56:a2:
                    b2:fd:a8:6a:01:46:90:55:6c:c5:3e:04:8e:8f:f5:
                    b7:ca:a0:9f:76:0a:7f:3e:0a:b4:0f:3f:64:c7:79:
                    81:27:69:fa:51:9b:73:99:15:84:0f:4f:bd:77:7f:
                    cf:29:5a:22:49:79:d5:55:49:56:99:73:1d:89:ce:
                    de:1b:27:7c:c1:ae:3d:63:14:b2:fc:c3:0f:ee:5f:
                    68:bc:66:87:81:3e:f7:36:9f:d8:7d:2c:f9:5a:0b:
                    86:98:b2:ef:d6:24:2f:e9:72:61:8b:e1:0f:ad:a0:
                    56:70:9c:2f:c5:89:ac:ea:b3:7a:25:9a:b6:d1:66:
                    48:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FB:CC:0B:D1:15:DE:1F:6C:F5:DF:9A:50:C9:04:3F:25:96:B5:F6
            X509v3 Authority Key Identifier:
                keyid:01:ED:58:5C:7F:F6:95:D5:15:C2:13:CC:D9:2F:98:A2:6A:F8:18:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3136372e3234392e3235352e302f32342d3234203d3e203238343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:4a:82:91:2a:ee:8f:52:8e:40:00:ad:eb:51:7c:1e:49:39:
         90:56:a3:f5:d8:60:a0:8c:b4:62:38:be:8f:3b:18:49:54:a0:
         bc:2c:eb:1a:8b:5d:f5:ad:55:5e:3a:9e:4b:aa:5f:93:af:ad:
         07:d6:6d:ff:e0:fe:5d:d4:7f:2c:dc:f5:4d:2a:ad:c9:01:b9:
         77:8d:cc:43:57:28:8e:64:b5:3c:2c:98:81:05:79:35:bb:06:
         2a:f1:fb:5b:34:38:a9:c5:20:4f:f9:cd:39:e9:56:fb:fd:ac:
         73:4e:e4:24:ab:f5:e6:75:fd:81:ce:74:da:47:8e:d8:45:59:
         86:c9:68:3a:e3:ca:2e:86:16:80:7b:98:f5:cd:b3:2c:91:48:
         49:f3:e1:28:e0:f4:e7:a2:31:11:b9:be:be:f8:a0:94:07:39:
         98:2e:44:6d:3d:ec:c5:82:97:3b:da:fe:b2:84:63:2c:68:c1:
         7c:92:29:82:21:48:51:8b:40:82:5d:71:05:5c:7a:c3:b7:bc:
         b7:80:c1:98:94:1d:cf:7a:80:98:24:c5:b2:cd:07:62:75:b8:
         9f:72:dd:45:b8:8f:8b:d9:0b:cd:a7:90:b1:fb:58:90:5e:77:
         60:76:d7:06:b5:f3:97:19:0e:36:7d:0d:d8:df:48:d8:92:28:
         bd:3e:e0:9a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdlIG5sUABiAxe+apzPjx01L0jowwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFFRDU4NUM3RkY2OTVENTE1QzIxM0NDRDkyRjk4QTI2
QUY4MThENzAeFw0yNTAyMDQxODI4NTRaFw0yNjAyMDMxODMzNTRaMDMxMTAvBgNV
BAMTKEYyRkJDQzBCRDExNURFMUY2Q0Y1REY5QTUwQzkwNDNGMjU5NkI1RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFdsGX0Qm1awlQIuJ0ZJDKSho6
3iv4HdxlcHpqj1sCsCN3UaZffCY0TGSHM03Gli7j/vPPAbs5SN2zV3MpXtPRhmxS
t0RqkJ/jmhU91N63ajwbU6sGwVT0LBH5+usD63tu6WjVxewfw6tjbJXSqWA6+Lmh
58rGTejK/zS9KtEcqVgQMK9WorL9qGoBRpBVbMU+BI6P9bfKoJ92Cn8+CrQPP2TH
eYEnafpRm3OZFYQPT713f88pWiJJedVVSVaZcx2Jzt4bJ3zBrj1jFLL8ww/uX2i8
ZoeBPvc2n9h9LPlaC4aYsu/WJC/pcmGL4Q+toFZwnC/Fiazqs3olmrbRZkjhAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU8vvMC9EV3h9s9d+aUMkEPyWWtfYwHwYDVR0j
BBgwFoAUAe1YXH/2ldUVwhPM2S+Yomr4GNcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRDk2QTEwQTY1MUUwMUMwMzJGN0YyNUFBMjBBRjMxMUJG
RTM2RjA0Nzc2NjA2MTI1RDM3MEE2Mjc3Mjc2RjI5LzAvMDFFRDU4NUM3RkY2OTVE
NTE1QzIxM0NDRDkyRjk4QTI2QUY4MThENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMUVENTg1QzdGRjY5NUQ1MTVD
MjEzQ0NEOTJGOThBMjZBRjgxOEQ3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0Q5NkExMEE2NTFFMDFDMDMyRjdGMjVBQTIwQUYzMTFCRkUzNkYwNDc3
NjYwNjEyNUQzNzBBNjI3NzI3NkYyOS8wLzMxMzYzNzJlMzIzNDM5MmUzMjM1MzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzQzMDM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/n/
MA0GCSqGSIb3DQEBCwUAA4IBAQAESoKRKu6PUo5AAK3rUXweSTmQVqP12GCgjLRi
OL6POxhJVKC8LOsai131rVVeOp5Lql+Tr60H1m3/4P5d1H8s3PVNKq3JAbl3jcxD
VyiOZLU8LJiBBXk1uwYq8ftbNDipxSBP+c056Vb7/axzTuQkq/Xmdf2BznTaR47Y
RVmGyWg648ouhhaAe5j1zbMskUhJ8+Eo4PTnojERub6++KCUBzmYLkRtPezFgpc7
2v6yhGMsaMF8kimCIUhRi0CCXXEFXHrDt7y3gMGYlB3PeoCYJMWyzQdidbifct1F
uI+L2QvNp5Cx+1iQXndgdtcGtfOXGQ42fQ3Y30jYkii9PuCa
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:39:34 2025 by rpki-client