Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/3136372e3235302e3230342e302f32322d3232203d3e20323632323533.roa
File:                     3136372e3235302e3230342e302f32322d3232203d3e20323632323533.roa (raw, json)
Hash identifier:          cnZ7MB1LYiFdHbQBAmkGgvcNfLS/v27E61kp/hcUsKo=
Subject key identifier:   5C:FF:69:08:82:4E:C4:BE:B9:D5:48:CF:48:5B:D0:26:DD:CE:C8:AD
Certificate issuer:       /CN=D8FC677205B0DA9CA979B6D68B95B49C4B6C3267
Certificate serial:       3820D2D67C86495F3296EF616819BA7758A95327
Authority key identifier: D8:FC:67:72:05:B0:DA:9C:A9:79:B6:D6:8B:95:B4:9C:4B:6C:32:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/3136372e3235302e3230342e302f32322d3232203d3e20323632323533.roa
Signing time:             Tue 05 Mar 2024 18:15:33 +0000
ROA not before:           Tue 05 Mar 2024 18:10:33 +0000
ROA not after:            Tue 04 Mar 2025 18:15:33 +0000
asID:                     262253
IP address blocks:        167.250.204.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:20:d2:d6:7c:86:49:5f:32:96:ef:61:68:19:ba:77:58:a9:53:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8FC677205B0DA9CA979B6D68B95B49C4B6C3267
        Validity
            Not Before: Mar  5 18:10:33 2024 GMT
            Not After : Mar  4 18:15:33 2025 GMT
        Subject: CN=5CFF6908824EC4BEB9D548CF485BD026DDCEC8AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b0:67:5b:43:82:2c:ee:07:5b:ae:d8:48:06:
                    e9:fa:71:53:d3:9d:3e:19:87:4d:68:35:58:84:ae:
                    c1:a1:fe:b5:37:da:b2:a1:98:2c:1a:bc:95:78:1f:
                    01:72:fd:83:0e:f3:3e:2e:6d:df:49:45:b5:e2:c7:
                    a6:ec:42:d4:41:3e:fc:59:c8:51:13:54:89:e4:18:
                    59:45:5a:c4:8c:bd:4c:b2:8a:74:29:5f:69:23:3e:
                    21:91:69:25:3b:7a:be:5f:f1:f0:6d:ab:14:5a:ba:
                    b7:88:dc:91:dc:41:10:a5:3a:1d:5b:2c:3d:3b:14:
                    3a:d3:86:be:76:44:46:5a:ca:67:c1:86:6e:1d:22:
                    f2:53:d0:73:2a:c2:b5:de:de:20:16:75:57:1d:f3:
                    49:65:f5:fe:0f:64:b3:28:14:d4:3b:72:1e:d7:55:
                    dc:b7:d4:5b:eb:e4:c5:56:29:d6:1a:04:86:a1:6b:
                    a5:27:fa:45:ea:93:ed:eb:b6:09:3b:32:a9:69:3c:
                    0a:f5:c2:95:1d:ef:a9:81:b3:b9:39:42:06:3b:88:
                    df:cf:1c:23:ff:5e:85:98:9c:53:6a:a2:90:03:0e:
                    61:82:82:46:fa:99:77:20:9a:85:8a:f5:6d:d5:04:
                    b2:b8:63:ab:41:ae:ff:2f:66:52:67:fc:57:f9:58:
                    db:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FF:69:08:82:4E:C4:BE:B9:D5:48:CF:48:5B:D0:26:DD:CE:C8:AD
            X509v3 Authority Key Identifier:
                keyid:D8:FC:67:72:05:B0:DA:9C:A9:79:B6:D6:8B:95:B4:9C:4B:6C:32:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/3136372e3235302e3230342e302f32322d3232203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:ee:0b:de:3d:1f:05:01:ea:d3:d1:7d:b8:84:07:45:aa:e0:
         a0:63:df:11:dd:2f:66:c6:88:9b:49:f0:04:66:6a:5e:9c:9d:
         2f:40:88:36:56:24:c2:92:ee:b7:1d:37:3b:fe:6c:7e:13:47:
         97:6b:fb:84:83:43:05:4f:2d:24:5b:f1:8e:17:b8:ef:7d:e5:
         1f:32:d5:15:e1:fa:39:43:f7:1e:38:6f:67:67:2f:39:e1:ae:
         14:8a:51:3e:54:05:00:79:72:aa:37:60:f0:61:07:f2:e9:40:
         dd:ac:17:19:09:39:38:0d:b0:9e:db:b9:71:1e:9c:6e:24:f7:
         40:0f:63:a8:c2:52:ba:a7:4b:52:de:52:d9:1d:52:ce:72:66:
         25:91:52:90:52:54:bb:66:81:fd:89:6a:a9:91:76:d9:a8:fe:
         51:0f:d4:64:c9:68:fd:08:0e:f6:9b:8f:58:e7:27:b1:c9:ea:
         2a:1a:f6:ad:53:c4:00:cd:43:1f:ce:d5:c7:b8:c1:a7:7a:fb:
         28:3f:ef:0d:66:47:c2:b0:9d:40:3e:bc:75:dd:f6:86:c3:9c:
         97:50:e4:06:35:12:2d:dc:cb:2f:76:62:b6:03:f0:ff:33:d7:
         6c:ec:35:c9:78:37:77:59:fd:97:8f:ec:5d:4f:49:13:c0:56:
         ac:ba:8d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:42 2024 by rpki-client on console-fra.rpki-client.org