Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/3136372e3235302e3230342e302f32342d3234203d3e20323632323533.roa
File:                     3136372e3235302e3230342e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier:          zSMeoXUwUp8SH8zxQiR/WiV2xb+io2FhCBxQgSUrjOQ=
Subject key identifier:   A3:23:F8:C0:71:C7:80:63:4F:5A:E5:03:C9:34:42:4E:BA:C0:8A:BE
Certificate issuer:       /CN=D8FC677205B0DA9CA979B6D68B95B49C4B6C3267
Certificate serial:       56E0C65BB632BC12A1F3AC2B1CC8AA6B410F4BE1
Authority key identifier: D8:FC:67:72:05:B0:DA:9C:A9:79:B6:D6:8B:95:B4:9C:4B:6C:32:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/3136372e3235302e3230342e302f32342d3234203d3e20323632323533.roa
Signing time:             Tue 05 Mar 2024 18:15:33 +0000
ROA not before:           Tue 05 Mar 2024 18:10:33 +0000
ROA not after:            Tue 04 Mar 2025 18:15:33 +0000
asID:                     262253
IP address blocks:        167.250.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e0:c6:5b:b6:32:bc:12:a1:f3:ac:2b:1c:c8:aa:6b:41:0f:4b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8FC677205B0DA9CA979B6D68B95B49C4B6C3267
        Validity
            Not Before: Mar  5 18:10:33 2024 GMT
            Not After : Mar  4 18:15:33 2025 GMT
        Subject: CN=A323F8C071C780634F5AE503C934424EBAC08ABE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c7:12:b7:90:00:c3:79:25:23:a4:85:35:85:
                    2c:5d:8b:3f:52:08:80:e2:81:fc:98:3d:fa:12:24:
                    34:5d:18:64:4b:36:d8:43:a0:b5:c6:80:7b:06:a9:
                    15:46:ec:01:27:19:41:4a:24:a8:e5:11:c8:04:87:
                    69:6b:c9:78:d4:57:e6:36:b0:8d:1e:95:54:2f:d0:
                    b9:52:df:d2:f8:c5:66:6e:8f:06:79:bd:38:ed:5e:
                    97:45:90:01:53:c8:dd:90:2c:3d:7e:43:87:45:aa:
                    5a:51:73:7a:ea:90:d5:c1:eb:ea:17:3f:85:d5:be:
                    e4:a3:4f:40:3e:cf:d7:11:3f:82:fe:22:d5:cd:95:
                    be:83:db:67:20:4f:da:96:54:09:98:99:f8:c4:08:
                    ef:e6:c7:f4:3b:38:cf:a6:b8:07:99:a6:f6:35:7d:
                    c7:a6:6e:48:17:15:eb:81:44:ff:58:ec:d2:11:03:
                    04:c6:07:98:76:07:20:d8:a9:c5:0a:89:81:df:93:
                    4f:78:9e:47:d6:db:c5:66:e4:03:12:9e:c6:da:e7:
                    f8:a5:9f:34:4c:41:dd:55:77:02:e6:5f:15:62:d0:
                    7e:ee:e3:25:ea:b3:8b:d2:6c:5b:43:39:9f:93:f1:
                    58:9c:a9:cd:49:b8:19:69:43:68:fd:1b:eb:d7:43:
                    ee:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:23:F8:C0:71:C7:80:63:4F:5A:E5:03:C9:34:42:4E:BA:C0:8A:BE
            X509v3 Authority Key Identifier:
                keyid:D8:FC:67:72:05:B0:DA:9C:A9:79:B6:D6:8B:95:B4:9C:4B:6C:32:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/3136372e3235302e3230342e302f32342d3234203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:48:95:e4:4e:0b:64:09:be:14:3f:54:40:97:de:f6:90:f0:
         61:02:99:7d:d1:ce:c1:02:9d:1d:8e:7f:cd:11:02:b3:3d:19:
         6b:a6:80:e1:17:e1:d2:4f:5b:cd:d8:e7:13:ac:66:18:a5:3e:
         dc:46:f7:85:02:c3:87:56:36:c8:7a:d1:70:af:b0:f2:63:56:
         88:99:c4:28:31:67:d2:63:73:b5:74:83:00:42:b1:a7:96:02:
         dc:6a:74:9a:53:79:28:68:9a:21:ea:26:ac:2f:44:ba:e7:34:
         d6:29:b8:e6:b4:ad:43:e9:18:0f:da:82:af:8c:c6:77:2c:b5:
         7c:a9:02:a7:cc:14:5a:e3:7c:d1:d8:7a:de:a3:45:77:a2:a8:
         d7:13:70:cd:de:0d:51:1c:db:77:67:ae:99:57:b8:d5:dd:df:
         97:dc:18:b1:3e:8e:28:4a:ab:e5:d1:2d:0b:45:4e:6e:ec:d9:
         4c:d4:a7:04:2f:3e:c1:d0:13:68:96:56:40:8a:6a:a6:17:db:
         67:58:d6:81:45:92:8b:42:0e:40:5e:f9:6e:cc:99:f7:63:e9:
         91:82:07:b4:b6:aa:c5:87:dd:f1:21:29:2e:60:13:65:7d:8c:
         49:94:a2:24:db:a4:c6:d2:27:bd:64:5c:72:79:9d:c9:26:b4:
         01:b5:05:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:56 2024 by rpki-client on console-ams.rpki-client.org