Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/3136372e3235302e3230352e302f32342d3234203d3e20323632323533.roa
File:                     3136372e3235302e3230352e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier:          g+aPHfKiIOV4ZbsgKcH+/noZS9M+Qglq450EqOIEiPQ=
Subject key identifier:   58:33:CC:67:1E:AA:CF:BA:5E:97:EC:C9:A7:60:74:2C:7C:A1:24:6B
Certificate issuer:       /CN=D8FC677205B0DA9CA979B6D68B95B49C4B6C3267
Certificate serial:       67EA96917663755AA83605A648DEDF19F3F82B30
Authority key identifier: D8:FC:67:72:05:B0:DA:9C:A9:79:B6:D6:8B:95:B4:9C:4B:6C:32:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/3136372e3235302e3230352e302f32342d3234203d3e20323632323533.roa
Signing time:             Tue 05 Mar 2024 18:15:32 +0000
ROA not before:           Tue 05 Mar 2024 18:10:32 +0000
ROA not after:            Tue 04 Mar 2025 18:15:32 +0000
asID:                     262253
IP address blocks:        167.250.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ea:96:91:76:63:75:5a:a8:36:05:a6:48:de:df:19:f3:f8:2b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8FC677205B0DA9CA979B6D68B95B49C4B6C3267
        Validity
            Not Before: Mar  5 18:10:32 2024 GMT
            Not After : Mar  4 18:15:32 2025 GMT
        Subject: CN=5833CC671EAACFBA5E97ECC9A760742C7CA1246B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f4:00:2c:6e:ff:72:25:46:e7:06:41:7c:77:
                    01:8a:5b:19:09:f9:71:5e:af:98:6c:87:56:63:49:
                    ae:39:51:05:48:9d:7a:8d:2e:7c:52:49:6e:e8:ae:
                    92:fd:e9:ed:fa:98:50:5a:7e:f7:7f:ec:78:60:59:
                    ec:df:b0:6e:1e:fe:5d:ce:62:da:6f:a4:07:cf:b5:
                    dd:49:64:b4:09:c4:c8:73:d9:36:d3:fa:de:53:7a:
                    60:27:f9:da:7c:11:f9:6a:b5:f7:82:1b:20:27:34:
                    41:7f:7f:86:ec:80:95:64:b0:f4:a9:cf:98:ae:ec:
                    f5:c3:36:31:33:fc:70:89:30:10:30:df:77:d7:2a:
                    90:5a:5e:63:1f:ce:5e:cc:ab:1e:3f:4b:69:1d:c4:
                    14:36:b3:4c:89:7c:1f:67:57:4f:c4:4c:23:d7:7a:
                    7e:cf:b1:35:bc:31:a1:34:53:f8:0b:ea:43:3d:88:
                    f9:1a:d4:ed:9a:26:1f:66:11:5d:9d:cc:e3:e5:71:
                    29:cf:0c:b5:74:d8:e4:bd:d9:6e:4d:3f:1a:bb:a2:
                    d4:87:a7:1b:f0:a2:bc:8c:c4:db:4f:b8:12:e5:ff:
                    85:6f:42:d8:a8:da:0c:cf:3e:81:c4:17:7c:3b:00:
                    56:24:0b:8a:2c:a0:92:10:d0:5e:a4:ee:47:52:5c:
                    e9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:33:CC:67:1E:AA:CF:BA:5E:97:EC:C9:A7:60:74:2C:7C:A1:24:6B
            X509v3 Authority Key Identifier:
                keyid:D8:FC:67:72:05:B0:DA:9C:A9:79:B6:D6:8B:95:B4:9C:4B:6C:32:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8FC677205B0DA9CA979B6D68B95B49C4B6C3267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04C34B8F1C465869E219A65CA369E023B21FDAB2CC1AD691088B3D88C14DCEB0/0/3136372e3235302e3230352e302f32342d3234203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:6e:6e:18:f5:fd:f7:42:4a:f1:45:17:52:78:13:4b:e3:16:
         fd:f7:33:9d:06:ca:c3:91:e0:f5:07:b0:71:51:03:e7:42:a0:
         76:f8:e7:f5:43:73:7f:4b:29:c9:8e:25:1e:33:3d:ac:bc:22:
         ef:83:a4:7e:16:f4:47:45:39:0b:37:eb:4c:49:c1:13:8c:ad:
         f5:34:5a:a2:d8:d8:53:0f:cd:9a:f1:6c:1f:10:a1:09:f7:b6:
         1c:cf:80:ab:64:87:b0:cb:a0:06:05:48:c1:33:ab:7d:03:7d:
         58:cc:cc:04:77:fa:33:bc:bf:04:74:eb:64:0b:2f:da:fc:83:
         c0:32:f0:0d:d6:c7:75:6b:1e:67:32:48:d5:5d:79:bd:55:e2:
         92:21:60:cd:23:09:62:56:0a:09:e0:d5:c7:23:49:e0:2c:eb:
         23:a7:c6:70:3b:11:77:c4:99:b9:05:45:b3:8b:bc:fa:b3:02:
         20:10:71:2f:3a:aa:83:bb:d7:78:8b:ad:43:6a:29:8d:64:33:
         f5:88:bf:4a:fe:94:f0:7f:a0:08:7a:1b:7c:63:df:2d:d3:ad:
         66:88:a1:b3:24:c6:32:d8:b0:94:f2:28:d0:b5:b5:94:fa:fa:
         93:c2:b3:9c:ad:53:80:c8:34:b4:83:64:2f:40:f3:1c:96:fa:
         47:84:53:b6
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUZ+qWkXZjdVqoNgWmSN7fGfP4KzAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhGQzY3NzIwNUIwREE5Q0E5NzlCNkQ2OEI5NUI0OUM0
QjZDMzI2NzAeFw0yNDAzMDUxODEwMzJaFw0yNTAzMDQxODE1MzJaMDMxMTAvBgNV
BAMTKDU4MzNDQzY3MUVBQUNGQkE1RTk3RUNDOUE3NjA3NDJDN0NBMTI0NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC19AAsbv9yJUbnBkF8dwGKWxkJ
+XFer5hsh1ZjSa45UQVInXqNLnxSSW7orpL96e36mFBafvd/7HhgWezfsG4e/l3O
YtpvpAfPtd1JZLQJxMhz2TbT+t5TemAn+dp8EflqtfeCGyAnNEF/f4bsgJVksPSp
z5iu7PXDNjEz/HCJMBAw33fXKpBaXmMfzl7Mqx4/S2kdxBQ2s0yJfB9nV0/ETCPX
en7PsTW8MaE0U/gL6kM9iPka1O2aJh9mEV2dzOPlcSnPDLV02OS92W5NPxq7otSH
pxvworyMxNtPuBLl/4VvQtio2gzPPoHEF3w7AFYkC4osoJIQ0F6k7kdSXOk5AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUWDPMZx6qz7pel+zJp2B0LHyhJGswHwYDVR0j
BBgwFoAU2PxncgWw2pypebbWi5W0nEtsMmcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNEMzNEI4RjFDNDY1ODY5RTIxOUE2NUNBMzY5RTAyM0Iy
MUZEQUIyQ0MxQUQ2OTEwODhCM0Q4OEMxNERDRUIwLzAvRDhGQzY3NzIwNUIwREE5
Q0E5NzlCNkQ2OEI5NUI0OUM0QjZDMzI2Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEZDNjc3MjA1QjBEQTlDQTk3
OUI2RDY4Qjk1QjQ5QzRCNkMzMjY3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDRDMzRCOEYxQzQ2NTg2OUUyMTlBNjVDQTM2OUUwMjNCMjFGREFCMkND
MUFENjkxMDg4QjNEODhDMTREQ0VCMC8wLzMxMzYzNzJlMzIzNTMwMmUzMjMwMzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMjM1MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACn
+s0wDQYJKoZIhvcNAQELBQADggEBABNubhj1/fdCSvFFF1J4E0vjFv33M50GysOR
4PUHsHFRA+dCoHb45/VDc39LKcmOJR4zPay8Iu+DpH4W9EdFOQs360xJwROMrfU0
WqLY2FMPzZrxbB8QoQn3thzPgKtkh7DLoAYFSMEzq30DfVjMzAR3+jO8vwR062QL
L9r8g8Ay8A3Wx3VrHmcySNVdeb1V4pIhYM0jCWJWCgng1ccjSeAs6yOnxnA7EXfE
mbkFRbOLvPqzAiAQcS86qoO713iLrUNqKY1kM/WIv0r+lPB/oAh6G3xj3y3TrWaI
obMkxjLYsJTyKNC1tZT6+pPCs5ytU4DINLSDZC9A8xyW+keEU7Y=
-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:56 2024 by rpki-client on console-ams.rpki-client.org