Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07031B138BCD42121ACEF5EB2D60F1E4E467BDF55355C269F94C650F4F597F50/0/3136372e3235302e3131322e302f32322d3234203d3e203532333336.roa
File:                     3136372e3235302e3131322e302f32322d3234203d3e203532333336.roa (raw, json)
Hash identifier:          4CaJSNQMkRI5pjgrE4cJHewdUKONNi8eZfHaEM/TWKo=
Subject key identifier:   2E:90:A1:C0:75:84:D2:84:A9:67:75:77:A1:E1:59:C7:9C:90:68:F5
Certificate issuer:       /CN=2FCA9EF36FD988A173F6DE2A363AB29540E686A6
Certificate serial:       5ACD846806D2E86864B77FEB79AA0991B47B1C60
Authority key identifier: 2F:CA:9E:F3:6F:D9:88:A1:73:F6:DE:2A:36:3A:B2:95:40:E6:86:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCA9EF36FD988A173F6DE2A363AB29540E686A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07031B138BCD42121ACEF5EB2D60F1E4E467BDF55355C269F94C650F4F597F50/0/3136372e3235302e3131322e302f32322d3234203d3e203532333336.roa
Signing time:             Tue 05 Mar 2024 18:11:36 +0000
ROA not before:           Tue 05 Mar 2024 18:06:36 +0000
ROA not after:            Tue 04 Mar 2025 18:11:36 +0000
asID:                     52336
IP address blocks:        167.250.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/07031B138BCD42121ACEF5EB2D60F1E4E467BDF55355C269F94C650F4F597F50/0/2FCA9EF36FD988A173F6DE2A363AB29540E686A6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/07031B138BCD42121ACEF5EB2D60F1E4E467BDF55355C269F94C650F4F597F50/0/2FCA9EF36FD988A173F6DE2A363AB29540E686A6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCA9EF36FD988A173F6DE2A363AB29540E686A6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:cd:84:68:06:d2:e8:68:64:b7:7f:eb:79:aa:09:91:b4:7b:1c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCA9EF36FD988A173F6DE2A363AB29540E686A6
        Validity
            Not Before: Mar  5 18:06:36 2024 GMT
            Not After : Mar  4 18:11:36 2025 GMT
        Subject: CN=2E90A1C07584D284A9677577A1E159C79C9068F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cd:da:8c:0f:68:48:ad:77:e2:e2:e9:07:79:
                    46:1f:d8:5a:03:4b:2f:eb:7d:76:0f:55:f7:ad:b4:
                    4f:40:52:ab:e1:93:1b:ad:c4:c2:68:8e:8c:08:4b:
                    3a:90:06:b2:f9:f2:aa:5b:22:1e:6e:15:1b:1e:c8:
                    30:18:11:54:91:2e:49:fa:c5:2d:5a:c7:df:d6:00:
                    f1:73:75:3a:43:60:de:05:d3:bf:f8:53:b2:da:1b:
                    1d:b0:89:ae:e9:c7:ba:a9:3d:2a:df:b4:ca:0c:f7:
                    5a:58:55:8a:03:36:61:9d:34:45:e9:dd:35:0d:58:
                    97:e6:e8:f9:10:6a:40:36:8d:a3:42:e8:03:c8:15:
                    4f:bb:fb:21:87:31:ec:20:cc:aa:43:93:25:1c:fa:
                    4d:2d:07:18:ae:56:90:66:fd:ac:6d:f0:f7:9b:54:
                    02:c7:07:e8:78:1b:bd:a9:3f:08:f3:b9:40:c7:a5:
                    cc:66:b8:0e:65:4b:5a:a0:17:b5:2b:6d:54:3e:ac:
                    b8:86:44:56:e4:91:49:9c:60:36:22:41:55:2d:86:
                    b2:03:2d:91:09:09:60:c2:75:99:99:7a:99:39:2d:
                    0a:af:16:1e:1d:51:04:b0:45:51:e2:6d:6e:15:55:
                    57:d0:26:cf:6f:fd:55:1d:af:91:fa:e6:60:7a:fd:
                    4e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:90:A1:C0:75:84:D2:84:A9:67:75:77:A1:E1:59:C7:9C:90:68:F5
            X509v3 Authority Key Identifier:
                keyid:2F:CA:9E:F3:6F:D9:88:A1:73:F6:DE:2A:36:3A:B2:95:40:E6:86:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07031B138BCD42121ACEF5EB2D60F1E4E467BDF55355C269F94C650F4F597F50/0/2FCA9EF36FD988A173F6DE2A363AB29540E686A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCA9EF36FD988A173F6DE2A363AB29540E686A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07031B138BCD42121ACEF5EB2D60F1E4E467BDF55355C269F94C650F4F597F50/0/3136372e3235302e3131322e302f32322d3234203d3e203532333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:1e:ee:d9:f1:e7:fe:bd:26:5e:76:76:bd:23:e7:64:62:d6:
         00:2d:de:6e:89:b5:67:92:d2:27:90:b9:32:4c:56:1a:d5:5c:
         b6:75:4e:6b:e4:75:e9:ce:23:d7:35:c1:0a:e4:8b:05:2a:72:
         4a:ec:f9:8e:c7:64:eb:a3:21:69:dd:80:a9:9a:6f:b4:20:dd:
         9f:c3:fe:9f:a8:63:a8:64:7b:bf:51:a7:82:e7:2e:ac:5b:54:
         6b:6d:92:6e:ac:53:4b:b6:79:bb:57:64:10:b3:45:56:9f:36:
         15:99:80:12:3b:f0:b9:37:9a:1c:f5:09:84:80:bf:0b:29:65:
         81:7d:19:09:5b:9d:af:9b:2a:75:1b:10:b6:6d:9e:32:09:bc:
         18:c4:55:2c:ec:35:d6:17:c3:26:4d:a7:b7:0f:31:f2:e0:31:
         c0:f5:2a:3c:24:71:4f:8e:b5:7d:d0:4e:fa:3b:fe:b9:c0:2a:
         ba:af:10:1f:fc:a4:34:53:63:be:b9:97:80:3c:54:1b:9c:0f:
         64:24:dc:20:62:52:6b:b1:17:1c:6b:1c:3f:4e:07:f2:ae:50:
         64:f2:55:80:a5:4d:fb:3c:00:ec:0a:13:f8:75:84:b6:30:6f:
         a2:4d:82:a7:25:ed:48:6f:30:28:63:9e:66:c8:e8:2e:ad:e9:
         18:fe:65:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 00:55:47 2024 by rpki-client on console-ams.rpki-client.org