Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/3136382e3139372e3235302e302f32342d3234203d3e20323634373736.roa
File:                     3136382e3139372e3235302e302f32342d3234203d3e20323634373736.roa (raw, json)
Hash identifier:          PEoRLQz9i4Gt/TS0FIJtlE5NgIUWGJCAbhd1UcDJdHI=
Subject key identifier:   01:6C:9B:F7:D9:54:F1:00:CF:79:31:32:E9:72:62:15:6C:C4:26:C9
Certificate issuer:       /CN=21412A097D724851BE961D093E8521CC77A7B163
Certificate serial:       600FADF190810F7C596BBCE41B7FD715B1FA4F5E
Authority key identifier: 21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/3136382e3139372e3235302e302f32342d3234203d3e20323634373736.roa
Signing time:             Tue 05 Mar 2024 17:56:29 +0000
ROA not before:           Tue 05 Mar 2024 17:51:29 +0000
ROA not after:            Tue 04 Mar 2025 17:56:29 +0000
asID:                     264776
IP address blocks:        168.197.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl
                          rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:0f:ad:f1:90:81:0f:7c:59:6b:bc:e4:1b:7f:d7:15:b1:fa:4f:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21412A097D724851BE961D093E8521CC77A7B163
        Validity
            Not Before: Mar  5 17:51:29 2024 GMT
            Not After : Mar  4 17:56:29 2025 GMT
        Subject: CN=016C9BF7D954F100CF793132E97262156CC426C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8f:d1:bd:cf:53:c6:78:b5:2c:2d:ea:60:48:
                    c1:4b:18:1a:fc:16:2f:44:f7:1e:8c:09:0d:ab:44:
                    21:26:11:56:00:da:2d:40:f5:60:dd:bb:4e:4b:8b:
                    b9:22:e8:65:90:39:6a:6a:31:13:d9:de:cb:27:f7:
                    e2:ce:96:99:a8:7b:a3:d5:ca:eb:0c:51:12:2f:b4:
                    ac:b6:a2:4c:cd:13:91:0a:27:a7:95:55:a5:21:b5:
                    60:65:fb:d2:36:f9:7d:97:d0:8a:4e:a1:ce:38:4f:
                    ee:61:25:96:52:23:b2:9a:95:b4:83:b0:b6:93:a4:
                    fc:c4:2a:12:1c:b0:da:11:d5:7b:b6:08:a1:f7:f7:
                    63:c7:81:2f:17:50:fd:67:29:78:fb:20:c6:2a:16:
                    02:ee:ca:8a:21:69:60:81:f8:27:07:a6:13:bd:91:
                    fb:0a:25:e2:97:7e:56:92:f4:0d:11:a0:ba:aa:2d:
                    30:80:9b:43:20:1a:7f:74:6a:65:ed:64:14:32:07:
                    c7:2f:e6:8d:c3:51:6a:f9:96:af:b9:30:6c:30:6e:
                    12:42:3e:24:3c:10:36:0e:8f:dd:64:cb:28:3b:c9:
                    28:22:a3:6a:a3:c8:0a:83:82:5b:4d:5b:aa:5b:b3:
                    79:89:43:a3:70:70:ac:9e:de:b3:eb:21:f2:e6:31:
                    8f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6C:9B:F7:D9:54:F1:00:CF:79:31:32:E9:72:62:15:6C:C4:26:C9
            X509v3 Authority Key Identifier:
                keyid:21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/3136382e3139372e3235302e302f32342d3234203d3e20323634373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:e2:f6:65:1f:ec:10:3e:55:34:9b:64:4a:f3:69:60:2e:a6:
         d0:17:a2:48:7f:d8:3d:16:04:eb:e8:64:51:c4:66:83:1d:04:
         d8:c9:12:98:8a:42:41:9a:3e:5f:84:07:e6:a2:2e:bb:a2:89:
         9c:47:5b:e1:68:a5:4c:6c:8b:9e:90:fa:df:92:d3:8a:f7:e8:
         67:5a:bd:e9:bb:7f:8d:d8:cc:de:85:76:15:a2:c9:76:11:d2:
         fc:d0:a3:1e:47:48:7a:4e:8a:f0:f3:0f:62:6a:d0:4e:ee:a9:
         d6:0a:6f:79:b9:56:12:e2:02:e4:68:91:b5:fb:70:94:61:66:
         38:fc:3f:89:36:51:c9:18:50:22:fc:78:88:c4:3b:8c:69:3f:
         f1:7f:cd:bd:22:7f:de:bd:de:87:5f:9a:87:5e:e5:df:c7:41:
         92:8c:12:24:a9:d8:3e:a6:b4:0e:4f:0d:ea:53:d5:89:73:92:
         e1:4b:f2:56:95:4c:d3:55:03:6e:28:13:1c:74:b1:8e:f0:32:
         df:29:51:e0:fa:43:18:34:4b:23:14:87:6a:b0:02:4a:33:93:
         f5:ea:77:9e:ed:ac:ac:16:15:23:7f:1c:77:bc:fb:63:a3:e4:
         7b:9f:c7:25:8d:95:d1:c2:b0:15:40:ad:ce:2b:57:e7:8e:55:
         ff:3d:a1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org