Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/3136382e3139372e3235302e302f32342d3234203d3e20323634373736.roa
File:                     3136382e3139372e3235302e302f32342d3234203d3e20323634373736.roa (raw, json)
Hash identifier:          lYDTn5iGQlXU/kc+dTk7jVowLAQEqyCq36Bb6fOYEs4=
Subject key identifier:   BC:71:92:A6:EA:11:21:BA:66:51:88:D5:B8:23:18:64:91:AC:59:44
Certificate issuer:       /CN=21412A097D724851BE961D093E8521CC77A7B163
Certificate serial:       75C1C3F73CCA07AA10F9D95ADE6565B5E27692E4
Authority key identifier: 21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/3136382e3139372e3235302e302f32342d3234203d3e20323634373736.roa
Signing time:             Tue 04 Feb 2025 18:02:36 +0000
ROA not before:           Tue 04 Feb 2025 17:57:36 +0000
ROA not after:            Tue 03 Feb 2026 18:02:36 +0000
asID:                     264776
IP address blocks:        168.197.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl
                          rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c1:c3:f7:3c:ca:07:aa:10:f9:d9:5a:de:65:65:b5:e2:76:92:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21412A097D724851BE961D093E8521CC77A7B163
        Validity
            Not Before: Feb  4 17:57:36 2025 GMT
            Not After : Feb  3 18:02:36 2026 GMT
        Subject: CN=BC7192A6EA1121BA665188D5B823186491AC5944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4c:80:6d:a4:60:5a:e1:0c:11:ad:0c:68:9c:
                    a1:68:d1:17:81:ae:1b:f3:a3:83:53:f2:8b:92:cd:
                    f0:99:54:e2:4e:4b:e3:8b:25:44:a7:f7:67:5c:9e:
                    71:49:3b:b3:12:2d:91:b4:cc:6c:86:98:18:f1:dd:
                    7f:34:dc:09:5a:a7:e8:5c:8a:ca:c7:ba:7b:18:83:
                    2c:18:c7:a1:ad:55:e8:d5:24:ef:f3:64:47:26:d7:
                    30:5c:71:f7:de:d5:24:01:da:cd:4f:e3:b3:e8:64:
                    1b:52:c6:70:5a:98:4c:8f:27:08:14:06:43:e8:ca:
                    8b:55:d3:8d:d1:59:0e:86:64:54:b3:0d:6d:b0:e5:
                    86:4a:69:28:ca:3c:95:a1:fb:ab:5e:c3:4f:46:4d:
                    8a:cc:2b:1b:f7:6d:38:df:15:be:ef:7a:dd:dc:69:
                    48:c8:72:fa:b0:4a:3b:b0:bf:0d:c3:93:e5:3e:40:
                    15:d3:ad:28:29:3b:7d:93:b4:c9:17:b5:85:67:a8:
                    f4:8d:3d:d4:4a:0b:fa:f2:69:81:d6:b6:52:6f:03:
                    18:b2:6b:8b:0a:90:9c:a4:2a:70:0a:e4:36:6e:cd:
                    8e:69:af:bc:77:c3:4a:6c:43:08:3e:13:60:22:03:
                    71:5f:97:4c:32:30:f4:ca:cd:6e:04:d0:ce:04:93:
                    08:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:71:92:A6:EA:11:21:BA:66:51:88:D5:B8:23:18:64:91:AC:59:44
            X509v3 Authority Key Identifier:
                keyid:21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/3136382e3139372e3235302e302f32342d3234203d3e20323634373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:95:c4:37:50:a5:46:f5:70:95:39:80:a0:8d:1b:e1:9b:9f:
         4f:d3:7f:34:d0:ea:3e:e8:b7:cb:c6:84:5c:a0:36:fe:94:91:
         7e:0a:40:d6:67:46:0b:90:8d:f6:ca:f1:90:c6:6b:e8:88:eb:
         24:43:5e:56:33:d9:08:a4:4a:6f:15:4d:b2:7f:a1:7e:f4:46:
         ae:04:f3:aa:b9:df:85:fb:76:5f:e8:64:8b:c3:5e:bf:f0:55:
         39:d4:26:5e:04:87:0e:0a:c3:16:16:5b:f1:42:da:e1:c8:52:
         7d:c6:9b:eb:66:27:3b:26:84:f3:01:c2:2d:e9:7b:f7:82:f4:
         e9:c7:78:91:fa:72:04:f4:69:db:05:1b:f4:ca:14:13:13:9c:
         24:37:7b:0e:1e:ba:29:61:34:af:ee:0b:09:23:b5:d7:53:39:
         98:32:5e:2d:af:b9:ce:2d:53:e7:0b:1f:f7:50:1c:c7:2d:19:
         67:3a:1c:21:ff:05:75:34:2d:93:23:2d:32:e8:4c:52:4d:53:
         e8:74:e8:02:32:e0:01:e9:31:e0:68:0c:95:30:9e:07:86:4b:
         2e:a7:4e:4a:37:79:e4:78:26:f3:1d:3e:ea:26:cc:1f:3b:5c:
         7d:95:cc:a5:e8:21:79:8d:90:5b:b6:e4:d6:26:e5:03:4d:5a:
         43:f0:50:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 21:32:27 2025 by rpki-client