Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/3136382e3139372e3235312e302f32342d3234203d3e203532353037.roa
File:                     3136382e3139372e3235312e302f32342d3234203d3e203532353037.roa (raw, json)
Hash identifier:          OM7nkYOV8AFf6j6MrkYx0VlnmQOoRMvsIXJgHfikKLg=
Subject key identifier:   2B:EC:95:8A:59:9D:02:4D:69:4C:6A:D4:99:A8:94:5D:E9:9D:AA:4D
Certificate issuer:       /CN=21412A097D724851BE961D093E8521CC77A7B163
Certificate serial:       48A58F43573B91F144C03050409A56B149066DD6
Authority key identifier: 21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/3136382e3139372e3235312e302f32342d3234203d3e203532353037.roa
Signing time:             Tue 04 Feb 2025 18:02:35 +0000
ROA not before:           Tue 04 Feb 2025 17:57:35 +0000
ROA not after:            Tue 03 Feb 2026 18:02:35 +0000
asID:                     52507
IP address blocks:        168.197.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl
                          rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a5:8f:43:57:3b:91:f1:44:c0:30:50:40:9a:56:b1:49:06:6d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21412A097D724851BE961D093E8521CC77A7B163
        Validity
            Not Before: Feb  4 17:57:35 2025 GMT
            Not After : Feb  3 18:02:35 2026 GMT
        Subject: CN=2BEC958A599D024D694C6AD499A8945DE99DAA4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a2:a0:f0:7b:00:bd:11:6c:14:48:4e:54:6b:
                    f9:ba:c0:f1:e2:db:9a:aa:c2:be:8c:28:c7:5c:fe:
                    41:7f:41:0b:03:a9:87:ee:67:cd:93:98:e9:aa:00:
                    6d:1e:fe:1d:58:2b:6c:d5:4c:26:d6:12:7b:28:9b:
                    30:35:92:5e:ec:d6:98:b1:cc:6b:17:0d:01:9d:7b:
                    b5:6d:1b:ff:b3:88:87:da:d2:44:bf:22:59:db:40:
                    b1:d0:54:8b:46:32:80:72:3b:74:29:41:21:25:70:
                    b1:b4:66:6d:95:b8:db:c7:35:0a:79:9e:da:00:4b:
                    17:24:69:21:86:55:ec:04:34:a5:02:7a:3d:9b:1e:
                    29:a7:82:34:53:31:b8:99:29:ed:d2:20:5a:1a:90:
                    c0:37:a4:51:6e:a4:f4:25:f2:44:56:4a:ef:cd:86:
                    08:eb:67:a5:8c:dd:05:bd:b2:ef:df:dc:a8:2e:94:
                    cb:38:1a:f0:65:f4:af:7d:98:fe:b2:43:0d:84:0b:
                    27:58:a9:4a:99:20:ba:8e:37:e4:40:7a:8f:a2:07:
                    30:0a:4a:dc:f2:83:62:51:a1:57:a4:9b:a7:f4:33:
                    2d:01:8d:a7:7a:5d:7f:2d:6e:25:a8:88:97:d4:88:
                    75:93:46:c3:2d:e6:72:cd:97:dc:6d:46:b2:7a:5a:
                    cb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EC:95:8A:59:9D:02:4D:69:4C:6A:D4:99:A8:94:5D:E9:9D:AA:4D
            X509v3 Authority Key Identifier:
                keyid:21:41:2A:09:7D:72:48:51:BE:96:1D:09:3E:85:21:CC:77:A7:B1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/21412A097D724851BE961D093E8521CC77A7B163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21412A097D724851BE961D093E8521CC77A7B163.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10B48349104E477689FE38A7B967A5093DC8388A9216FC61564B3CA14BA89C88/0/3136382e3139372e3235312e302f32342d3234203d3e203532353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:83:48:65:f3:e2:68:a9:be:4b:98:70:e6:f3:c5:d2:02:00:
         c2:68:2c:41:0d:cc:f2:e1:6d:24:b9:17:16:e8:df:8e:d7:70:
         55:5c:2b:4a:5e:16:76:6d:25:33:39:31:44:90:9d:f3:58:8d:
         7f:45:89:58:58:8d:35:df:7f:18:6e:29:62:d8:e8:d4:b9:6f:
         4f:4f:09:db:e5:68:78:3e:fa:bf:d3:f6:f4:bb:81:fd:7d:02:
         1f:19:a7:c2:ad:f1:1a:55:67:71:3d:65:4c:0f:d4:40:9d:f2:
         41:cb:fe:a3:02:27:f7:81:30:df:eb:2b:d0:f3:b3:55:dd:91:
         84:9e:87:d6:4b:57:49:8f:bf:e6:32:a9:c6:59:5c:94:54:e5:
         46:e2:a4:a1:bb:be:c5:ed:78:8a:a1:70:bf:ea:bf:e5:bc:c0:
         e4:ed:e7:5f:2a:ee:1f:92:20:fe:81:78:c4:3a:e9:5a:a3:c9:
         5a:5c:40:f6:4a:26:74:f0:e2:3c:56:92:28:77:0b:ff:cd:ba:
         7f:b3:ef:df:e9:90:da:1e:c9:aa:80:13:7f:16:61:09:bf:5b:
         e8:43:b1:50:42:24:07:cd:57:39:1d:b5:06:f1:3f:1c:59:d5:
         9d:3b:93:f3:12:c1:42:9e:6f:38:89:5f:e5:db:c7:d8:18:60:
         63:8d:0c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:20:22 2025 by rpki-client