Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3136372e3235302e3230382e302f32342d3234203d3e203532323731.roa
File:                     3136372e3235302e3230382e302f32342d3234203d3e203532323731.roa (raw, json)
Hash identifier:          IeifnMfKWdOafCZaD5UzDSSKPZtdREpRdrw6obeJZg0=
Subject key identifier:   2F:B6:66:49:40:CC:E3:57:A0:60:F4:08:1C:EF:CD:C6:DE:4A:30:56
Certificate issuer:       /CN=85939B22368B791C18889C114876582A293716F4
Certificate serial:       6D4979AB59A327E22D329124322A39DF55C62580
Authority key identifier: 85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3136372e3235302e3230382e302f32342d3234203d3e203532323731.roa
Signing time:             Tue 04 Feb 2025 18:47:21 +0000
ROA not before:           Tue 04 Feb 2025 18:42:21 +0000
ROA not after:            Tue 03 Feb 2026 18:47:21 +0000
asID:                     52271
IP address blocks:        167.250.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:49:79:ab:59:a3:27:e2:2d:32:91:24:32:2a:39:df:55:c6:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85939B22368B791C18889C114876582A293716F4
        Validity
            Not Before: Feb  4 18:42:21 2025 GMT
            Not After : Feb  3 18:47:21 2026 GMT
        Subject: CN=2FB6664940CCE357A060F4081CEFCDC6DE4A3056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:71:3d:6c:c7:56:fa:ab:b4:13:6e:39:04:2f:
                    fb:a1:ab:30:8d:a3:13:2c:4d:1e:c1:58:a1:46:80:
                    f3:6e:25:72:3c:a2:37:d4:70:52:25:e1:23:e0:68:
                    bf:54:1e:d4:31:e2:0e:70:e1:2b:c9:4c:6d:0e:4d:
                    38:95:38:53:4d:48:68:c5:48:48:3b:d0:68:9e:61:
                    36:6f:3d:fb:13:01:f4:55:cf:ab:bb:da:35:61:a1:
                    c6:7e:1e:89:6d:c2:08:f4:4b:9b:fe:a4:f3:d7:de:
                    4a:80:73:02:24:a7:d4:bf:3e:09:b0:c6:be:de:f3:
                    72:80:7b:7d:16:12:7b:3b:35:46:2a:74:b5:8c:90:
                    5c:3b:c1:12:cb:0b:c4:c1:40:4d:13:1a:d0:91:0a:
                    da:0f:03:ec:35:fa:4b:44:75:82:c6:99:6b:62:ff:
                    02:77:31:ee:01:24:f4:47:5c:4f:4d:51:37:43:4b:
                    7a:69:4b:80:12:ed:b1:e0:8f:b4:d7:ae:42:1f:c9:
                    c6:8c:37:90:fc:c1:9e:b6:42:67:27:89:22:39:a7:
                    ba:d5:71:f8:cf:79:5e:b4:85:85:cc:84:59:69:62:
                    3f:b2:3a:53:d0:74:75:b0:b1:72:56:8d:5e:56:c9:
                    cd:f7:5b:cd:56:e3:d0:ca:f8:99:7e:a8:ad:8c:f9:
                    b2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B6:66:49:40:CC:E3:57:A0:60:F4:08:1C:EF:CD:C6:DE:4A:30:56
            X509v3 Authority Key Identifier:
                keyid:85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3136372e3235302e3230382e302f32342d3234203d3e203532323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:af:d8:c3:b8:41:1a:54:9a:b3:73:0a:fb:11:b7:c6:a0:fb:
         9e:82:ea:8e:35:5b:6f:25:58:95:07:d5:60:98:d1:c2:1e:e9:
         9e:8b:c3:39:a5:24:bb:ea:86:54:70:21:d7:c5:71:11:8b:90:
         0a:31:40:0a:a4:e3:73:3a:76:f5:a5:c3:f6:e6:03:3f:3d:cc:
         fd:8c:98:e5:9a:76:91:69:c3:c6:3c:b0:60:c7:9e:f9:29:99:
         41:02:d5:86:18:6f:ac:0b:7a:5b:5a:bf:bb:2f:ce:29:64:ac:
         bd:d2:7b:70:61:87:5e:7a:51:7a:6e:a4:d3:07:cc:76:00:23:
         b0:2c:bc:46:d1:47:d8:9c:c9:7e:4e:fa:c0:0f:07:2a:8c:59:
         19:9a:9c:6c:d5:1e:99:19:0f:5a:33:bb:ad:74:ab:51:70:39:
         d3:91:6d:53:49:bf:39:32:39:fe:75:e6:34:c9:95:b3:14:07:
         6a:2a:d5:30:89:29:b7:08:0f:64:d3:f9:ec:a5:19:50:3b:37:
         7f:97:0b:ab:6c:15:4d:cd:b0:ab:b5:8d:1a:c0:1c:1f:64:23:
         d4:7e:c6:64:b9:cb:f8:b0:3a:21:21:48:f2:4a:fc:92:6d:64:
         75:2c:9b:ec:2c:d7:6f:34:2b:45:90:ce:80:52:19:24:22:8d:
         7e:c0:94:0e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbUl5q1mjJ+ItMpEkMio531XGJYAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU5MzlCMjIzNjhCNzkxQzE4ODg5QzExNDg3NjU4MkEy
OTM3MTZGNDAeFw0yNTAyMDQxODQyMjFaFw0yNjAyMDMxODQ3MjFaMDMxMTAvBgNV
BAMTKDJGQjY2NjQ5NDBDQ0UzNTdBMDYwRjQwODFDRUZDREM2REU0QTMwNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgcT1sx1b6q7QTbjkEL/uhqzCN
oxMsTR7BWKFGgPNuJXI8ojfUcFIl4SPgaL9UHtQx4g5w4SvJTG0OTTiVOFNNSGjF
SEg70GieYTZvPfsTAfRVz6u72jVhocZ+Holtwgj0S5v+pPPX3kqAcwIkp9S/Pgmw
xr7e83KAe30WEns7NUYqdLWMkFw7wRLLC8TBQE0TGtCRCtoPA+w1+ktEdYLGmWti
/wJ3Me4BJPRHXE9NUTdDS3ppS4AS7bHgj7TXrkIfycaMN5D8wZ62QmcniSI5p7rV
cfjPeV60hYXMhFlpYj+yOlPQdHWwsXJWjV5Wyc33W81W49DK+Jl+qK2M+bJRAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUL7ZmSUDM41egYPQIHO/Nxt5KMFYwHwYDVR0j
BBgwFoAUhZObIjaLeRwYiJwRSHZYKik3FvQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xOEQ0REE2NEE5QzVCMjE5QjdFQkUxMEI4NDZGRjM5NDZB
NzdGNzQyMDQ0ODRFRDVFODVFNjA2NzAwNjM5MzYzLzAvODU5MzlCMjIzNjhCNzkx
QzE4ODg5QzExNDg3NjU4MkEyOTM3MTZGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NTkzOUIyMjM2OEI3OTFDMTg4
ODlDMTE0ODc2NTgyQTI5MzcxNkY0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMThENERBNjRBOUM1QjIxOUI3RUJFMTBCODQ2RkYzOTQ2QTc3Rjc0MjA0
NDg0RUQ1RTg1RTYwNjcwMDYzOTM2My8wLzMxMzYzNzJlMzIzNTMwMmUzMjMwMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzIzNzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/rQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAyr9jDuEEaVJqzcwr7EbfGoPueguqONVtvJViV
B9VgmNHCHumei8M5pSS76oZUcCHXxXERi5AKMUAKpONzOnb1pcP25gM/Pcz9jJjl
mnaRacPGPLBgx575KZlBAtWGGG+sC3pbWr+7L84pZKy90ntwYYdeelF6bqTTB8x2
ACOwLLxG0UfYnMl+TvrADwcqjFkZmpxs1R6ZGQ9aM7utdKtRcDnTkW1TSb85Mjn+
deY0yZWzFAdqKtUwiSm3CA9k0/nspRlQOzd/lwurbBVNzbCrtY0awBwfZCPUfsZk
ucv4sDohIUjySvySbWR1LJvsLNdvNCtFkM6AUhkkIo1+wJQO
-----END CERTIFICATE-----
Generated at Fri Apr 18 03:52:39 2025 by rpki-client