Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3136372e3235302e3231302e302f32342d3234203d3e203532323731.roa
File:                     3136372e3235302e3231302e302f32342d3234203d3e203532323731.roa (raw, json)
Hash identifier:          3BJXrX3o6yYxznvJjv2l9gycJ/cWbjf9dtX5JpDATc0=
Subject key identifier:   7C:6A:EA:92:39:DB:44:46:04:C0:04:57:D2:62:23:48:B2:A7:8D:DB
Certificate issuer:       /CN=85939B22368B791C18889C114876582A293716F4
Certificate serial:       7A5B55421F3D3E08A31585130D08A03FA5860F02
Authority key identifier: 85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3136372e3235302e3231302e302f32342d3234203d3e203532323731.roa
Signing time:             Tue 04 Feb 2025 18:47:22 +0000
ROA not before:           Tue 04 Feb 2025 18:42:22 +0000
ROA not after:            Tue 03 Feb 2026 18:47:22 +0000
asID:                     52271
IP address blocks:        167.250.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:5b:55:42:1f:3d:3e:08:a3:15:85:13:0d:08:a0:3f:a5:86:0f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85939B22368B791C18889C114876582A293716F4
        Validity
            Not Before: Feb  4 18:42:22 2025 GMT
            Not After : Feb  3 18:47:22 2026 GMT
        Subject: CN=7C6AEA9239DB444604C00457D2622348B2A78DDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:79:b0:4f:2c:78:fe:21:71:bb:eb:3a:9e:af:
                    a5:f3:ae:29:0e:c4:de:25:1e:02:60:3b:6f:76:f0:
                    9d:5f:03:88:d9:c8:31:c9:c8:21:c5:33:ea:4e:df:
                    04:f5:da:97:7a:56:ca:3a:69:3c:c1:9f:09:51:b6:
                    55:5b:ec:be:75:d4:40:1c:ab:3e:8b:8d:c7:e9:06:
                    7b:05:ae:b4:ca:77:fb:1c:45:48:8d:b8:a2:43:b5:
                    6e:a8:f8:94:da:ae:96:b6:86:e5:4d:88:d3:7e:16:
                    4a:28:29:aa:08:91:b2:be:dd:e0:f0:fa:c5:70:78:
                    31:ad:8c:d4:38:ed:28:17:2e:fc:31:40:5c:1b:3c:
                    b3:d7:10:75:78:ca:80:52:dd:17:aa:10:99:00:f0:
                    0f:8f:ed:b8:01:47:a9:1c:47:ac:73:57:e0:53:0e:
                    8c:c0:a8:03:1f:29:c8:8b:79:d2:36:48:7c:73:e2:
                    3a:46:19:80:98:b9:a0:f0:10:f7:51:e3:41:d3:65:
                    ae:74:ff:e5:51:10:34:b1:75:ca:0f:dd:f9:1d:4c:
                    07:6e:a6:80:9b:4b:18:e6:51:ee:c1:af:7f:b1:ba:
                    46:8a:8d:aa:11:e1:c3:ca:6f:61:a6:c1:20:31:0e:
                    ad:ed:29:63:39:fa:62:50:26:50:c8:59:11:15:a1:
                    96:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6A:EA:92:39:DB:44:46:04:C0:04:57:D2:62:23:48:B2:A7:8D:DB
            X509v3 Authority Key Identifier:
                keyid:85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3136372e3235302e3231302e302f32342d3234203d3e203532323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:11:ba:58:f0:fe:50:59:ed:13:f1:e2:de:fa:ee:4c:4f:8d:
         94:28:e5:a4:85:87:41:f9:44:44:fe:33:36:2c:96:a8:f1:4d:
         10:03:3e:2a:4d:4d:63:0a:bd:58:0e:62:d3:f1:c7:89:bd:56:
         8b:f1:4f:73:7b:92:d8:fc:dc:f8:41:43:e4:23:af:ff:66:f3:
         aa:3d:a2:df:25:9b:39:25:95:9f:1b:01:05:df:ed:00:c8:30:
         ce:77:bc:16:da:ac:0d:c8:15:4f:d7:f0:26:c9:fc:e9:34:1c:
         ff:e8:9d:23:d3:17:3c:e6:8e:ea:44:85:30:98:4a:56:8e:59:
         80:9f:5e:c6:e9:cf:33:4f:2a:34:69:27:ae:3f:46:06:54:43:
         1c:93:24:4a:fb:89:71:99:18:fd:6a:be:23:18:fb:e1:a9:07:
         3c:75:b7:e1:d9:18:3d:58:86:18:b8:99:f9:e0:e8:15:37:10:
         eb:b3:44:43:95:f6:90:0f:c7:f9:d5:1c:db:58:c2:ea:71:64:
         8e:61:ae:28:e7:78:19:73:7d:6e:c7:64:21:a1:76:43:0c:97:
         e8:1a:38:1e:c9:ff:94:60:cd:6d:20:2e:4c:bb:46:62:af:25:
         ed:00:03:9d:42:30:bc:39:49:1d:fa:96:65:a6:a2:3f:ff:18:
         38:bc:39:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:50:22 2025 by rpki-client