Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136372e3235302e3133342e302f32342d3234203d3e20323632313931.roa
File:                     3136372e3235302e3133342e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          z7fr0rjUKiw6aljdpg4MqLMoyCwbx93qRrst5Esm4vI=
Subject key identifier:   D2:01:93:7A:9E:89:5E:94:AD:61:18:F4:15:49:97:69:DC:26:7A:71
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       4B6594F74C10DB9CA6573CC5C9C692159062A59D
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136372e3235302e3133342e302f32342d3234203d3e20323632313931.roa
Signing time:             Mon 22 Jul 2024 21:50:00 +0000
ROA not before:           Mon 22 Jul 2024 21:45:00 +0000
ROA not after:            Mon 21 Jul 2025 21:50:00 +0000
asID:                     262191
IP address blocks:        167.250.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:65:94:f7:4c:10:db:9c:a6:57:3c:c5:c9:c6:92:15:90:62:a5:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Jul 22 21:45:00 2024 GMT
            Not After : Jul 21 21:50:00 2025 GMT
        Subject: CN=D201937A9E895E94AD6118F415499769DC267A71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e3:77:cd:70:9d:48:f7:89:f4:8d:bb:9b:ca:
                    2a:4c:85:0e:32:68:d2:d1:57:c2:44:14:8b:93:4e:
                    d9:5a:1a:85:e6:8b:bc:bd:cf:0a:60:69:32:f0:ad:
                    7c:b8:10:59:36:af:89:e5:85:66:3f:69:48:dd:49:
                    d3:fc:91:8c:13:b3:22:95:33:ce:3a:e5:2a:d8:4b:
                    7d:97:97:ce:d9:7e:dc:f9:45:cc:31:ca:0d:2e:95:
                    a5:1b:e1:32:61:f5:0d:12:95:89:c8:aa:c7:27:df:
                    e4:7d:99:4c:02:84:b4:23:36:11:09:1f:36:b8:b1:
                    28:45:7a:80:b5:37:08:20:1d:fd:ef:31:82:0f:a2:
                    eb:ca:4c:7c:bd:28:60:0c:38:92:3e:6a:12:e5:88:
                    f0:fd:d1:1b:29:68:09:c1:c6:f6:57:e0:01:05:ac:
                    23:d7:7b:cf:cc:49:5a:80:ad:dd:21:5d:98:06:33:
                    68:75:ea:7c:d6:d1:ac:a8:76:0e:1e:05:54:f0:05:
                    55:cc:4a:0d:83:ed:62:b2:36:35:e1:c9:6d:76:de:
                    7f:2d:51:1a:f3:e9:f2:82:8b:74:47:aa:2a:06:e3:
                    59:20:3a:e1:e4:cc:87:18:e8:c2:fb:33:45:e2:6e:
                    81:1c:7e:94:32:d1:55:f0:e3:2f:37:b1:54:45:cf:
                    f6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:01:93:7A:9E:89:5E:94:AD:61:18:F4:15:49:97:69:DC:26:7A:71
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3136372e3235302e3133342e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:c9:30:d3:b2:8f:8f:6f:b1:d1:d3:04:ea:f5:09:ff:9d:44:
         46:58:26:5e:56:ef:12:6a:0d:cf:b6:cd:92:73:85:3d:93:ef:
         c1:26:3e:54:77:56:93:97:3e:8d:76:f6:af:53:f9:a5:19:e0:
         22:39:f4:8c:c8:dd:15:43:bb:bb:0b:ac:7e:bd:9a:e1:91:55:
         af:b3:96:ec:19:cf:dd:0e:d4:cd:d6:11:06:77:84:41:12:59:
         fa:69:a0:49:ef:97:e8:91:52:d7:50:4b:17:c8:dd:f5:86:ae:
         d7:bd:ec:04:76:55:05:41:26:2d:8f:f3:6c:5e:20:8e:00:64:
         f0:10:dd:62:22:c1:84:ab:24:6a:57:39:4e:da:2a:6f:a8:24:
         61:3f:98:67:56:bf:cf:98:7b:75:01:85:6c:cb:c1:5f:d0:28:
         85:3b:40:b7:8c:b8:69:5a:af:97:57:8e:45:4e:c1:56:8e:2b:
         8b:f4:15:aa:a8:d9:a7:d0:14:b9:b3:42:ab:d0:a7:6a:ea:b1:
         55:df:69:7e:aa:7d:f1:c4:84:b7:af:d4:38:87:5d:b4:06:2f:
         70:ce:7f:10:b7:61:ec:8f:30:00:2e:b6:5f:5c:56:51:c1:96:
         d4:59:2c:d2:22:cf:37:d6:d4:e3:a8:28:fe:cf:34:01:98:f8:
         ce:1a:f3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:01 2024 by rpki-client on console-ams.rpki-client.org