Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3136372e3235302e35322e302f32322d3234203d3e203237393031.roa
File:                     3136372e3235302e35322e302f32322d3234203d3e203237393031.roa (raw, json)
Hash identifier:          LT2uvHTsFjD/yB84xJ/lYjsHTBdHtXzZcPnRu+GVEow=
Subject key identifier:   85:02:04:AE:9B:FE:CD:12:AC:2F:79:38:4C:27:EB:FF:44:6C:DF:7D
Certificate issuer:       /CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
Certificate serial:       1B86B2139EBF3FEBC79757DAA3A82C2655DDFE57
Authority key identifier: 19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3136372e3235302e35322e302f32322d3234203d3e203237393031.roa
Signing time:             Tue 04 Feb 2025 18:54:14 +0000
ROA not before:           Tue 04 Feb 2025 18:49:14 +0000
ROA not after:            Tue 03 Feb 2026 18:54:14 +0000
asID:                     27901
IP address blocks:        167.250.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 09:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:86:b2:13:9e:bf:3f:eb:c7:97:57:da:a3:a8:2c:26:55:dd:fe:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
        Validity
            Not Before: Feb  4 18:49:14 2025 GMT
            Not After : Feb  3 18:54:14 2026 GMT
        Subject: CN=850204AE9BFECD12AC2F79384C27EBFF446CDF7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ef:12:1e:11:9f:e5:79:90:08:6a:37:82:8a:
                    bd:37:11:94:37:13:50:ff:a5:f4:06:a3:de:c8:ed:
                    d5:9f:8c:71:54:05:8f:0c:c1:7f:ff:22:f6:f5:d7:
                    bf:c4:de:eb:72:8f:7b:a7:f2:42:f5:ad:ff:04:67:
                    57:78:f5:6c:66:bf:df:93:24:80:59:39:80:b4:66:
                    7b:f0:fc:44:ca:bf:28:c3:da:02:3f:31:0d:7b:55:
                    04:8a:a1:3e:2a:63:45:52:ff:21:83:5a:e1:30:a5:
                    03:2c:54:f6:65:db:79:ed:16:9f:a9:f0:e8:4d:36:
                    8e:37:1c:3f:a0:21:a3:aa:79:f3:67:77:7d:a8:d0:
                    d7:10:56:47:fc:da:fb:43:70:81:50:f5:73:2f:46:
                    63:61:b7:31:c4:f7:6c:52:80:b0:61:9e:b4:be:27:
                    f2:06:cf:c9:a2:49:68:ad:82:48:11:0a:db:37:eb:
                    38:16:8f:47:61:3a:5e:e7:6b:5b:4f:cf:44:af:b7:
                    6b:25:be:b0:a6:91:f0:c5:64:25:fc:43:0d:94:48:
                    49:25:a1:f3:42:ab:21:69:21:a9:06:6b:60:04:a1:
                    56:2d:f6:0d:ad:30:a2:98:3e:14:a9:94:53:ae:9b:
                    fe:96:ca:03:79:bc:5c:0d:92:61:94:0c:7a:f5:7c:
                    6a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:02:04:AE:9B:FE:CD:12:AC:2F:79:38:4C:27:EB:FF:44:6C:DF:7D
            X509v3 Authority Key Identifier:
                keyid:19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3136372e3235302e35322e302f32322d3234203d3e203237393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:01:a6:a3:ea:a7:2c:e2:55:3b:6a:95:f0:d5:df:27:c5:75:
         90:44:44:73:66:88:77:ac:ae:ec:7b:96:72:18:1d:f4:40:f1:
         05:76:26:75:80:ea:5e:4b:d6:bb:2d:38:c9:6f:69:a8:6b:bb:
         6d:1b:b4:98:cf:1b:4e:18:f9:18:7e:8d:d3:17:8f:73:14:49:
         af:ac:93:f0:14:8e:51:c0:24:4a:03:1f:63:3b:8d:c7:8f:b6:
         f7:f7:3f:4d:c1:d5:a6:38:15:40:69:76:99:f3:95:9d:6b:8e:
         21:ff:c2:e4:3c:b5:e8:53:da:83:89:19:b8:6d:19:c9:22:4e:
         b7:c0:29:fd:32:25:a1:c0:5b:50:ff:1a:f6:4b:27:30:e5:6b:
         d1:36:a8:85:0e:b5:76:58:f8:85:42:e0:d8:fd:56:93:5d:66:
         45:a1:8c:eb:8e:95:be:7b:6e:63:e5:ec:70:0b:f5:d7:fd:8e:
         2b:a6:e7:04:2d:9e:ef:07:77:fe:88:23:ef:16:52:43:bf:64:
         c5:1c:31:ac:e0:3a:f4:36:81:a6:39:ba:f4:8f:66:79:f5:4b:
         e4:fd:20:02:42:1d:7c:3e:84:35:59:b7:78:1b:d4:6e:a9:35:
         f0:75:ab:bb:87:74:dd:d8:d4:3a:11:e0:91:c3:5f:a1:93:5c:
         d5:3f:f4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:52:59 2025 by rpki-client