Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e34392e302f32342d3234203d3e20323633373637.roa
File:                     3136372e3235302e34392e302f32342d3234203d3e20323633373637.roa (raw, json)
Hash identifier:          AbLrHasZK6/jJ9Qy3rzrpfY1XgR1M80nR3RpqNRX8QU=
Subject key identifier:   42:43:5F:78:A3:DA:87:BA:E3:6D:3E:A1:7C:68:04:C2:19:EA:19:A1
Certificate issuer:       /CN=866D14BD6DA5743F22A65FD4E6C0003D7610C986
Certificate serial:       3FFB353F6D4F7F251CDDE70908617AC82C84599C
Authority key identifier: 86:6D:14:BD:6D:A5:74:3F:22:A6:5F:D4:E6:C0:00:3D:76:10:C9:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e34392e302f32342d3234203d3e20323633373637.roa
Signing time:             Tue 05 Mar 2024 18:14:33 +0000
ROA not before:           Tue 05 Mar 2024 18:09:33 +0000
ROA not after:            Tue 04 Mar 2025 18:14:33 +0000
asID:                     263767
IP address blocks:        167.250.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:fb:35:3f:6d:4f:7f:25:1c:dd:e7:09:08:61:7a:c8:2c:84:59:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866D14BD6DA5743F22A65FD4E6C0003D7610C986
        Validity
            Not Before: Mar  5 18:09:33 2024 GMT
            Not After : Mar  4 18:14:33 2025 GMT
        Subject: CN=42435F78A3DA87BAE36D3EA17C6804C219EA19A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ef:96:7a:89:21:b9:9a:01:27:e3:da:d6:a2:
                    d6:2b:b5:ef:2e:39:49:de:9b:14:ef:ef:17:c2:38:
                    f6:7c:f9:7c:6b:86:3c:39:c4:91:17:a2:dd:6d:d5:
                    b5:ed:d9:8d:3f:a0:b2:b8:92:b3:e6:42:99:7f:9c:
                    e9:59:d8:62:ae:cf:6d:66:a2:cf:aa:ce:0e:a0:e9:
                    0e:e0:5f:62:60:27:f5:67:b6:10:3a:4d:18:46:4c:
                    c2:ad:eb:50:ac:04:a1:ee:e3:bb:88:b7:55:ba:df:
                    f1:f7:97:98:42:de:4b:55:67:06:55:60:54:10:8a:
                    c2:2a:da:17:46:a0:03:17:6c:ac:81:5e:83:1b:b8:
                    42:4c:6b:28:f0:29:43:f2:7d:72:4e:bf:b8:b8:7e:
                    57:6e:14:be:72:12:9a:c2:3e:74:98:73:19:e6:eb:
                    b4:03:5a:60:1f:05:bc:ff:7a:12:65:2e:e0:40:88:
                    ce:51:9e:36:d2:53:7e:ce:d2:ef:4e:36:9f:ad:28:
                    65:26:42:0b:d3:71:24:22:9d:4b:74:ec:88:c7:f0:
                    2f:5d:bd:6a:38:d0:a7:ba:52:0e:85:27:9d:90:f0:
                    92:98:5f:12:ec:ba:92:5c:3d:b0:af:6d:b0:cb:c2:
                    e2:b1:56:2a:3d:96:ae:a1:c8:64:0f:29:9f:0b:b6:
                    33:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:43:5F:78:A3:DA:87:BA:E3:6D:3E:A1:7C:68:04:C2:19:EA:19:A1
            X509v3 Authority Key Identifier:
                keyid:86:6D:14:BD:6D:A5:74:3F:22:A6:5F:D4:E6:C0:00:3D:76:10:C9:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e34392e302f32342d3234203d3e20323633373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:5a:97:71:50:01:14:64:a7:3a:30:db:6a:15:bd:43:a3:3b:
         d4:ae:08:5a:85:13:09:4a:42:35:43:da:6e:af:ad:51:12:3c:
         dc:34:60:f9:d7:1b:f8:40:8d:6e:f2:32:ab:69:4c:4a:ed:56:
         cc:11:b2:fe:d1:7f:da:fc:de:19:a5:e6:14:48:cb:77:92:ac:
         0b:29:09:2a:77:6d:3e:0f:67:b5:0f:3b:5a:49:24:13:32:ac:
         e6:91:6a:da:fc:8a:72:98:a3:ba:8b:57:38:a7:e9:ad:ec:f3:
         ed:a9:fa:1c:e8:77:e3:bd:4b:96:d2:64:fc:7f:ad:78:d2:a0:
         6d:1a:dd:8a:a6:0d:e0:d3:b8:29:4b:71:a4:15:e7:9d:31:6b:
         48:2a:e6:14:77:6d:f6:48:c4:31:e7:6e:b3:9b:7e:c2:96:b4:
         57:ce:20:46:79:61:8c:cf:41:24:5c:9c:4d:ec:ed:57:31:b6:
         f5:19:fa:58:d1:5d:56:48:cd:61:18:46:a7:97:d3:f0:23:76:
         a0:04:8a:a0:b8:fb:bb:70:4c:c0:2a:ef:13:16:64:2b:ae:53:
         80:f8:62:61:bc:15:77:b2:fb:d3:98:a1:af:fe:2e:8e:06:18:
         68:3d:09:83:55:5b:06:84:a2:61:76:3c:06:2e:15:30:44:ea:
         db:6d:f2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 21:32:43 2024 by rpki-client on console-ams.rpki-client.org