Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e35302e302f32342d3234203d3e20323633373637.roa
File:                     3136372e3235302e35302e302f32342d3234203d3e20323633373637.roa (raw, json)
Hash identifier:          iBHYhhVUcgutlTmjQK0eAS62J8u67EI4Vi/kVwg/MFE=
Subject key identifier:   FF:67:D0:C5:0A:7E:65:D7:7D:65:F8:45:55:F4:91:F1:95:7C:D6:3B
Certificate issuer:       /CN=866D14BD6DA5743F22A65FD4E6C0003D7610C986
Certificate serial:       14E971E80BE1C5763A6645D0D58321B37F5F5424
Authority key identifier: 86:6D:14:BD:6D:A5:74:3F:22:A6:5F:D4:E6:C0:00:3D:76:10:C9:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e35302e302f32342d3234203d3e20323633373637.roa
Signing time:             Tue 05 Mar 2024 18:14:32 +0000
ROA not before:           Tue 05 Mar 2024 18:09:32 +0000
ROA not after:            Tue 04 Mar 2025 18:14:32 +0000
asID:                     263767
IP address blocks:        167.250.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e9:71:e8:0b:e1:c5:76:3a:66:45:d0:d5:83:21:b3:7f:5f:54:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866D14BD6DA5743F22A65FD4E6C0003D7610C986
        Validity
            Not Before: Mar  5 18:09:32 2024 GMT
            Not After : Mar  4 18:14:32 2025 GMT
        Subject: CN=FF67D0C50A7E65D77D65F84555F491F1957CD63B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0e:d7:4c:76:48:f2:d4:cd:1e:e9:e8:88:d7:
                    f8:89:fb:3b:3c:0b:75:a6:62:3d:2f:41:63:ef:42:
                    50:97:e0:0a:44:eb:17:c6:09:13:91:be:87:f7:7b:
                    9d:c4:43:47:91:c4:55:ef:b3:8f:46:89:a6:9c:4f:
                    51:25:b6:b1:6e:04:ba:71:e1:1f:04:17:2f:be:81:
                    44:f0:65:d1:d3:8e:9b:a7:87:48:54:ed:81:87:31:
                    ee:29:95:2b:17:43:0e:4f:5f:91:17:e6:1d:61:b3:
                    8c:61:7c:ff:fa:71:e0:33:e9:37:83:13:bd:b4:2d:
                    9c:a5:88:f9:75:ed:56:61:47:57:5d:96:f5:36:e6:
                    ec:63:2a:22:56:c6:80:05:5a:68:77:63:80:12:93:
                    3f:a7:11:bd:81:12:d1:2c:71:b6:41:fc:a4:43:43:
                    9f:ec:60:26:a3:12:24:06:75:6c:bb:da:f1:98:44:
                    d9:02:29:27:23:c3:b8:1d:6d:46:88:1b:2e:3d:b0:
                    91:eb:ab:7c:1a:65:b8:60:87:1e:ae:52:16:15:00:
                    3d:3a:8f:1f:23:67:fb:5e:08:b0:30:2f:56:1a:9b:
                    9e:e1:97:a3:9a:7a:d6:e2:03:ea:dc:1b:4f:d1:94:
                    d3:55:69:34:31:e2:2e:3c:bc:e8:8a:bc:16:66:7d:
                    71:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:67:D0:C5:0A:7E:65:D7:7D:65:F8:45:55:F4:91:F1:95:7C:D6:3B
            X509v3 Authority Key Identifier:
                keyid:86:6D:14:BD:6D:A5:74:3F:22:A6:5F:D4:E6:C0:00:3D:76:10:C9:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e35302e302f32342d3234203d3e20323633373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:fe:a7:8a:03:ea:f3:f1:0b:65:07:5f:47:9e:ae:9f:0a:f1:
         05:98:c3:be:56:cb:be:56:a5:72:4d:e8:ad:db:15:0e:11:c5:
         b2:57:8e:74:1a:2d:f2:73:8b:ac:85:4c:45:33:08:88:bc:bf:
         55:11:15:85:17:31:ca:69:a8:ea:f0:8c:15:81:78:ac:c6:0f:
         d2:ac:b9:13:81:20:a0:29:f6:43:26:12:7c:12:7d:0f:2b:f6:
         33:e5:62:1f:d4:e1:c0:51:b0:2a:e7:52:88:88:af:51:a8:ec:
         26:aa:6b:94:df:f9:5c:78:42:04:b5:c4:55:7e:3f:6d:bc:2e:
         d1:29:a9:b6:45:15:a9:12:85:42:c3:c7:55:3f:c4:1f:eb:29:
         d2:c9:52:0d:44:6d:27:0f:1b:cb:76:65:c5:6b:b4:df:da:d6:
         45:62:54:dc:bc:1d:7b:ba:79:37:06:9e:a5:9d:6f:8f:b9:eb:
         5f:11:7a:1c:15:f5:c6:d2:43:76:2e:17:e1:86:fa:a9:1e:d5:
         18:6f:53:62:f6:83:a9:a8:e1:6a:53:70:11:b2:d8:b2:81:80:
         ce:79:ca:49:c9:49:d8:c9:93:03:73:31:ee:cb:c5:98:08:00:
         8f:35:1d:6a:e2:bc:73:0f:5c:ff:73:89:f4:14:02:dc:bb:15:
         ed:92:56:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:54 2024 by rpki-client on console-fra.rpki-client.org