Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e35302e302f32342d3234203d3e20323633373637.roa
File:                     3136372e3235302e35302e302f32342d3234203d3e20323633373637.roa (raw, json)
Hash identifier:          7ov5/iffzXcBUW2liggTR5mTYpd2r5OJBcb8a5dZYIU=
Subject key identifier:   8C:E4:A0:8A:65:55:CE:30:B4:FE:CA:C7:E3:F3:3B:09:87:0D:20:7F
Certificate issuer:       /CN=866D14BD6DA5743F22A65FD4E6C0003D7610C986
Certificate serial:       5CAF9610D703C607F6E38E0FA24BBAA33C8DBDBB
Authority key identifier: 86:6D:14:BD:6D:A5:74:3F:22:A6:5F:D4:E6:C0:00:3D:76:10:C9:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e35302e302f32342d3234203d3e20323633373637.roa
Signing time:             Tue 04 Feb 2025 18:56:08 +0000
ROA not before:           Tue 04 Feb 2025 18:51:08 +0000
ROA not after:            Tue 03 Feb 2026 18:56:08 +0000
asID:                     263767
IP address blocks:        167.250.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 05:21:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:af:96:10:d7:03:c6:07:f6:e3:8e:0f:a2:4b:ba:a3:3c:8d:bd:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866D14BD6DA5743F22A65FD4E6C0003D7610C986
        Validity
            Not Before: Feb  4 18:51:08 2025 GMT
            Not After : Feb  3 18:56:08 2026 GMT
        Subject: CN=8CE4A08A6555CE30B4FECAC7E3F33B09870D207F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:28:b3:1d:78:1f:59:c3:79:d0:e5:1b:95:ba:
                    eb:6a:ea:77:13:ed:6b:42:45:26:ea:98:9b:0b:b8:
                    24:0e:68:67:11:bd:2d:68:b5:64:d7:14:54:8d:fb:
                    3b:4b:4f:7d:ea:fc:6c:47:e3:56:82:a0:7a:0c:8e:
                    ec:2f:13:ad:08:d7:c4:4b:9f:06:00:23:f2:70:d4:
                    98:9d:de:6b:f7:47:3c:06:65:44:89:cb:7f:e3:3e:
                    fe:69:a4:f1:d9:66:c8:27:8a:4d:03:f8:c9:18:ef:
                    5b:2a:c6:bf:e1:1b:9c:ed:8b:e3:eb:0a:07:01:38:
                    f9:e5:5e:11:03:c4:8e:b1:1c:05:3d:45:b3:94:7b:
                    55:b4:76:34:62:89:5d:90:a8:e7:97:60:0f:7f:46:
                    b3:5d:6a:08:0f:63:5b:cd:79:dd:7c:66:36:d5:dc:
                    d6:01:36:ae:4f:5d:38:f5:95:ae:c8:d9:f0:b4:d8:
                    83:f8:63:f5:93:e2:15:08:4b:e3:28:cf:90:1e:2b:
                    c8:bf:5d:06:7c:54:ad:99:2f:fb:b3:db:c1:81:59:
                    8a:9c:1c:b8:4f:2b:c4:a6:ef:1a:92:11:07:a5:83:
                    f7:6e:3c:ed:69:35:81:60:09:28:f9:d2:4e:cf:82:
                    ec:1f:0b:19:66:60:02:28:c5:c8:2a:d9:c3:ad:27:
                    fe:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E4:A0:8A:65:55:CE:30:B4:FE:CA:C7:E3:F3:3B:09:87:0D:20:7F
            X509v3 Authority Key Identifier:
                keyid:86:6D:14:BD:6D:A5:74:3F:22:A6:5F:D4:E6:C0:00:3D:76:10:C9:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e35302e302f32342d3234203d3e20323633373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:06:f6:52:ff:6e:d1:1b:85:5b:83:93:3e:cc:40:8e:f4:57:
         58:b6:74:48:43:5e:a5:3d:44:b9:f8:f8:dc:3b:7c:2e:cb:ea:
         6c:66:89:e1:0a:32:f6:84:e9:6a:8d:72:9f:7c:e9:b2:05:1f:
         84:cb:99:eb:06:f0:3d:8a:c6:4b:88:ad:e3:a8:7d:fe:f2:3b:
         33:55:09:ae:d3:4f:e0:34:7a:90:25:1b:78:89:b4:be:ea:d3:
         3f:5e:88:36:d2:01:cb:ec:df:3e:ae:1b:e3:81:a3:4d:58:c0:
         36:fe:0a:13:b6:e2:05:6f:b2:9b:c2:33:89:b8:52:bf:d1:63:
         9d:01:90:88:1e:c7:d4:50:4d:ab:89:6f:a9:3d:19:eb:5a:1b:
         ac:23:2f:90:70:cb:fd:db:c4:42:76:66:b4:ee:83:a1:a7:44:
         28:bb:48:46:3b:65:33:b0:93:8e:3d:7c:b5:54:e2:73:2f:94:
         e9:a0:3c:f4:27:20:cb:99:a0:e8:cb:86:78:ba:3b:e7:f2:78:
         dc:97:2a:b2:cf:02:29:4e:0d:51:30:7d:03:28:54:c5:69:4c:
         fc:b1:31:0f:cb:a8:de:80:0a:fd:90:bb:65:9e:00:42:d4:eb:
         22:cd:f8:a5:b7:6b:d7:08:84:99:48:05:3a:3f:ad:3e:d3:89:
         e8:be:a6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:10 2025 by rpki-client