Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e35312e302f32342d3234203d3e20323633373637.roa
File:                     3136372e3235302e35312e302f32342d3234203d3e20323633373637.roa (raw, json)
Hash identifier:          ajSDqKEc08kQec/6HV+h0tHvcoB2QP6MDfQGNh7kCoo=
Subject key identifier:   95:24:EE:C0:D8:99:FC:75:C1:E3:9D:D3:40:71:DA:71:67:CD:8B:45
Certificate issuer:       /CN=866D14BD6DA5743F22A65FD4E6C0003D7610C986
Certificate serial:       2271F7BC77B10ADF5F1C73A00E24012E61E382D6
Authority key identifier: 86:6D:14:BD:6D:A5:74:3F:22:A6:5F:D4:E6:C0:00:3D:76:10:C9:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e35312e302f32342d3234203d3e20323633373637.roa
Signing time:             Tue 05 Mar 2024 18:14:33 +0000
ROA not before:           Tue 05 Mar 2024 18:09:33 +0000
ROA not after:            Tue 04 Mar 2025 18:14:33 +0000
asID:                     263767
IP address blocks:        167.250.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:71:f7:bc:77:b1:0a:df:5f:1c:73:a0:0e:24:01:2e:61:e3:82:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866D14BD6DA5743F22A65FD4E6C0003D7610C986
        Validity
            Not Before: Mar  5 18:09:33 2024 GMT
            Not After : Mar  4 18:14:33 2025 GMT
        Subject: CN=9524EEC0D899FC75C1E39DD34071DA7167CD8B45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2e:6c:0f:80:87:e7:d8:0d:7f:bc:b2:e3:cd:
                    36:27:02:28:8f:76:57:05:b3:8d:8f:7e:47:d7:75:
                    a4:b1:30:50:2e:68:3f:02:73:b1:b5:8d:a8:b8:30:
                    ce:0a:d4:df:87:ee:35:5d:0b:c0:25:f7:58:02:8c:
                    e8:de:73:1d:20:24:2d:78:41:90:26:93:7f:31:a5:
                    12:76:97:01:08:99:95:b7:98:d1:d1:e3:26:28:3e:
                    9d:03:f1:f7:3e:09:7d:89:24:1b:79:b6:c2:05:aa:
                    72:62:df:db:8c:04:40:f1:8f:b8:fd:fc:82:58:91:
                    2c:82:61:c2:b3:59:2b:e6:72:69:50:8f:ac:98:7f:
                    6f:9b:72:17:4a:03:2d:e9:6e:25:40:c7:99:c1:82:
                    e4:98:3f:ff:60:fd:ad:fe:2e:fa:0f:72:03:14:61:
                    4f:f2:d8:46:61:32:b5:d5:1f:05:db:33:b1:b3:6a:
                    39:7d:17:3e:a2:e1:76:ca:a2:44:fe:36:38:0e:ee:
                    d0:a9:60:b0:b4:6d:24:ef:4e:b6:4b:85:0e:e8:fd:
                    15:2d:e1:72:6f:6e:da:1c:1e:73:24:e1:1b:21:04:
                    96:b5:f2:0b:dd:53:c8:44:6f:ae:e4:aa:d6:63:84:
                    fa:a0:85:49:30:5a:f5:3e:33:0c:fe:88:a7:34:13:
                    09:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:24:EE:C0:D8:99:FC:75:C1:E3:9D:D3:40:71:DA:71:67:CD:8B:45
            X509v3 Authority Key Identifier:
                keyid:86:6D:14:BD:6D:A5:74:3F:22:A6:5F:D4:E6:C0:00:3D:76:10:C9:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866D14BD6DA5743F22A65FD4E6C0003D7610C986.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E365927978791AB82E4FFF201D20EC7771D89AA0F0834DAE16EDC4110921C6D/0/3136372e3235302e35312e302f32342d3234203d3e20323633373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:6a:5b:2f:e7:c8:f5:0e:64:b8:67:49:81:ea:d7:fe:51:a8:
         e7:a5:22:3c:38:61:85:16:ec:f5:d7:d5:bc:2b:d8:2f:4a:3c:
         c0:d4:f6:1c:21:9e:a8:c7:83:b2:06:ba:4e:73:78:32:dd:05:
         40:70:d4:65:54:e0:89:4e:3b:09:79:27:64:4e:05:02:d4:ec:
         59:59:7d:69:76:6b:c4:52:e2:4a:21:28:b7:5a:42:20:6e:c0:
         10:13:be:b8:18:8b:84:53:4a:1e:a0:e7:d3:fa:a7:3e:10:8c:
         59:08:43:a4:6c:23:dc:58:0e:ae:69:ef:f4:fb:f6:82:6b:e3:
         a8:34:37:b3:8d:b9:5a:4c:ad:b7:06:f1:6c:9c:15:d3:da:47:
         84:11:18:45:73:0f:8c:6b:f1:75:fb:5c:66:42:43:b0:06:7a:
         cd:90:cb:83:df:48:8d:2f:43:5d:e7:8c:04:7c:f0:e3:88:f6:
         3a:dc:28:81:df:54:b7:f7:2a:49:a6:a4:12:51:99:a9:08:73:
         11:77:ed:f5:43:99:7b:29:2f:2b:82:fe:aa:c4:04:d2:97:84:
         60:a8:06:30:1e:ae:ea:63:af:62:ac:c7:77:8f:09:85:44:5d:
         d4:d7:f1:f0:66:b6:d4:01:b3:96:f2:c8:bf:ef:1e:b6:75:6b:
         12:be:5a:f2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUInH3vHexCt9fHHOgDiQBLmHjgtYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODY2RDE0QkQ2REE1NzQzRjIyQTY1RkQ0RTZDMDAwM0Q3
NjEwQzk4NjAeFw0yNDAzMDUxODA5MzNaFw0yNTAzMDQxODE0MzNaMDMxMTAvBgNV
BAMTKDk1MjRFRUMwRDg5OUZDNzVDMUUzOUREMzQwNzFEQTcxNjdDRDhCNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClLmwPgIfn2A1/vLLjzTYnAiiP
dlcFs42PfkfXdaSxMFAuaD8Cc7G1jai4MM4K1N+H7jVdC8Al91gCjOjecx0gJC14
QZAmk38xpRJ2lwEImZW3mNHR4yYoPp0D8fc+CX2JJBt5tsIFqnJi39uMBEDxj7j9
/IJYkSyCYcKzWSvmcmlQj6yYf2+bchdKAy3pbiVAx5nBguSYP/9g/a3+LvoPcgMU
YU/y2EZhMrXVHwXbM7Gzajl9Fz6i4XbKokT+NjgO7tCpYLC0bSTvTrZLhQ7o/RUt
4XJvbtocHnMk4RshBJa18gvdU8hEb67kqtZjhPqghUkwWvU+Mwz+iKc0Ewn9AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUlSTuwNiZ/HXB453TQHHacWfNi0UwHwYDVR0j
BBgwFoAUhm0UvW2ldD8ipl/U5sAAPXYQyYYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RTM2NTkyNzk3ODc5MUFCODJFNEZGRjIwMUQyMEVDNzc3
MUQ4OUFBMEYwODM0REFFMTZFREM0MTEwOTIxQzZELzAvODY2RDE0QkQ2REE1NzQz
RjIyQTY1RkQ0RTZDMDAwM0Q3NjEwQzk4Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NjZEMTRCRDZEQTU3NDNGMjJB
NjVGRDRFNkMwMDAzRDc2MTBDOTg2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEUzNjU5Mjc5Nzg3OTFBQjgyRTRGRkYyMDFEMjBFQzc3NzFEODlBQTBG
MDgzNERBRTE2RURDNDExMDkyMUM2RC8wLzMxMzYzNzJlMzIzNTMwMmUzNTMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMzMzczNjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/oz
MA0GCSqGSIb3DQEBCwUAA4IBAQAZalsv58j1DmS4Z0mB6tf+UajnpSI8OGGFFuz1
19W8K9gvSjzA1PYcIZ6ox4OyBrpOc3gy3QVAcNRlVOCJTjsJeSdkTgUC1OxZWX1p
dmvEUuJKISi3WkIgbsAQE764GIuEU0oeoOfT+qc+EIxZCEOkbCPcWA6uae/0+/aC
a+OoNDezjblaTK23BvFsnBXT2keEERhFcw+Ma/F1+1xmQkOwBnrNkMuD30iNL0Nd
54wEfPDjiPY63CiB31S39ypJpqQSUZmpCHMRd+31Q5l7KS8rgv6qxATSl4RgqAYw
Hq7qY69irMd3jwmFRF3U1/HwZrbUAbOW8si/7x62dWsSvlry
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org