Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3235302e302f32342d3234203d3e203138373334.roa
File:                     3138392e3230342e3235302e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier:          CHy8gzDJ0Rn8eR2hr6Uc6Zo9k7+2eqtR/41yYi9yj+Y=
Subject key identifier:   A0:EF:1F:87:3A:A7:3A:FB:30:0A:B7:B6:B4:49:4C:E1:5B:55:5E:0C
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       263639B1077ADBCFA7EB4EA4BF95D9D40EA6389C
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3235302e302f32342d3234203d3e203138373334.roa
Signing time:             Tue 05 Mar 2024 17:50:39 +0000
ROA not before:           Tue 05 Mar 2024 17:45:39 +0000
ROA not after:            Tue 04 Mar 2025 17:50:39 +0000
asID:                     18734
IP address blocks:        189.204.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:36:39:b1:07:7a:db:cf:a7:eb:4e:a4:bf:95:d9:d4:0e:a6:38:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Mar  5 17:45:39 2024 GMT
            Not After : Mar  4 17:50:39 2025 GMT
        Subject: CN=A0EF1F873AA73AFB300AB7B6B4494CE15B555E0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:37:e8:ae:f2:e1:c3:0c:35:e6:f7:08:6a:e4:
                    71:9f:50:78:7d:be:29:5e:87:3b:6e:2a:78:0e:d7:
                    45:e1:9e:c4:10:e2:fc:62:21:88:98:04:e3:e8:13:
                    26:43:18:eb:f7:f7:63:3a:0b:9d:e4:48:d0:cc:63:
                    fa:88:2a:c7:51:7f:02:a3:ca:fa:40:77:2e:37:b9:
                    2c:76:00:db:6d:44:7b:07:72:ed:7b:4c:71:c3:03:
                    ef:b0:6a:77:ef:fe:27:7f:6c:ff:9a:60:20:ac:d9:
                    ae:ed:2b:1f:b4:35:d1:7b:75:e0:41:8b:b1:3d:da:
                    ef:79:be:7f:5e:2d:a2:68:5c:ac:43:a6:13:eb:6d:
                    bc:c2:5f:05:75:aa:bf:30:3d:db:1c:93:bc:e4:98:
                    00:b0:dc:76:db:bc:50:25:b5:27:1b:af:ef:b1:1d:
                    f7:56:a9:be:59:20:26:f3:7f:a4:33:90:58:f7:1f:
                    36:e1:38:45:2d:78:e8:12:40:b3:0b:3b:ec:1c:a6:
                    5c:6d:6b:1f:d1:55:33:c6:f0:3e:4d:cc:1e:0c:b5:
                    c5:0e:cf:49:79:5f:f9:dd:2d:95:54:7d:d6:b7:ed:
                    4c:b0:ca:4b:4d:6c:07:d7:50:d8:14:a9:14:e5:bc:
                    a2:82:eb:e5:97:8d:d9:ad:ec:d0:04:3d:31:4f:29:
                    3d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EF:1F:87:3A:A7:3A:FB:30:0A:B7:B6:B4:49:4C:E1:5B:55:5E:0C
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3235302e302f32342d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.204.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:52:bc:a2:c9:89:0b:94:a2:28:23:28:f4:c7:e1:be:14:fd:
         3f:07:d9:8b:ed:36:a1:b2:23:0e:b4:32:fa:ad:1b:3a:6b:c6:
         ac:95:a5:43:36:4f:0c:fc:01:8b:0e:c4:2b:89:6a:4e:be:1c:
         27:52:1c:f4:c3:55:c5:69:93:37:26:d2:93:a6:73:93:bf:6c:
         1b:1b:5c:d6:ee:51:eb:39:8f:5a:16:3c:b5:a4:bd:49:39:89:
         04:b8:6f:9b:91:12:94:a8:2e:64:76:0d:1b:de:cf:ba:1d:18:
         b1:ea:36:01:1d:d3:bd:b4:3d:3d:8c:68:66:76:ba:dd:dc:cb:
         23:42:d0:ef:49:29:bb:e5:43:d0:0c:56:fc:1a:96:c5:d8:6f:
         19:64:83:d6:8d:2b:2c:bb:f8:a0:e1:dc:bb:a3:6e:59:2c:dd:
         78:74:2c:88:fc:dd:04:28:7f:06:e4:32:d4:bc:2a:e8:44:3d:
         6a:e4:0c:09:46:83:5d:e4:06:70:89:09:9c:fc:5a:b2:0a:32:
         57:8e:8e:c3:3f:ef:a5:00:13:96:60:96:a9:71:16:ab:2e:ce:
         78:3e:20:6a:45:10:44:60:a4:8c:cb:40:63:7c:47:93:5b:bc:
         2f:6b:e2:4b:30:de:e6:9b:7d:9c:41:4a:36:af:49:8b:d9:91:
         65:ca:dd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 14:07:16 2024 by rpki-client on console-ams.rpki-client.org