Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58E52295197E00BF52A7362163D284C8F5F4108C0D2CA4F83A98B6C76872A4B8/0/3136372e3234392e3231362e302f32322d3234203d3e20323633373634.roa
File:                     3136372e3234392e3231362e302f32322d3234203d3e20323633373634.roa (raw, json)
Hash identifier:          /srpGwJ0K6SxHdBK/aRZmvZDkGYw80ab1jJDtkyUEIU=
Subject key identifier:   1C:1F:3C:3A:69:C3:71:1F:D2:25:D6:2B:50:1D:E0:B2:38:23:15:F4
Certificate issuer:       /CN=9A074897DF26261B55AA7647F456CB204D8528E1
Certificate serial:       3D350B0AB83F22E4ED8AE55CDCD93D774CC5E5BE
Authority key identifier: 9A:07:48:97:DF:26:26:1B:55:AA:76:47:F4:56:CB:20:4D:85:28:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A074897DF26261B55AA7647F456CB204D8528E1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58E52295197E00BF52A7362163D284C8F5F4108C0D2CA4F83A98B6C76872A4B8/0/3136372e3234392e3231362e302f32322d3234203d3e20323633373634.roa
Signing time:             Tue 04 Feb 2025 18:37:04 +0000
ROA not before:           Tue 04 Feb 2025 18:32:04 +0000
ROA not after:            Tue 03 Feb 2026 18:37:04 +0000
asID:                     263764
IP address blocks:        167.249.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58E52295197E00BF52A7362163D284C8F5F4108C0D2CA4F83A98B6C76872A4B8/0/9A074897DF26261B55AA7647F456CB204D8528E1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58E52295197E00BF52A7362163D284C8F5F4108C0D2CA4F83A98B6C76872A4B8/0/9A074897DF26261B55AA7647F456CB204D8528E1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A074897DF26261B55AA7647F456CB204D8528E1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:35:0b:0a:b8:3f:22:e4:ed:8a:e5:5c:dc:d9:3d:77:4c:c5:e5:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A074897DF26261B55AA7647F456CB204D8528E1
        Validity
            Not Before: Feb  4 18:32:04 2025 GMT
            Not After : Feb  3 18:37:04 2026 GMT
        Subject: CN=1C1F3C3A69C3711FD225D62B501DE0B2382315F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:12:65:5a:cd:2b:64:c2:df:1c:21:30:83:06:
                    59:24:3b:2f:ba:72:7a:6e:5f:6e:37:34:ed:be:a7:
                    e4:1c:a1:01:6f:84:1f:af:94:d9:bd:1d:b1:f2:e3:
                    8b:ed:80:13:67:f2:3d:22:61:b3:7d:59:de:c6:95:
                    4a:f0:53:1f:34:2c:fa:f0:a2:c1:62:3a:04:9e:01:
                    3d:c7:79:5d:78:44:0b:c5:f4:ee:e8:8f:9c:4f:13:
                    99:19:e2:be:f8:69:f3:5a:32:1f:8d:81:9d:c7:5a:
                    f2:0e:7a:a1:1c:7f:97:16:64:7f:94:37:96:e6:59:
                    2b:10:cb:c9:df:9f:74:53:ea:55:1d:80:14:09:52:
                    e8:c0:17:0e:9f:06:5a:47:a5:45:21:cd:5d:1d:45:
                    4f:70:96:c8:5c:56:d3:4c:c7:be:7d:54:22:c1:b4:
                    5f:75:86:79:d2:a8:85:ce:6e:bb:7e:3f:d8:9e:7c:
                    d6:57:75:7f:6c:b2:e0:fa:e7:60:ca:c6:c2:9b:1b:
                    f4:2c:df:e7:9c:eb:2b:77:10:31:d6:f3:d4:ba:0b:
                    44:40:2b:26:f5:49:22:77:cb:1d:0a:eb:c2:d0:50:
                    9b:48:32:18:b4:02:b1:d7:d2:11:0a:05:ba:b5:ff:
                    0d:4a:4a:3c:a8:67:c4:29:3d:49:da:20:94:8b:97:
                    9f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1F:3C:3A:69:C3:71:1F:D2:25:D6:2B:50:1D:E0:B2:38:23:15:F4
            X509v3 Authority Key Identifier:
                keyid:9A:07:48:97:DF:26:26:1B:55:AA:76:47:F4:56:CB:20:4D:85:28:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58E52295197E00BF52A7362163D284C8F5F4108C0D2CA4F83A98B6C76872A4B8/0/9A074897DF26261B55AA7647F456CB204D8528E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A074897DF26261B55AA7647F456CB204D8528E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58E52295197E00BF52A7362163D284C8F5F4108C0D2CA4F83A98B6C76872A4B8/0/3136372e3234392e3231362e302f32322d3234203d3e20323633373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:d7:73:e6:c4:f4:d9:3e:6f:c0:68:d0:36:b1:77:27:ab:4c:
         fb:cb:02:91:76:eb:a3:f9:39:32:93:69:4f:ba:d0:5e:00:37:
         50:2f:27:de:98:29:3c:6b:cd:85:ab:25:56:e3:c2:4e:ab:af:
         9b:85:01:9b:3c:b1:2d:9a:73:8b:a6:f9:19:4a:78:59:04:72:
         8a:9e:1a:4f:e5:fd:3c:7b:81:d2:6a:bb:4e:13:2a:d4:3f:ae:
         6e:26:1b:f0:e1:3e:e3:c7:0e:09:81:e9:97:1f:4c:7e:47:f5:
         64:8c:6a:75:24:75:66:d1:91:d4:c8:35:0f:f0:0b:cd:d4:c2:
         2d:5a:ca:e1:49:58:be:0f:5b:9e:77:96:11:d8:cf:a3:b2:30:
         41:0b:b1:ef:8d:09:9b:32:43:d7:5e:4c:3a:1a:75:cc:12:44:
         e0:14:a9:2f:e3:0c:8e:c2:11:50:40:2d:75:20:ab:89:99:2e:
         78:ef:b6:06:ed:5d:f3:6e:0b:c2:b0:f8:3b:13:d0:fc:53:ed:
         88:63:2e:16:6e:40:78:b8:cc:1e:a4:bc:1d:33:66:5b:6c:20:
         bb:67:8c:d0:15:78:84:7f:55:8d:95:29:f5:93:a5:fa:7c:d0:
         81:7a:18:f8:a3:bb:df:26:e5:21:fb:79:1d:c9:ff:7e:26:77:
         61:2b:1b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:58:39 2025 by rpki-client