Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CBBD123BF01A10E24F3F2070E6768B9CC38C5759F9C2856E853A59CC23A0033/0/3136372e3235302e3139322e302f32322d3234203d3e20323634363534.roa
File:                     3136372e3235302e3139322e302f32322d3234203d3e20323634363534.roa (raw, json)
Hash identifier:          GZXYSb8k+WY4hTYMzxbhE36M5Ufd00IpkRCBNkAeS/g=
Subject key identifier:   ED:72:21:40:B5:52:E4:02:CA:4E:AE:15:EB:BB:55:D8:0F:61:D0:14
Certificate issuer:       /CN=1FD1A388E3A16919543D3606F9D94575043AAD9D
Certificate serial:       4F70EB90ECC0FA573ED8CDC033B94F28200F37A4
Authority key identifier: 1F:D1:A3:88:E3:A1:69:19:54:3D:36:06:F9:D9:45:75:04:3A:AD:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FD1A388E3A16919543D3606F9D94575043AAD9D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CBBD123BF01A10E24F3F2070E6768B9CC38C5759F9C2856E853A59CC23A0033/0/3136372e3235302e3139322e302f32322d3234203d3e20323634363534.roa
Signing time:             Tue 05 Mar 2024 17:49:45 +0000
ROA not before:           Tue 05 Mar 2024 17:44:45 +0000
ROA not after:            Tue 04 Mar 2025 17:49:45 +0000
asID:                     264654
IP address blocks:        167.250.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8CBBD123BF01A10E24F3F2070E6768B9CC38C5759F9C2856E853A59CC23A0033/0/1FD1A388E3A16919543D3606F9D94575043AAD9D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8CBBD123BF01A10E24F3F2070E6768B9CC38C5759F9C2856E853A59CC23A0033/0/1FD1A388E3A16919543D3606F9D94575043AAD9D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FD1A388E3A16919543D3606F9D94575043AAD9D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:70:eb:90:ec:c0:fa:57:3e:d8:cd:c0:33:b9:4f:28:20:0f:37:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD1A388E3A16919543D3606F9D94575043AAD9D
        Validity
            Not Before: Mar  5 17:44:45 2024 GMT
            Not After : Mar  4 17:49:45 2025 GMT
        Subject: CN=ED722140B552E402CA4EAE15EBBB55D80F61D014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5e:3f:74:eb:8a:8e:66:6b:8e:61:8d:28:15:
                    f7:3c:85:6d:f3:ce:9c:45:0a:da:26:31:8e:99:4a:
                    e5:da:3a:9f:44:25:aa:92:bf:46:6c:f8:39:eb:87:
                    74:50:5c:c5:14:41:be:02:ae:a1:00:3e:81:cc:ee:
                    fe:a7:a5:36:6a:49:b1:fd:f0:61:45:2f:a8:fa:92:
                    95:ba:55:fb:70:e6:9f:b3:cc:a4:da:90:fb:57:f0:
                    e4:04:9d:bd:27:58:70:81:ff:3f:92:73:c4:13:bd:
                    c6:da:f3:6a:1d:2e:b8:bc:0f:11:16:e7:37:73:7e:
                    15:54:14:97:d3:7e:35:fa:10:5c:ab:9c:e6:61:3c:
                    d9:a1:95:3a:f3:e2:0d:46:3e:7e:bd:ab:0d:18:6c:
                    73:15:da:c2:23:ed:96:84:19:c7:3b:8d:e0:a4:b6:
                    79:10:c4:87:55:9d:7c:c2:94:20:24:d7:d9:52:b0:
                    39:96:dd:83:8e:37:32:8e:97:24:68:4c:50:bd:2c:
                    4b:a2:ee:af:a6:5a:05:58:37:b1:0d:82:bd:f2:29:
                    99:07:a0:d8:d1:b6:3b:a1:b5:9c:f8:89:7b:c1:e3:
                    c8:1e:0a:8f:33:ee:19:c5:7c:a1:9e:25:40:64:93:
                    17:c5:dc:b8:ef:ad:65:58:7a:04:55:83:ba:ba:79:
                    bf:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:72:21:40:B5:52:E4:02:CA:4E:AE:15:EB:BB:55:D8:0F:61:D0:14
            X509v3 Authority Key Identifier:
                keyid:1F:D1:A3:88:E3:A1:69:19:54:3D:36:06:F9:D9:45:75:04:3A:AD:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CBBD123BF01A10E24F3F2070E6768B9CC38C5759F9C2856E853A59CC23A0033/0/1FD1A388E3A16919543D3606F9D94575043AAD9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FD1A388E3A16919543D3606F9D94575043AAD9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CBBD123BF01A10E24F3F2070E6768B9CC38C5759F9C2856E853A59CC23A0033/0/3136372e3235302e3139322e302f32322d3234203d3e20323634363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:a5:c2:2e:94:b9:07:ee:81:5b:6e:06:23:a2:4d:b3:e4:be:
         27:7c:df:d2:84:dc:3a:d8:f4:f9:2e:70:d8:f6:2d:c2:8b:83:
         ce:fd:ee:44:5d:93:e7:e3:d4:5f:1d:90:7e:f4:2f:ea:61:a5:
         26:93:41:6f:11:d7:4a:75:bb:ae:bb:bb:ba:88:32:58:20:b1:
         36:43:18:a6:ef:f3:1b:2b:71:05:31:00:68:32:63:d6:10:93:
         57:5b:13:a3:55:72:66:f8:f3:18:d7:94:3e:b5:4a:58:27:8d:
         83:e8:04:a5:39:29:32:43:a7:bc:7e:45:ef:c0:9d:52:0a:8e:
         3e:fa:d3:8c:8d:b9:0e:a6:3d:ab:6b:70:73:bb:99:af:69:64:
         06:d9:ed:1e:1d:4e:e6:83:f8:92:b5:a8:71:7a:0a:d1:51:b3:
         4f:5b:6e:db:46:56:4a:43:46:d2:5a:41:c5:b1:4a:72:de:17:
         e4:d0:c0:6c:d7:d2:f0:71:4d:d5:c6:9c:81:b6:a5:42:6e:aa:
         4c:80:87:02:a8:b0:eb:40:6d:28:38:ef:b9:39:4a:62:c7:e0:
         fd:48:df:1b:bb:a8:7a:26:b6:dc:64:6d:0b:66:ce:75:83:32:
         45:b7:7d:fa:aa:29:d4:47:02:03:4f:61:33:5d:a1:a6:36:cb:
         29:2b:45:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org