Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CBBD123BF01A10E24F3F2070E6768B9CC38C5759F9C2856E853A59CC23A0033/0/3136372e3235302e3139322e302f32322d3234203d3e20323634363534.roa
File:                     3136372e3235302e3139322e302f32322d3234203d3e20323634363534.roa (raw, json)
Hash identifier:          eF8N/rHpxOVECn96g5s7VXfMePpoJp0CEIRzwmxwEJs=
Subject key identifier:   17:C5:96:03:57:C7:41:87:C2:A6:75:33:A4:A5:22:E3:98:40:B4:87
Certificate issuer:       /CN=1FD1A388E3A16919543D3606F9D94575043AAD9D
Certificate serial:       58D7F3F4B07A2AB0CEE62E3C0B207D1DE6E3D909
Authority key identifier: 1F:D1:A3:88:E3:A1:69:19:54:3D:36:06:F9:D9:45:75:04:3A:AD:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FD1A388E3A16919543D3606F9D94575043AAD9D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CBBD123BF01A10E24F3F2070E6768B9CC38C5759F9C2856E853A59CC23A0033/0/3136372e3235302e3139322e302f32322d3234203d3e20323634363534.roa
Signing time:             Tue 04 Feb 2025 18:21:11 +0000
ROA not before:           Tue 04 Feb 2025 18:16:11 +0000
ROA not after:            Tue 03 Feb 2026 18:21:11 +0000
asID:                     264654
IP address blocks:        167.250.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8CBBD123BF01A10E24F3F2070E6768B9CC38C5759F9C2856E853A59CC23A0033/0/1FD1A388E3A16919543D3606F9D94575043AAD9D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8CBBD123BF01A10E24F3F2070E6768B9CC38C5759F9C2856E853A59CC23A0033/0/1FD1A388E3A16919543D3606F9D94575043AAD9D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FD1A388E3A16919543D3606F9D94575043AAD9D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d7:f3:f4:b0:7a:2a:b0:ce:e6:2e:3c:0b:20:7d:1d:e6:e3:d9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD1A388E3A16919543D3606F9D94575043AAD9D
        Validity
            Not Before: Feb  4 18:16:11 2025 GMT
            Not After : Feb  3 18:21:11 2026 GMT
        Subject: CN=17C5960357C74187C2A67533A4A522E39840B487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:26:87:00:53:56:cc:a5:76:36:84:1b:4a:b6:
                    39:03:d8:4c:92:9c:80:9a:1b:4e:8b:4b:24:c4:30:
                    17:b5:79:cd:4c:5f:94:30:fa:29:f7:95:e1:cd:b6:
                    b1:93:95:34:71:d1:f5:08:7a:1c:42:86:3d:1c:7f:
                    15:e1:c3:1e:8d:21:96:29:9c:e5:b6:ee:b5:75:8a:
                    3f:1f:34:bc:03:75:7f:d5:53:eb:ce:86:fd:51:32:
                    30:2d:bb:7e:16:46:8c:02:d9:32:b7:13:79:59:04:
                    07:5a:13:6e:70:36:6d:28:9e:41:26:f3:a0:1c:ca:
                    6e:bc:ea:72:00:83:16:13:af:18:09:f3:26:f8:7e:
                    75:97:99:3d:74:fd:c7:31:6c:2f:f5:83:d3:8d:6f:
                    28:21:27:cc:10:30:ad:8a:50:54:0b:72:06:d7:03:
                    70:a8:39:dd:d5:4a:72:4a:29:3f:00:14:bb:3f:0a:
                    21:36:b8:37:6d:db:96:fb:17:e2:9d:5d:ce:57:ef:
                    4b:67:17:d8:70:55:45:a4:92:7f:06:ab:e4:74:ec:
                    62:d4:b1:7a:13:5e:27:ec:62:58:f5:9e:26:6c:78:
                    4b:30:76:50:ac:36:13:e0:d2:7b:f0:c9:9d:ed:23:
                    b2:c7:48:4a:2d:bb:1d:be:3c:b1:08:4e:85:c5:af:
                    92:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C5:96:03:57:C7:41:87:C2:A6:75:33:A4:A5:22:E3:98:40:B4:87
            X509v3 Authority Key Identifier:
                keyid:1F:D1:A3:88:E3:A1:69:19:54:3D:36:06:F9:D9:45:75:04:3A:AD:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CBBD123BF01A10E24F3F2070E6768B9CC38C5759F9C2856E853A59CC23A0033/0/1FD1A388E3A16919543D3606F9D94575043AAD9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FD1A388E3A16919543D3606F9D94575043AAD9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CBBD123BF01A10E24F3F2070E6768B9CC38C5759F9C2856E853A59CC23A0033/0/3136372e3235302e3139322e302f32322d3234203d3e20323634363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:89:b2:13:a9:8f:c5:9a:42:da:8f:0f:95:4b:34:76:b2:1c:
         9b:a1:fd:48:03:9b:a6:80:a0:db:32:e5:cf:d4:36:b6:96:58:
         eb:1c:d2:7b:25:21:c7:a6:a6:6c:a6:9e:9e:e9:5f:2b:7f:af:
         99:de:bc:0e:12:16:a6:ef:2d:ea:3a:ad:d2:a2:da:74:a0:f0:
         5f:e0:8b:ea:02:5d:24:77:16:2f:da:b2:8f:90:a7:c8:22:18:
         19:13:45:f6:c0:c9:10:1a:ca:c4:55:ec:30:1f:26:8d:48:fc:
         7d:40:2e:4c:61:43:35:9d:72:ed:3d:33:30:f1:f8:87:54:9d:
         a8:a8:f2:db:bc:ae:f2:05:f6:49:1d:5a:84:d6:89:a3:ff:ce:
         0b:8f:59:8e:19:b3:d0:46:a9:e1:7c:77:80:85:05:24:8d:c2:
         39:7c:c4:60:82:5d:89:c0:86:43:95:c8:95:af:08:ab:ef:43:
         3e:0b:3a:71:67:34:5a:3c:56:09:63:d7:4d:f8:33:e2:29:c5:
         6a:10:dd:3e:bd:e1:95:d7:b8:e9:65:1f:54:de:ce:68:5f:71:
         85:50:9d:f8:4d:40:47:08:fc:14:7e:40:0e:19:5c:83:15:56:
         1d:9d:d7:b5:9d:df:0b:0e:83:b2:27:75:76:28:fa:bb:65:ff:
         a6:94:5f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:57:45 2025 by rpki-client