Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3136372e3235302e3138302e302f32332d3233203d3e20323634363638.roa
File:                     3136372e3235302e3138302e302f32332d3233203d3e20323634363638.roa (raw, json)
Hash identifier:          KsAB6ZHriGj+S2Sd3mIdjjJcKPIZBBXu4HRcBxLHeX4=
Subject key identifier:   4C:7A:9C:EE:72:28:39:10:4C:24:4C:2F:93:3F:50:0F:68:1B:6E:8F
Certificate issuer:       /CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
Certificate serial:       7DEC0112B4360A22682DBCBC75221693E9A74AD0
Authority key identifier: C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3136372e3235302e3138302e302f32332d3233203d3e20323634363638.roa
Signing time:             Tue 04 Feb 2025 18:54:37 +0000
ROA not before:           Tue 04 Feb 2025 18:49:37 +0000
ROA not after:            Tue 03 Feb 2026 18:54:37 +0000
asID:                     264668
IP address blocks:        167.250.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:40:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ec:01:12:b4:36:0a:22:68:2d:bc:bc:75:22:16:93:e9:a7:4a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
        Validity
            Not Before: Feb  4 18:49:37 2025 GMT
            Not After : Feb  3 18:54:37 2026 GMT
        Subject: CN=4C7A9CEE722839104C244C2F933F500F681B6E8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bf:0e:f9:84:99:45:35:99:8e:8a:19:97:2d:
                    0a:28:19:cc:9f:35:af:03:c9:6c:69:b0:51:88:95:
                    93:d5:a4:f8:21:e4:95:16:4b:1c:0b:c8:6b:63:9f:
                    aa:70:f6:6b:bc:d6:25:cc:60:64:cb:49:24:d7:d7:
                    92:56:8a:95:97:75:08:1d:23:aa:54:b5:15:7b:b1:
                    9c:3f:27:6e:d1:a0:85:6a:2c:42:e9:e3:b4:f1:11:
                    30:ea:b6:dd:f4:fd:5e:41:18:0c:28:d1:db:9d:f7:
                    9d:8c:15:e2:f0:a8:88:78:a1:95:49:28:64:f8:0f:
                    24:b7:3e:cd:83:88:7b:35:45:af:13:6b:59:9f:1f:
                    04:5a:65:39:ab:34:22:f3:25:86:d3:ae:10:75:10:
                    9c:ef:17:af:be:61:55:99:d7:b0:01:03:3e:ac:ea:
                    7d:f2:e6:ac:74:1c:db:19:05:2a:67:40:e8:29:7c:
                    d7:5d:ae:61:c6:41:f1:a2:b4:5f:1b:70:9b:66:6e:
                    9e:ad:12:04:0e:34:6d:7a:45:9c:ad:e1:91:f0:9f:
                    a0:bd:a0:f2:e9:5b:21:50:0b:aa:b8:ee:cd:d8:d3:
                    0e:cd:d1:96:22:b0:91:33:c7:e3:5e:8a:84:6f:1e:
                    12:89:a0:7b:b3:7a:2f:da:19:56:95:50:cc:43:b1:
                    ac:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7A:9C:EE:72:28:39:10:4C:24:4C:2F:93:3F:50:0F:68:1B:6E:8F
            X509v3 Authority Key Identifier:
                keyid:C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3136372e3235302e3138302e302f32332d3233203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:eb:2c:ad:fb:7f:14:87:9a:f8:06:a5:b6:0c:30:79:c5:be:
         7d:5d:b1:0a:44:65:75:26:a7:fc:7d:59:09:2d:b5:85:a8:d2:
         9e:33:e1:72:0a:15:bd:30:d9:cf:f2:bd:26:dc:04:c9:60:98:
         55:20:6e:f7:f5:08:c1:05:7e:6c:cf:97:c4:9f:3e:0a:69:39:
         26:85:5b:ce:d2:75:c6:3a:12:52:c6:ed:fa:8d:e2:68:fb:4f:
         a5:a2:93:e5:78:aa:26:b2:1e:e1:30:75:73:30:4a:c5:6f:7a:
         ec:75:da:c4:0c:ad:d7:6d:a6:a7:aa:82:b0:75:12:39:9e:fb:
         4f:42:03:46:d8:64:92:bc:19:65:da:e6:4c:60:9e:96:45:8a:
         cb:b3:65:cd:6e:a7:ce:29:7d:65:9d:19:1f:2a:9e:26:69:6b:
         10:67:66:23:05:55:20:9c:75:f1:13:2b:60:31:97:60:3b:18:
         75:4b:69:81:6d:f3:b6:2f:20:33:37:67:72:87:e3:c0:85:76:
         92:10:77:50:8b:1c:e6:b1:b0:bc:10:86:30:20:b0:7a:27:9d:
         00:c2:66:fa:89:4d:21:fc:06:5d:f0:b1:5a:a4:d7:5e:ab:cc:
         e1:0e:4d:dc:79:fd:3f:03:55:26:15:76:63:08:74:63:52:c8:
         5a:82:bb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:35 2025 by rpki-client