Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3136372e3235302e3138302e302f32332d3233203d3e20323634363638.roa
File:                     3136372e3235302e3138302e302f32332d3233203d3e20323634363638.roa (raw, json)
Hash identifier:          aq+GV6eH5Wx58kHYOfWdJlkBxdoWVh2N+7nAFbyaSjc=
Subject key identifier:   4C:29:C7:0E:EC:2A:63:D2:77:E6:72:F1:50:F2:69:D6:DE:D7:B8:A6
Certificate issuer:       /CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
Certificate serial:       3655BE23B79AE9E4D5114734C320EE73E00383DA
Authority key identifier: C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3136372e3235302e3138302e302f32332d3233203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 18:21:06 +0000
ROA not before:           Tue 05 Mar 2024 18:16:06 +0000
ROA not after:            Tue 04 Mar 2025 18:21:06 +0000
asID:                     264668
IP address blocks:        167.250.180.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:55:be:23:b7:9a:e9:e4:d5:11:47:34:c3:20:ee:73:e0:03:83:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
        Validity
            Not Before: Mar  5 18:16:06 2024 GMT
            Not After : Mar  4 18:21:06 2025 GMT
        Subject: CN=4C29C70EEC2A63D277E672F150F269D6DED7B8A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a2:52:20:25:75:de:21:b9:fb:01:5e:d4:1d:
                    2f:e0:bb:d0:f0:5d:15:3c:e0:a3:c6:b7:56:f7:7a:
                    73:1b:54:7d:08:65:f3:af:ca:18:03:31:17:a8:06:
                    d5:3d:6c:97:20:9e:cc:b2:66:94:8a:65:fb:e2:fd:
                    59:52:d7:4f:1b:b0:66:bb:ae:51:89:ba:ba:2c:cc:
                    ac:15:10:9d:aa:ea:ab:d0:6a:50:e2:f1:70:e5:ee:
                    46:67:aa:98:82:e6:4f:76:6e:4b:78:18:a3:ab:e2:
                    42:c2:58:49:17:91:48:d8:ca:7e:c1:9a:0c:b2:e0:
                    67:9d:b3:d3:06:e7:78:be:38:3c:c1:f4:2b:7f:c1:
                    9c:ec:e8:ca:63:c4:71:b5:17:92:fc:a5:8b:a4:70:
                    7d:59:ec:0b:f3:1a:94:0e:58:46:d6:a6:05:5b:3f:
                    d3:1c:a0:43:c7:43:da:c1:28:44:34:ca:78:61:ba:
                    a3:8f:ac:67:96:6e:cb:44:a3:cb:af:82:7b:f1:39:
                    68:41:54:d7:3c:2e:3c:9f:0f:b9:86:03:33:cd:bf:
                    ff:8f:76:33:aa:17:06:89:13:7b:a4:4c:f0:c0:51:
                    5e:53:89:fd:55:30:8f:5f:2f:c9:8a:35:46:2f:b5:
                    2d:d0:bf:d2:3e:47:5f:5b:38:96:11:50:99:b1:cb:
                    50:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:29:C7:0E:EC:2A:63:D2:77:E6:72:F1:50:F2:69:D6:DE:D7:B8:A6
            X509v3 Authority Key Identifier:
                keyid:C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3136372e3235302e3138302e302f32332d3233203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:b5:93:4c:88:48:53:82:86:dd:f1:40:0e:81:08:9a:4d:ae:
         5d:1b:81:28:99:6e:df:3b:93:94:a9:2f:21:f6:da:c7:5a:c3:
         cc:e9:88:87:0d:f9:0f:bf:75:93:6e:bf:2e:e2:4d:2d:88:ee:
         87:da:fc:73:76:62:6f:df:a3:69:69:b9:25:6b:6f:09:e3:a6:
         7d:e2:1f:59:a1:fb:a2:b5:bf:57:f7:ab:82:c8:32:7d:d7:08:
         a0:9a:98:5e:54:7f:8b:e9:80:46:5c:56:72:1b:2b:a0:24:43:
         39:6a:59:3e:71:5d:09:3c:df:97:01:d9:e2:db:4e:84:00:36:
         95:d5:f1:90:27:39:2f:3d:a1:24:e4:67:e8:06:74:f3:55:13:
         6e:ff:84:03:26:ef:19:d0:63:56:ee:ca:8a:70:d6:63:65:21:
         ee:50:7d:39:ac:ed:c8:83:77:f9:86:17:e3:f8:fb:30:59:b1:
         e2:e6:44:6c:48:13:4d:a3:fa:b2:49:3b:2d:79:7e:6e:f3:d7:
         a6:27:a1:5c:31:d7:7c:64:bf:83:90:dd:a7:e2:c0:a1:0e:6d:
         74:a3:21:f0:68:14:6f:cc:80:f3:69:d3:ba:c1:72:0f:cd:8b:
         f8:3f:f9:70:91:9b:b9:44:7f:52:ce:bf:b5:d0:dd:4e:a4:91:
         1d:44:9a:0f
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUNlW+I7ea6eTVEUc0wyDuc+ADg9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI1NTBBNUQzMDlFRTIxMjhFNEZDREMwMkNENEFDNUM1
NzYwNjlFMjAeFw0yNDAzMDUxODE2MDZaFw0yNTAzMDQxODIxMDZaMDMxMTAvBgNV
BAMTKDRDMjlDNzBFRUMyQTYzRDI3N0U2NzJGMTUwRjI2OUQ2REVEN0I4QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXolIgJXXeIbn7AV7UHS/gu9Dw
XRU84KPGt1b3enMbVH0IZfOvyhgDMReoBtU9bJcgnsyyZpSKZfvi/VlS108bsGa7
rlGJuroszKwVEJ2q6qvQalDi8XDl7kZnqpiC5k92bkt4GKOr4kLCWEkXkUjYyn7B
mgyy4Geds9MG53i+ODzB9Ct/wZzs6MpjxHG1F5L8pYukcH1Z7AvzGpQOWEbWpgVb
P9McoEPHQ9rBKEQ0ynhhuqOPrGeWbstEo8uvgnvxOWhBVNc8LjyfD7mGAzPNv/+P
djOqFwaJE3ukTPDAUV5Tif1VMI9fL8mKNUYvtS3Qv9I+R19bOJYRUJmxy1AJAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUTCnHDuwqY9J35nLxUPJp1t7XuKYwHwYDVR0j
BBgwFoAUwlUKXTCe4hKOT83ALNSsXFdgaeIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMEI3NDY4MjhBNzM4MDNFRTBBQzJDQ0NGOUQ1ODhDMzg0
QTg2N0U0QTczNUJBNDcxQUU5NjIwMDk4NDMxRjYzLzAvQzI1NTBBNUQzMDlFRTIx
MjhFNEZDREMwMkNENEFDNUM1NzYwNjlFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMjU1MEE1RDMwOUVFMjEyOEU0
RkNEQzAyQ0Q0QUM1QzU3NjA2OUUyLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTBCNzQ2ODI4QTczODAzRUUwQUMyQ0NDRjlENTg4QzM4NEE4NjdFNEE3
MzVCQTQ3MUFFOTYyMDA5ODQzMUY2My8wLzMxMzYzNzJlMzIzNTMwMmUzMTM4MzAy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzQzNjM2Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGn
+rQwDQYJKoZIhvcNAQELBQADggEBAGm1k0yISFOCht3xQA6BCJpNrl0bgSiZbt87
k5SpLyH22sdaw8zpiIcN+Q+/dZNuvy7iTS2I7ofa/HN2Ym/fo2lpuSVrbwnjpn3i
H1mh+6K1v1f3q4LIMn3XCKCamF5Uf4vpgEZcVnIbK6AkQzlqWT5xXQk835cB2eLb
ToQANpXV8ZAnOS89oSTkZ+gGdPNVE27/hAMm7xnQY1buyopw1mNlIe5QfTms7ciD
d/mGF+P4+zBZseLmRGxIE02j+rJJOy15fm7z16YnoVwx13xkv4OQ3afiwKEObXSj
IfBoFG/MgPNp07rBcg/Ni/g/+XCRm7lEf1LOv7XQ3U6kkR1Emg8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:54 2024 by rpki-client on console-fra.rpki-client.org