Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3136372e3235302e3132302e302f32322d3234203d3e20323632323230.roa
File:                     3136372e3235302e3132302e302f32322d3234203d3e20323632323230.roa (raw, json)
Hash identifier:          pUYH81nDKBT0O3/2clQ6I1e5L2JEzTls7duH7bOpww8=
Subject key identifier:   20:3C:62:1E:EF:30:4A:5B:D9:A4:1E:AA:31:19:F0:A0:39:B4:BD:BE
Certificate issuer:       /CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85
Certificate serial:       63FA07F2351B31F6DA4BDA5FDF3B2B180899B1F0
Authority key identifier: 24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3136372e3235302e3132302e302f32322d3234203d3e20323632323230.roa
Signing time:             Tue 05 Mar 2024 17:57:38 +0000
ROA not before:           Tue 05 Mar 2024 17:52:38 +0000
ROA not after:            Tue 04 Mar 2025 17:57:38 +0000
asID:                     262220
IP address blocks:        167.250.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fa:07:f2:35:1b:31:f6:da:4b:da:5f:df:3b:2b:18:08:99:b1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85
        Validity
            Not Before: Mar  5 17:52:38 2024 GMT
            Not After : Mar  4 17:57:38 2025 GMT
        Subject: CN=203C621EEF304A5BD9A41EAA3119F0A039B4BDBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bd:39:e2:58:65:a3:66:9e:b5:9e:5a:c9:c3:
                    8f:08:f7:a2:a0:a5:92:85:71:5f:ca:61:11:5b:87:
                    05:f3:04:2a:d6:95:ee:9e:85:46:56:cf:a4:ce:69:
                    d6:83:f2:43:4b:9c:a1:54:a6:d9:e7:3f:77:cd:c8:
                    ec:46:10:68:66:a5:22:b0:79:e3:54:3d:52:fa:a1:
                    c1:41:91:2e:29:a7:63:fa:52:be:cf:14:ca:8b:94:
                    44:9b:59:c5:ad:45:1c:90:eb:fb:d0:c3:2e:40:b7:
                    05:b3:5c:c0:b3:d1:50:b0:c2:43:47:d7:94:52:41:
                    da:0e:68:21:ac:a4:ed:c0:23:0c:e7:07:fd:45:87:
                    94:f2:8f:78:26:75:53:ff:d9:fe:aa:8c:4c:6c:41:
                    0b:aa:c7:fc:dc:0c:b2:83:4e:65:02:16:7c:5a:96:
                    db:89:33:ec:0d:2e:12:a4:c5:5e:11:0e:ec:c3:7c:
                    d6:20:c7:a9:d7:e9:12:2b:bd:66:ba:61:8a:89:9c:
                    e3:f6:08:41:c3:b8:32:1c:dd:be:20:e3:28:2f:c5:
                    f1:40:69:0c:89:13:27:81:f1:59:76:87:72:a7:3d:
                    e4:d0:e0:55:12:ea:64:34:ef:db:f3:d3:9f:89:4b:
                    fb:a6:b0:af:25:1b:7a:e8:50:8f:79:74:c1:9e:c9:
                    36:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3C:62:1E:EF:30:4A:5B:D9:A4:1E:AA:31:19:F0:A0:39:B4:BD:BE
            X509v3 Authority Key Identifier:
                keyid:24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3136372e3235302e3132302e302f32322d3234203d3e20323632323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:60:1c:3d:7c:9c:87:3a:cf:ff:a7:d2:41:07:b4:88:69:f7:
         7b:33:47:00:c6:89:6f:81:da:7e:a7:d7:61:87:b4:68:a5:ca:
         d7:1d:94:80:42:a8:f7:41:9a:ba:da:6d:14:97:7a:8b:09:ab:
         e1:fc:42:1c:ce:e4:41:d2:50:d0:c5:fa:1e:e6:c3:37:fb:ad:
         a2:41:81:99:47:b0:63:d0:98:82:88:1d:0e:65:c2:eb:98:76:
         bb:00:bb:5d:11:fa:cb:67:2c:af:b5:33:4b:fd:7d:a7:b8:a0:
         08:ea:bb:2e:52:11:d9:ce:2f:ff:70:b6:cf:55:cf:4a:67:14:
         7a:de:86:ab:3a:f6:f8:a5:6a:12:3b:c5:a5:6f:e3:71:96:e7:
         e4:64:30:4b:14:c8:31:b4:bd:9d:80:65:a3:c5:93:c2:8f:a2:
         20:b9:7f:1d:3a:83:53:9e:a3:25:95:99:cc:4e:27:da:1e:a5:
         a9:5e:6d:2a:1f:87:86:0f:d8:8e:45:81:b9:c4:57:dc:83:83:
         cf:73:70:19:82:b8:d3:b2:45:98:1b:b4:81:99:da:bb:70:44:
         77:8c:18:59:11:d5:de:c9:f0:76:07:f9:8e:b5:9d:ac:cd:75:
         05:7d:7e:ca:58:2f:4e:27:ac:fb:22:2e:00:84:2c:8b:d8:58:
         7a:fd:1b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org