Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3136372e3235302e33362e302f32322d3234203d3e203631353132.roa
File:                     3136372e3235302e33362e302f32322d3234203d3e203631353132.roa (raw, json)
Hash identifier:          z8l1YJ+gjIDSU5H/jNLugCR4s/zMvxzkWvDfC6YlBP8=
Subject key identifier:   76:FE:BB:74:AE:1F:E1:30:45:59:91:C1:B0:6A:BB:78:A1:74:66:88
Certificate issuer:       /CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
Certificate serial:       205A1E2E7400183DCE4E04E0D17AC4A021CF7DD1
Authority key identifier: 89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3136372e3235302e33362e302f32322d3234203d3e203631353132.roa
Signing time:             Thu 03 Apr 2025 16:45:00 +0000
ROA not before:           Thu 03 Apr 2025 16:40:00 +0000
ROA not after:            Thu 02 Apr 2026 16:45:00 +0000
asID:                     61512
IP address blocks:        167.250.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:5a:1e:2e:74:00:18:3d:ce:4e:04:e0:d1:7a:c4:a0:21:cf:7d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
        Validity
            Not Before: Apr  3 16:40:00 2025 GMT
            Not After : Apr  2 16:45:00 2026 GMT
        Subject: CN=76FEBB74AE1FE130455991C1B06ABB78A1746688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c8:31:43:7c:11:ec:d0:c5:e6:3b:d7:84:58:
                    e6:ac:16:0d:2a:d3:50:05:c4:03:85:d1:d7:d3:33:
                    e7:74:94:78:a3:c5:56:bc:d0:f0:d8:85:d3:f8:4a:
                    ab:e2:ea:b2:cc:8e:6f:09:2b:fb:45:16:31:54:b5:
                    08:81:33:60:98:82:59:f7:b2:3e:c6:a9:bb:cc:3d:
                    0a:91:d2:e7:a8:05:78:25:77:88:88:c2:f7:37:c4:
                    08:f7:97:f4:cd:f2:ce:3e:97:75:49:f5:4f:cf:c3:
                    ba:df:b7:b8:54:78:dc:4d:f1:42:5e:3b:20:ea:6b:
                    b7:5f:ed:f9:52:74:d2:5d:43:dc:c1:0a:aa:d7:3f:
                    38:9c:d9:ec:22:c9:1a:75:e1:99:dd:0e:8c:8e:8b:
                    3e:bc:15:3e:e7:98:99:2c:12:91:71:b7:51:f6:3a:
                    ee:a9:fa:8d:7b:64:25:be:83:24:94:84:d5:32:52:
                    7b:dc:d5:4b:66:59:69:50:51:3f:6d:12:19:c9:3c:
                    27:ca:98:42:f8:81:4b:59:45:38:91:d2:02:36:58:
                    59:53:df:3c:a8:5a:d8:77:96:3e:96:28:f0:2b:05:
                    c3:84:b8:ab:38:21:5b:db:27:4e:bf:15:de:cb:e9:
                    13:55:2b:d3:31:cc:fe:42:3d:ea:d5:3f:c9:f3:d8:
                    ee:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FE:BB:74:AE:1F:E1:30:45:59:91:C1:B0:6A:BB:78:A1:74:66:88
            X509v3 Authority Key Identifier:
                keyid:89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3136372e3235302e33362e302f32322d3234203d3e203631353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:8c:c6:2d:ef:7b:67:f9:3e:6f:d1:8b:7a:99:73:29:e9:fb:
         2f:1c:6b:da:bc:49:36:20:c6:63:ef:d2:07:24:3c:ce:d7:cb:
         73:88:92:29:35:fb:20:ab:b9:11:75:0a:30:fa:40:d9:4c:c4:
         78:ff:46:55:63:14:cc:36:63:31:34:8e:84:4f:b8:72:16:b3:
         21:bc:db:bf:41:da:58:6d:54:a9:9e:13:63:b7:4d:fc:ab:fe:
         92:02:51:f3:e8:ce:75:de:2a:63:7f:46:c9:e0:de:23:dd:3f:
         39:73:63:0e:b0:32:7a:92:70:41:7a:db:a5:a8:7f:d8:e5:c2:
         d9:ca:d4:80:b1:94:ce:44:02:f7:29:b2:6f:34:8b:1e:96:3c:
         c1:3a:c7:6a:dd:25:b4:d7:e4:6b:e8:90:41:54:3d:ac:f8:e0:
         c1:55:a8:20:1b:75:34:4b:77:74:8c:ef:f3:d6:6f:93:49:3a:
         7a:3b:89:6f:6d:83:df:61:a7:bf:25:b5:b9:7d:5c:a7:24:a0:
         62:05:ac:91:42:c6:9e:6b:5c:f4:5a:c0:53:62:91:6a:3f:63:
         17:94:d5:d6:50:5f:98:b5:96:69:51:78:44:96:dc:84:84:34:
         d8:a2:92:bd:7b:c0:1e:af:af:41:b4:47:2b:7c:15:7b:46:34:
         21:32:74:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:57:14 2025 by rpki-client