Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3136372e3234392e3235352e302f32342d3234203d3e203238343038.roa
File:                     3136372e3234392e3235352e302f32342d3234203d3e203238343038.roa (raw, json)
Hash identifier:          yedddzqr72cP5vcK3zy8btZP1N9Rhf/dPnm65cUf4X4=
Subject key identifier:   92:D5:2E:A3:E8:B2:2E:0B:CF:62:6A:6E:8E:79:D8:3B:86:EF:77:43
Certificate issuer:       /CN=01ED585C7FF695D515C213CCD92F98A26AF818D7
Certificate serial:       49FC0388FCA2F8EFEAB3CADBA067AF7C61B45645
Authority key identifier: 01:ED:58:5C:7F:F6:95:D5:15:C2:13:CC:D9:2F:98:A2:6A:F8:18:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3136372e3234392e3235352e302f32342d3234203d3e203238343038.roa
Signing time:             Tue 05 Mar 2024 18:03:34 +0000
ROA not before:           Tue 05 Mar 2024 17:58:34 +0000
ROA not after:            Tue 04 Mar 2025 18:03:34 +0000
asID:                     28408
IP address blocks:        167.249.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:fc:03:88:fc:a2:f8:ef:ea:b3:ca:db:a0:67:af:7c:61:b4:56:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01ED585C7FF695D515C213CCD92F98A26AF818D7
        Validity
            Not Before: Mar  5 17:58:34 2024 GMT
            Not After : Mar  4 18:03:34 2025 GMT
        Subject: CN=92D52EA3E8B22E0BCF626A6E8E79D83B86EF7743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b2:13:18:b0:2b:b3:13:50:63:72:bd:31:d0:
                    de:10:c3:f6:d3:5d:55:26:ec:2a:d1:2b:dc:e2:f1:
                    ab:7c:ba:c5:8c:20:58:4f:a5:cd:01:1c:85:ac:5c:
                    5b:59:b0:7d:25:2e:a4:ed:fd:0f:1a:d8:30:a9:6b:
                    40:11:47:f9:f5:da:16:67:94:38:9b:36:62:14:df:
                    f3:74:bf:ee:22:6a:00:9e:21:1f:cb:ff:b3:89:04:
                    4d:69:4f:c9:3d:37:20:85:48:a5:98:64:11:fb:e2:
                    a0:ed:99:2e:ee:78:0e:8a:1d:f0:38:7b:4d:ce:c8:
                    64:b2:70:f9:85:b8:98:07:61:67:70:c0:8e:4e:11:
                    2c:5f:a3:3d:05:01:e0:58:ab:5b:10:3c:5d:0e:3a:
                    7a:fd:b0:fc:2a:c4:d9:f1:ef:0e:53:a5:22:5e:08:
                    51:1d:be:f9:d3:75:72:01:78:41:0b:6a:e5:d6:96:
                    21:af:f9:40:45:54:81:0f:9b:6e:b8:4d:99:5c:63:
                    ef:0f:a1:3c:de:fb:bd:02:77:f9:8f:3c:9e:22:09:
                    68:62:22:3c:c9:e1:9f:6c:ef:1c:a1:1b:7a:de:f2:
                    eb:ee:ba:3e:57:37:1f:87:df:b8:6b:3e:1a:bb:67:
                    6b:1b:1a:91:b8:7c:77:8b:38:ad:10:ee:35:30:18:
                    8f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D5:2E:A3:E8:B2:2E:0B:CF:62:6A:6E:8E:79:D8:3B:86:EF:77:43
            X509v3 Authority Key Identifier:
                keyid:01:ED:58:5C:7F:F6:95:D5:15:C2:13:CC:D9:2F:98:A2:6A:F8:18:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3136372e3234392e3235352e302f32342d3234203d3e203238343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:0d:e5:70:3b:c3:43:88:ee:4d:12:24:71:2f:b2:1d:34:45:
         98:9f:d3:7e:55:3c:f7:7f:1a:10:95:a6:51:8d:9f:64:7d:ae:
         95:db:ac:74:97:47:74:ce:27:f4:8f:e3:2e:8a:8d:22:d6:69:
         64:ff:9d:63:d7:50:8b:6b:f6:7a:84:31:29:11:8a:09:55:0e:
         27:af:6f:aa:07:fd:10:68:72:ed:8e:fe:c8:4c:0e:c2:80:dc:
         e2:81:c5:01:77:2c:b2:93:7a:ea:18:05:63:12:55:0e:c1:60:
         bf:17:4d:0e:58:97:25:cb:84:29:1c:80:c2:a1:38:52:bd:4d:
         fd:b5:af:6f:d4:dd:8c:c1:dd:07:42:6f:68:4c:13:19:e8:4a:
         ba:f3:f6:1b:4e:69:11:97:4a:27:e6:7c:3f:39:70:c8:a2:90:
         82:8a:ec:fd:6e:54:2a:a4:4a:95:c3:0c:22:07:ff:67:1a:e2:
         07:79:24:cf:b5:8c:bc:cb:4a:99:e2:fd:71:a0:1e:f5:f6:58:
         a9:7f:db:11:3f:50:b4:52:a6:03:0a:4d:3b:ac:a4:f2:18:ef:
         fb:3c:ea:74:7b:48:82:9d:05:31:5e:61:4d:b1:26:3b:a6:b5:
         44:86:f6:e2:42:77:f8:e7:7f:5c:c6:85:c5:82:2f:90:ef:b4:
         ac:d0:76:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:57:32 2024 by rpki-client on console-ams.rpki-client.org