Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3234382e302f32342d3234203d3e20323634373031.roa
File:                     3136382e3233322e3234382e302f32342d3234203d3e20323634373031.roa (raw, json)
Hash identifier:          ILaibNP0M8ygvh7u0AXH8DwmpeZoTENxQYmShQFjbtg=
Subject key identifier:   62:CB:70:84:88:3F:99:48:FB:4B:A4:F1:62:40:8A:21:D6:CE:85:74
Certificate issuer:       /CN=15C3449293AE91B65244E89A1B4AEEC7DC01935D
Certificate serial:       6F8219FC34DEF33EA62AF091AEE4ECD807B2A695
Authority key identifier: 15:C3:44:92:93:AE:91:B6:52:44:E8:9A:1B:4A:EE:C7:DC:01:93:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3234382e302f32342d3234203d3e20323634373031.roa
Signing time:             Tue 04 Feb 2025 18:27:42 +0000
ROA not before:           Tue 04 Feb 2025 18:22:42 +0000
ROA not after:            Tue 03 Feb 2026 18:27:42 +0000
asID:                     264701
IP address blocks:        168.232.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 00:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:82:19:fc:34:de:f3:3e:a6:2a:f0:91:ae:e4:ec:d8:07:b2:a6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15C3449293AE91B65244E89A1B4AEEC7DC01935D
        Validity
            Not Before: Feb  4 18:22:42 2025 GMT
            Not After : Feb  3 18:27:42 2026 GMT
        Subject: CN=62CB7084883F9948FB4BA4F162408A21D6CE8574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e3:9a:d2:52:97:0b:c7:a4:f3:42:9c:9b:59:
                    eb:75:05:e5:38:e9:65:eb:10:64:3f:48:db:6c:20:
                    9f:e4:3d:97:7c:1d:86:94:18:c3:5c:20:2b:f7:64:
                    eb:17:d3:c4:8e:8c:09:13:da:6b:93:18:58:a2:28:
                    b6:18:eb:c5:eb:6a:e2:f8:6a:09:c2:f9:e6:f5:6e:
                    b1:4e:4b:58:9b:a7:d8:c0:84:9d:b3:12:7e:bf:59:
                    ad:b8:78:f2:f8:12:5c:a5:a5:4f:5b:b8:9c:7b:64:
                    5b:0f:a0:d8:63:9a:b2:3e:35:7a:15:9c:1b:89:78:
                    96:35:b3:8b:2c:fe:00:82:cc:f8:3c:ec:b6:d9:67:
                    56:6a:8b:ff:10:6b:c4:45:0d:b6:8d:27:93:d4:d7:
                    69:fc:2e:58:2f:8e:5e:f2:6d:99:bb:f3:5d:41:b1:
                    1c:b2:f5:4b:b0:71:46:5c:dc:e9:e4:20:36:62:db:
                    73:0e:f8:fb:60:f2:97:e1:8a:8c:65:97:9c:cc:41:
                    f9:28:65:f2:4e:f2:2e:e7:5d:14:f0:25:a3:b2:ff:
                    74:e1:f9:7b:b8:3b:18:58:8f:d7:ec:d1:5e:d8:2c:
                    62:ce:11:c7:48:38:5a:08:26:8f:55:8d:e5:09:22:
                    dc:b8:b1:b3:6f:3a:2a:1d:d4:8c:7a:c5:d8:49:76:
                    14:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CB:70:84:88:3F:99:48:FB:4B:A4:F1:62:40:8A:21:D6:CE:85:74
            X509v3 Authority Key Identifier:
                keyid:15:C3:44:92:93:AE:91:B6:52:44:E8:9A:1B:4A:EE:C7:DC:01:93:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3234382e302f32342d3234203d3e20323634373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:a4:b8:39:7f:f0:97:a9:d6:22:46:3c:14:ab:ba:f0:3e:7f:
         c9:1d:1b:2c:82:8d:8c:a7:81:2e:f8:09:96:21:37:d1:1f:8d:
         2b:3f:90:4e:b1:e8:55:54:66:31:ed:17:ab:d0:c4:82:55:84:
         a6:fe:df:a3:8b:59:b7:d6:06:2e:8a:33:d6:96:3e:46:59:25:
         55:2e:4d:64:c7:fe:35:83:8e:45:16:12:ab:1c:aa:e3:b3:23:
         72:68:ee:6f:f6:7e:cc:11:04:ac:e4:22:39:c6:c5:4e:42:65:
         71:0c:81:8b:3b:15:d8:39:ca:64:68:d9:52:a8:75:c5:e5:f4:
         49:b9:c7:3f:fc:c9:93:ec:6a:13:65:0d:b2:46:6c:4f:51:7d:
         54:8e:b5:8a:c3:58:a2:17:11:47:f0:f7:53:2c:65:0b:d0:3f:
         be:ce:4c:41:6d:a4:47:93:82:a9:7e:25:16:ae:fd:9c:b2:aa:
         10:17:9c:1a:60:87:16:f3:7f:b2:ab:e4:18:2e:e2:85:18:ea:
         f4:c6:a2:18:ce:e1:1c:f9:90:d9:61:a3:16:6c:92:e7:d9:a2:
         b7:84:b4:e4:26:a0:95:e3:a3:76:e8:ff:e8:8e:1a:87:5f:56:
         bd:e2:bd:e0:4e:04:a9:a5:75:9c:15:be:76:ab:1a:3d:54:27:
         cd:29:00:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:40 2025 by rpki-client