Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3234392e302f32342d3234203d3e20323634373031.roa
File:                     3136382e3233322e3234392e302f32342d3234203d3e20323634373031.roa (raw, json)
Hash identifier:          CrTsjJUvfjkKT3RKwgt99A95otnJfYjwByi5+B0d+o4=
Subject key identifier:   F0:A2:23:F3:93:3B:EB:61:3E:3D:A5:6E:1C:75:96:82:DC:E4:74:5F
Certificate issuer:       /CN=15C3449293AE91B65244E89A1B4AEEC7DC01935D
Certificate serial:       6765D88DE7F97776782EF727E5650EA07D9ACDCE
Authority key identifier: 15:C3:44:92:93:AE:91:B6:52:44:E8:9A:1B:4A:EE:C7:DC:01:93:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3234392e302f32342d3234203d3e20323634373031.roa
Signing time:             Tue 04 Feb 2025 18:27:41 +0000
ROA not before:           Tue 04 Feb 2025 18:22:41 +0000
ROA not after:            Tue 03 Feb 2026 18:27:41 +0000
asID:                     264701
IP address blocks:        168.232.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:65:d8:8d:e7:f9:77:76:78:2e:f7:27:e5:65:0e:a0:7d:9a:cd:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15C3449293AE91B65244E89A1B4AEEC7DC01935D
        Validity
            Not Before: Feb  4 18:22:41 2025 GMT
            Not After : Feb  3 18:27:41 2026 GMT
        Subject: CN=F0A223F3933BEB613E3DA56E1C759682DCE4745F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0b:ac:2a:f9:a3:90:9a:4c:d3:2b:ba:49:02:
                    71:aa:fe:7c:79:8d:60:f7:ed:82:37:92:03:57:8c:
                    02:af:d6:25:2d:d5:4c:55:91:37:93:bb:06:59:d0:
                    9c:6b:46:7d:30:5d:f3:cb:c6:1e:77:42:b3:09:a5:
                    3c:85:24:0d:a4:40:48:51:84:08:c5:34:42:43:4d:
                    f5:08:64:77:8f:78:d0:ae:ca:80:8a:92:a0:09:6c:
                    8e:e2:82:84:a5:04:e5:a2:c5:c8:8e:22:da:17:d1:
                    0d:c2:05:53:36:f3:1a:72:a8:b5:f1:af:21:8a:0a:
                    d7:b7:91:aa:b4:6e:f4:70:6f:ed:ba:a3:13:8b:f7:
                    18:60:06:5d:97:03:8f:a4:cb:47:4d:f1:b6:2a:a7:
                    91:ba:51:29:ef:ac:aa:2b:2d:65:d6:e8:8c:32:47:
                    5f:c1:94:9a:e9:e3:f1:17:ab:c1:45:21:64:7a:53:
                    60:9e:fe:e0:86:32:87:4e:da:54:2a:28:c2:49:ab:
                    80:a0:bf:58:27:24:5a:93:d6:f1:ca:ed:13:8a:73:
                    d3:9b:bc:a2:b1:11:70:77:76:95:c7:77:04:c8:35:
                    8e:2a:ab:14:ba:34:41:b6:8e:9c:ba:68:09:95:49:
                    dd:10:dd:a4:25:f6:6e:e4:ab:ba:60:5b:ab:4a:e5:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A2:23:F3:93:3B:EB:61:3E:3D:A5:6E:1C:75:96:82:DC:E4:74:5F
            X509v3 Authority Key Identifier:
                keyid:15:C3:44:92:93:AE:91:B6:52:44:E8:9A:1B:4A:EE:C7:DC:01:93:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3234392e302f32342d3234203d3e20323634373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:21:9a:47:d7:ef:ed:5a:7d:5f:9d:bf:8d:df:53:fb:1d:73:
         54:e2:8f:67:23:15:19:3b:ea:cb:96:9e:f9:82:0e:9c:d6:ed:
         80:e0:da:45:45:8b:67:89:bd:26:bd:21:d1:45:67:c8:85:8d:
         7c:f3:0b:ae:68:d2:c3:22:b2:20:b0:69:c4:70:4b:a8:8c:69:
         91:55:69:2c:6b:2d:9a:aa:10:c2:a9:a1:cb:91:10:b8:a7:7f:
         7a:8d:db:09:eb:15:00:8d:3b:9d:0f:a9:7e:5f:a6:6c:2f:21:
         22:32:8f:57:02:58:e3:01:b0:a4:d8:61:49:86:02:25:0e:ee:
         2f:70:c1:af:0a:79:e2:df:3f:f2:33:ce:bb:46:42:43:23:5d:
         d9:c2:71:2e:02:98:87:f2:5f:05:c2:5e:ce:c5:f5:a1:23:11:
         33:f0:f7:20:3f:f4:45:1b:c9:7b:f0:d1:0d:2e:48:4b:e4:77:
         03:f0:0c:10:e6:6c:a2:24:76:26:9c:16:44:7c:b3:95:5c:9f:
         0c:1a:28:b3:ec:06:05:b6:47:b4:68:27:34:44:8f:c0:6e:e5:
         34:1c:43:73:b9:b0:8e:5f:40:7f:93:43:70:4a:41:cf:23:75:
         84:df:e9:0e:ae:3c:14:96:bc:f8:c5:62:6c:77:03:c6:4c:3f:
         43:14:38:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:03:37 2025 by rpki-client