Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3235302e302f32342d3234203d3e20323634373031.roa
File:                     3136382e3233322e3235302e302f32342d3234203d3e20323634373031.roa (raw, json)
Hash identifier:          S0PSp6oJeLBIqJ/O6ANoycmGBygWIxodD+Fz7Wi85RQ=
Subject key identifier:   D5:70:76:96:B8:98:BE:E4:57:B5:98:F3:1C:4B:FD:71:95:37:3B:BB
Certificate issuer:       /CN=15C3449293AE91B65244E89A1B4AEEC7DC01935D
Certificate serial:       7A391BAD0CF2635172CE7C2F6CFAA93F0349A1AD
Authority key identifier: 15:C3:44:92:93:AE:91:B6:52:44:E8:9A:1B:4A:EE:C7:DC:01:93:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3235302e302f32342d3234203d3e20323634373031.roa
Signing time:             Tue 04 Feb 2025 18:27:42 +0000
ROA not before:           Tue 04 Feb 2025 18:22:42 +0000
ROA not after:            Tue 03 Feb 2026 18:27:42 +0000
asID:                     264701
IP address blocks:        168.232.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 00:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:39:1b:ad:0c:f2:63:51:72:ce:7c:2f:6c:fa:a9:3f:03:49:a1:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15C3449293AE91B65244E89A1B4AEEC7DC01935D
        Validity
            Not Before: Feb  4 18:22:42 2025 GMT
            Not After : Feb  3 18:27:42 2026 GMT
        Subject: CN=D5707696B898BEE457B598F31C4BFD7195373BBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:90:82:f6:d8:3c:e1:23:17:51:03:68:59:f3:
                    67:2d:2c:d7:71:7e:d4:94:6f:c8:68:9c:4b:ff:4d:
                    8d:22:21:d1:cf:06:69:39:ee:6a:e1:98:ce:25:b9:
                    7b:cf:70:e9:93:3a:97:c0:21:bd:5f:f8:85:6e:c9:
                    c5:ec:29:10:67:14:bd:49:17:95:d4:c3:85:79:8b:
                    76:4a:e8:38:3e:31:6a:71:59:bd:05:c7:58:e2:f4:
                    ce:b2:d9:9a:38:d4:e6:df:ca:7d:32:f1:84:36:6c:
                    a1:de:b4:34:3f:21:27:f0:4f:43:b4:24:08:e0:e6:
                    ca:06:f8:17:b8:27:e2:c0:cf:0d:39:3e:1f:8e:6f:
                    79:48:89:6c:17:66:47:11:e9:cb:ad:2d:0f:bf:4f:
                    79:6e:28:4a:04:0c:d4:e9:40:47:7e:d3:0b:12:6d:
                    46:ab:d8:42:97:94:9c:48:eb:7b:5f:6f:92:48:d9:
                    31:d1:43:22:c9:4c:1c:28:05:c2:a1:d9:33:1d:02:
                    24:45:b7:ac:85:e1:41:c3:2e:1b:e0:aa:0d:83:c6:
                    c3:f9:c5:ca:15:62:a3:ca:ea:b6:fb:af:9c:00:3b:
                    cb:af:71:24:23:50:a7:05:be:e6:a0:e4:e7:ca:71:
                    9e:52:0e:55:92:0e:a4:36:f7:86:11:0f:19:9f:1f:
                    4f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:70:76:96:B8:98:BE:E4:57:B5:98:F3:1C:4B:FD:71:95:37:3B:BB
            X509v3 Authority Key Identifier:
                keyid:15:C3:44:92:93:AE:91:B6:52:44:E8:9A:1B:4A:EE:C7:DC:01:93:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3235302e302f32342d3234203d3e20323634373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:de:96:cb:ed:93:27:93:71:5e:01:b6:9b:4a:4f:93:8f:1a:
         9c:be:b0:3f:31:a2:d2:aa:87:de:55:15:0b:b6:94:78:b9:4e:
         66:7b:c4:79:50:52:9a:0a:68:2d:94:fb:50:c1:ba:82:63:7d:
         e8:25:16:8f:00:71:7a:9e:48:80:38:f8:de:fa:b7:75:9f:cf:
         6f:a7:09:18:78:1a:16:87:b5:23:66:bd:ba:50:aa:ef:7b:54:
         da:84:0a:3f:3a:4b:de:58:51:16:ce:5a:8c:f1:15:e2:96:ed:
         b8:59:a6:6f:57:58:c6:f7:e0:89:a0:d0:9d:c5:16:69:dc:c6:
         5b:72:84:20:3d:72:cf:37:bf:4d:92:33:07:73:0e:5e:51:c7:
         7e:9c:69:cd:03:c2:60:56:6c:06:33:d9:e1:5c:10:49:df:2b:
         59:9a:4f:63:58:48:7a:69:d3:98:fd:bb:fd:41:32:d0:bd:15:
         37:e1:6f:69:2c:05:24:8d:3d:40:bc:75:0e:74:f0:b9:30:bf:
         94:9a:e8:cd:60:a1:4f:79:39:94:f4:f9:d0:10:91:8b:49:1a:
         92:da:a6:80:be:54:ac:fe:11:9d:4d:b2:37:eb:de:d3:ed:85:
         a0:bd:ba:07:84:bd:24:5a:8b:f4:09:5c:0f:23:f6:f2:4e:b2:
         c0:99:a5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:23 2025 by rpki-client