Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3235312e302f32342d3234203d3e20323634373031.roa
File:                     3136382e3233322e3235312e302f32342d3234203d3e20323634373031.roa (raw, json)
Hash identifier:          CDp5xaoU/q63GdwIRwvuw878zSd4OZanMReypV96lx4=
Subject key identifier:   32:94:B8:EB:8F:8B:CD:87:B6:62:32:47:A7:F3:2C:BB:18:C5:EE:3F
Certificate issuer:       /CN=15C3449293AE91B65244E89A1B4AEEC7DC01935D
Certificate serial:       2F6FEC411B0EB5DDA980C00185E3BF2CE0D45BC2
Authority key identifier: 15:C3:44:92:93:AE:91:B6:52:44:E8:9A:1B:4A:EE:C7:DC:01:93:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3235312e302f32342d3234203d3e20323634373031.roa
Signing time:             Tue 04 Feb 2025 18:27:42 +0000
ROA not before:           Tue 04 Feb 2025 18:22:42 +0000
ROA not after:            Tue 03 Feb 2026 18:27:42 +0000
asID:                     264701
IP address blocks:        168.232.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 00:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:6f:ec:41:1b:0e:b5:dd:a9:80:c0:01:85:e3:bf:2c:e0:d4:5b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15C3449293AE91B65244E89A1B4AEEC7DC01935D
        Validity
            Not Before: Feb  4 18:22:42 2025 GMT
            Not After : Feb  3 18:27:42 2026 GMT
        Subject: CN=3294B8EB8F8BCD87B6623247A7F32CBB18C5EE3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:96:bd:c1:c6:92:9a:b9:8f:1f:82:ec:f0:d6:
                    ad:01:5c:82:d5:9a:c6:f4:26:bc:fe:ea:93:85:8e:
                    37:e0:5e:52:dc:74:70:cd:75:e2:10:3e:c1:a7:d9:
                    85:45:c7:1e:5f:4c:4a:f1:fc:a8:8a:79:02:b8:c8:
                    9b:f0:be:6d:19:b0:88:da:9b:9b:bc:85:a3:c6:1b:
                    b6:6b:6b:c2:12:70:31:59:25:dd:49:fa:f9:d9:14:
                    72:b7:da:b3:ee:d6:ea:1b:08:66:44:35:f1:d0:4e:
                    de:2b:3b:47:ce:ed:10:5d:6c:ef:84:cb:b0:0a:64:
                    77:30:ae:b3:69:31:40:5b:94:89:3e:1f:a9:23:9d:
                    80:7d:16:95:26:1f:a5:e7:e8:fc:b6:84:67:21:7f:
                    ee:1b:46:95:0d:64:2d:75:58:a0:38:be:b7:17:e5:
                    27:03:5e:70:6c:ec:d2:b7:fe:e0:30:4f:03:f4:5b:
                    83:ce:ef:51:b9:e0:a5:34:8a:78:5c:96:af:cf:7c:
                    4a:38:ec:52:a9:44:24:aa:c5:85:95:bd:35:bc:b1:
                    b8:a3:bc:ca:7a:ba:1d:50:9c:a8:4c:7e:1c:58:61:
                    fa:30:e7:d0:8e:90:7d:db:f9:43:ac:ca:f3:53:3c:
                    df:94:99:74:a0:8e:f2:3c:f1:42:a9:02:9e:33:2d:
                    b2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:94:B8:EB:8F:8B:CD:87:B6:62:32:47:A7:F3:2C:BB:18:C5:EE:3F
            X509v3 Authority Key Identifier:
                keyid:15:C3:44:92:93:AE:91:B6:52:44:E8:9A:1B:4A:EE:C7:DC:01:93:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3235312e302f32342d3234203d3e20323634373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:6c:6a:31:a6:36:8a:b6:08:db:74:94:c1:58:8a:ea:79:18:
         65:99:ec:29:8d:70:c1:40:4e:63:99:2a:5c:ce:41:7f:5a:6e:
         fe:8f:db:14:7a:7f:fa:d4:01:28:73:8b:c9:4f:29:06:f5:de:
         e7:ae:6e:c2:7e:1a:09:78:3a:34:a8:a3:fc:2f:62:be:74:23:
         06:7d:7d:c2:1a:76:8a:c7:26:77:f7:2a:7d:8d:6a:53:c8:8a:
         1f:af:ca:13:be:4f:da:f0:23:7e:3f:19:dd:e5:5c:be:1f:96:
         90:8d:1c:69:a9:b9:25:ab:1e:06:26:44:d1:e0:7d:a7:1b:0b:
         30:8d:35:f4:cf:a1:a4:c7:3c:35:56:34:11:8b:b8:cd:26:aa:
         c7:00:d8:a3:d8:a8:84:5d:24:d8:81:e3:2d:6f:23:ca:45:12:
         e1:72:f7:b1:bf:19:91:33:c4:d9:51:6b:93:28:6c:00:be:96:
         36:77:88:b7:15:91:ac:84:d0:03:88:9a:d9:5c:a4:fb:a0:82:
         aa:1a:23:77:32:4c:2c:8b:f5:fa:72:17:d5:17:37:38:26:30:
         a2:d8:b5:97:9f:15:86:1e:d1:00:4d:72:1d:3c:46:d7:5a:fc:
         a3:45:b8:c4:a5:f3:56:83:98:f8:31:f4:8c:66:0a:57:91:c8:
         7b:1b:c0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:39 2025 by rpki-client