Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/3136372e3234392e34342e302f32322d3234203d3e203532343236.roa
File:                     3136372e3234392e34342e302f32322d3234203d3e203532343236.roa (raw, json)
Hash identifier:          CQ2m+g/h87/WMvyb1olCycnrBdosbqNlOCCe3F0IG4s=
Subject key identifier:   33:36:A4:DB:4E:51:77:0A:AD:27:61:60:3E:16:E6:94:75:E4:5F:A8
Certificate issuer:       /CN=2D2BA350074219D08DFBB94550147A89F29E05B9
Certificate serial:       61B2709BE89DD552C45308C40BB9076F1F409807
Authority key identifier: 2D:2B:A3:50:07:42:19:D0:8D:FB:B9:45:50:14:7A:89:F2:9E:05:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D2BA350074219D08DFBB94550147A89F29E05B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/3136372e3234392e34342e302f32322d3234203d3e203532343236.roa
Signing time:             Thu 25 Jul 2024 19:05:00 +0000
ROA not before:           Thu 25 Jul 2024 19:00:00 +0000
ROA not after:            Thu 24 Jul 2025 19:05:00 +0000
asID:                     52426
IP address blocks:        167.249.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/2D2BA350074219D08DFBB94550147A89F29E05B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/2D2BA350074219D08DFBB94550147A89F29E05B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D2BA350074219D08DFBB94550147A89F29E05B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b2:70:9b:e8:9d:d5:52:c4:53:08:c4:0b:b9:07:6f:1f:40:98:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D2BA350074219D08DFBB94550147A89F29E05B9
        Validity
            Not Before: Jul 25 19:00:00 2024 GMT
            Not After : Jul 24 19:05:00 2025 GMT
        Subject: CN=3336A4DB4E51770AAD2761603E16E69475E45FA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:28:98:75:03:5e:eb:01:6d:28:80:47:fa:69:
                    1d:39:95:c2:63:20:cf:3e:9e:93:eb:ee:51:9c:b0:
                    9e:bb:09:f0:65:d3:6b:db:7b:65:58:59:89:e4:ac:
                    00:cb:bc:62:74:97:ec:4d:01:15:e6:5b:a3:91:02:
                    9e:d1:b8:da:ff:e5:ee:ae:45:ad:f6:c9:ab:de:04:
                    63:fe:15:ed:f2:f2:65:90:be:82:ec:69:61:c3:a2:
                    4c:7c:42:4a:4e:74:44:d7:92:a6:92:3b:eb:c7:5a:
                    ae:49:28:7c:c1:83:96:64:03:4c:c9:a1:bf:5f:64:
                    ce:df:14:ea:b7:8f:2f:c2:e3:89:d3:eb:c1:21:7c:
                    51:07:d1:25:cb:46:cc:12:21:87:ec:68:b3:e5:e1:
                    e8:ad:98:a9:b4:c8:99:7e:ea:32:de:06:16:81:61:
                    00:1b:e0:08:4a:c7:07:a7:e7:b9:fc:43:ae:3e:a9:
                    29:44:3b:47:6b:87:d7:1f:71:80:e1:58:2b:3a:10:
                    ed:c1:91:87:56:42:49:3b:f3:4c:36:39:33:38:7a:
                    fd:4c:ca:b2:fe:45:af:a0:b8:6f:f2:4d:7e:88:e1:
                    43:4d:7e:2f:11:e2:79:69:4d:8f:7e:3a:7f:9f:a9:
                    9b:78:ea:32:8e:0f:63:ac:48:c9:4e:36:70:75:bf:
                    c9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:36:A4:DB:4E:51:77:0A:AD:27:61:60:3E:16:E6:94:75:E4:5F:A8
            X509v3 Authority Key Identifier:
                keyid:2D:2B:A3:50:07:42:19:D0:8D:FB:B9:45:50:14:7A:89:F2:9E:05:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/2D2BA350074219D08DFBB94550147A89F29E05B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D2BA350074219D08DFBB94550147A89F29E05B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/3136372e3234392e34342e302f32322d3234203d3e203532343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:46:81:b2:0f:8c:98:e1:27:7f:42:1d:7e:52:88:f5:41:9f:
         fd:11:d7:04:ee:19:ae:80:ba:b1:f4:71:44:59:fc:36:44:d4:
         d2:ed:da:cd:d6:6c:8a:2f:a0:f3:bd:43:20:a6:8e:0c:99:98:
         98:ec:08:75:35:13:34:ff:74:02:3b:7f:60:c0:2f:11:e0:23:
         00:8a:5f:d3:30:51:f6:8f:7f:2e:41:70:23:c5:70:96:77:dd:
         a1:d3:43:fc:38:a5:f7:7b:04:b3:52:bf:30:3c:8e:7a:2b:67:
         78:ad:8f:7f:fe:b8:84:84:4b:45:72:63:82:9b:74:7b:33:9a:
         a5:f0:43:80:fd:fe:d8:71:9f:43:eb:be:51:0e:57:0d:91:cc:
         5c:5b:27:8e:7b:3c:f9:c2:a2:18:ea:7a:29:e9:38:e4:d5:44:
         0a:ea:50:6e:ee:3c:79:3a:e0:69:36:b4:e3:c5:ea:2b:30:c8:
         11:96:c7:6a:3f:c6:73:fc:0b:69:9d:79:b1:a7:74:58:eb:67:
         fd:75:8a:b9:1b:19:1b:cb:1e:98:d2:c8:d6:68:05:97:85:7f:
         25:01:0a:9f:37:40:6f:33:7f:b1:25:0a:5c:a1:d8:f2:e8:2b:
         f2:05:c3:02:07:23:2c:d5:b1:56:df:05:a9:2c:a7:19:a3:87:
         bc:2a:4c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:52 2024 by rpki-client on console-ams.rpki-client.org