Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E670DBF78CB1815567813C95ADE7722E0751349FFD63D952E7629BAFB9C3FAC6/0/3136372e3235302e3232302e302f32322d3234203d3e203532343638.roa
File:                     3136372e3235302e3232302e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          7PkSaSEQmwlUKMhaP7Spa00c9PVsIaJhu7k9QW6XLLM=
Subject key identifier:   3F:F1:47:58:FB:B0:59:77:BA:E9:C7:A5:67:12:BE:CB:99:6A:4E:1C
Certificate issuer:       /CN=118F90F371D9C027A32B54664D90927AD358EA5B
Certificate serial:       47E1B9D7364E207BCCDBD93680FECCE1991DCC45
Authority key identifier: 11:8F:90:F3:71:D9:C0:27:A3:2B:54:66:4D:90:92:7A:D3:58:EA:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/118F90F371D9C027A32B54664D90927AD358EA5B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E670DBF78CB1815567813C95ADE7722E0751349FFD63D952E7629BAFB9C3FAC6/0/3136372e3235302e3232302e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:46:32 +0000
ROA not before:           Tue 05 Mar 2024 17:41:32 +0000
ROA not after:            Tue 04 Mar 2025 17:46:32 +0000
asID:                     52468
IP address blocks:        167.250.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E670DBF78CB1815567813C95ADE7722E0751349FFD63D952E7629BAFB9C3FAC6/0/118F90F371D9C027A32B54664D90927AD358EA5B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E670DBF78CB1815567813C95ADE7722E0751349FFD63D952E7629BAFB9C3FAC6/0/118F90F371D9C027A32B54664D90927AD358EA5B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/118F90F371D9C027A32B54664D90927AD358EA5B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e1:b9:d7:36:4e:20:7b:cc:db:d9:36:80:fe:cc:e1:99:1d:cc:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=118F90F371D9C027A32B54664D90927AD358EA5B
        Validity
            Not Before: Mar  5 17:41:32 2024 GMT
            Not After : Mar  4 17:46:32 2025 GMT
        Subject: CN=3FF14758FBB05977BAE9C7A56712BECB996A4E1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:08:ac:89:48:5d:c7:69:54:99:ae:3f:4b:13:
                    be:1d:d7:de:1d:23:e6:ba:bc:e1:c2:bf:a2:8e:d5:
                    40:cf:ba:3d:ce:9f:47:6d:30:a6:fc:38:77:c1:81:
                    9f:8b:46:cb:67:c5:cf:b0:37:1c:8e:d1:fb:7c:8e:
                    18:f2:63:39:33:ca:b3:0d:ab:ba:33:a5:8c:29:ad:
                    b9:0a:0d:e9:61:f7:6c:d4:26:40:0f:74:7f:05:2b:
                    d0:b8:ca:56:65:43:38:ee:dc:f0:2b:c6:7e:98:00:
                    ed:64:06:56:86:cc:7a:b9:ba:3c:75:5b:e7:00:96:
                    87:32:d6:42:bd:13:48:0f:21:cb:57:21:3c:ea:45:
                    b6:e9:c6:5a:fc:58:6b:e9:d5:20:1e:69:ef:bd:4a:
                    49:bf:d7:ef:c9:c7:3f:f5:eb:60:e0:0e:47:35:56:
                    94:ad:a9:39:fd:99:84:09:32:5e:8d:fd:63:11:59:
                    45:52:60:04:f2:df:a7:22:eb:58:3f:ea:97:b0:c8:
                    e1:e6:76:a1:54:8b:7d:a0:17:67:08:e9:33:34:0a:
                    1b:39:2c:0c:1e:17:d2:64:b3:e3:32:be:f7:05:db:
                    0b:61:dc:ff:84:2c:e5:cd:64:05:68:9e:4b:1e:62:
                    cb:2e:60:e4:b1:0b:3b:fb:cc:2d:4d:bc:76:79:f2:
                    7f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F1:47:58:FB:B0:59:77:BA:E9:C7:A5:67:12:BE:CB:99:6A:4E:1C
            X509v3 Authority Key Identifier:
                keyid:11:8F:90:F3:71:D9:C0:27:A3:2B:54:66:4D:90:92:7A:D3:58:EA:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E670DBF78CB1815567813C95ADE7722E0751349FFD63D952E7629BAFB9C3FAC6/0/118F90F371D9C027A32B54664D90927AD358EA5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/118F90F371D9C027A32B54664D90927AD358EA5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E670DBF78CB1815567813C95ADE7722E0751349FFD63D952E7629BAFB9C3FAC6/0/3136372e3235302e3232302e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:67:62:f7:4a:1e:f4:9a:23:dc:d3:be:97:bc:ce:42:39:4d:
         5a:e1:79:65:56:96:f9:7b:c7:2b:47:e2:81:a4:43:9c:91:30:
         dd:7c:12:45:45:10:5f:d0:34:b1:43:a6:7c:b9:69:3d:4e:2e:
         89:d3:d8:5c:c7:3c:14:32:6d:54:e4:df:fa:38:e6:49:33:9e:
         ab:dd:82:a3:bc:71:13:6b:27:d0:f6:eb:da:72:c2:6a:c8:c4:
         0f:de:d8:34:29:1e:22:fb:2b:f7:ba:90:98:3d:a0:ae:d0:09:
         c7:b6:6d:f9:6c:e1:92:26:67:bd:96:d6:1d:98:7f:af:93:95:
         a5:50:35:fd:37:37:71:66:c8:88:bd:c8:f5:2e:dd:6d:eb:1b:
         0f:cd:1e:06:a7:70:09:d6:42:e0:cc:db:5a:5d:b6:56:91:b1:
         4a:1f:17:e7:31:1c:4a:87:f7:75:ba:7d:6d:f6:19:44:f5:1c:
         5f:65:95:7c:a5:e0:d2:e5:e3:6c:30:ec:47:cd:8f:fc:b7:dc:
         3d:53:d5:62:a3:e1:07:e4:a2:c5:5b:b8:88:c7:60:f4:c2:5a:
         b4:38:6f:31:90:73:5b:b8:22:3f:d5:32:e6:b0:d4:aa:07:34:
         41:bd:a8:b5:e2:e8:e7:9e:d2:80:af:f2:95:90:83:fd:87:8f:
         f2:12:d5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 13:34:52 2024 by rpki-client on console-fra.rpki-client.org