Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3136372e3235302e3233362e302f32342d3234203d3e20323732303236.roa
File:                     3136372e3235302e3233362e302f32342d3234203d3e20323732303236.roa (raw, json)
Hash identifier:          dwhJs5LfWEtSqkJZaLWzzNRo41j8dskgGCeuC4lf1hg=
Subject key identifier:   61:2D:00:A7:DE:03:EB:E6:86:48:DC:0E:96:D8:ED:94:2C:14:40:19
Certificate issuer:       /CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
Certificate serial:       4401D872BD812895A0FFAC657D33BC2A36115068
Authority key identifier: 3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3136372e3235302e3233362e302f32342d3234203d3e20323732303236.roa
Signing time:             Sun 26 May 2024 03:55:02 +0000
ROA not before:           Sun 26 May 2024 03:50:02 +0000
ROA not after:            Sun 25 May 2025 03:55:02 +0000
asID:                     272026
IP address blocks:        167.250.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:01:d8:72:bd:81:28:95:a0:ff:ac:65:7d:33:bc:2a:36:11:50:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
        Validity
            Not Before: May 26 03:50:02 2024 GMT
            Not After : May 25 03:55:02 2025 GMT
        Subject: CN=612D00A7DE03EBE68648DC0E96D8ED942C144019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:44:f3:f4:c3:58:7b:35:cd:b4:70:87:c6:a5:
                    21:ff:b5:0b:a5:d7:e6:2a:95:5b:a8:cc:13:01:cd:
                    bd:8b:5f:51:93:fb:c1:94:6f:76:8d:c6:71:2f:bd:
                    ac:4f:e3:9d:68:8f:e7:ea:4d:2a:b1:7a:2b:24:7f:
                    a7:cb:19:52:9d:d4:22:82:ac:06:9b:70:68:66:7d:
                    52:7d:9f:d8:ea:bd:fc:94:37:05:93:1d:3f:cc:b2:
                    de:31:ef:a0:0a:7d:af:7c:9d:2c:22:57:7e:2b:18:
                    91:76:f0:1d:da:d7:d3:35:61:15:d0:2e:79:86:e2:
                    83:7a:fc:e1:16:28:25:dd:06:04:4c:43:f2:9e:e0:
                    01:bc:78:45:73:26:a9:4a:03:ed:41:3c:03:e9:67:
                    eb:02:be:a3:f2:40:c1:17:b1:bc:c6:47:94:97:79:
                    77:57:9e:4b:c6:5b:90:a3:e5:cc:9d:dd:f1:dc:50:
                    73:04:1d:93:27:a8:1a:cc:68:b0:df:03:f1:d3:37:
                    56:94:93:2e:a2:82:ce:db:e8:4f:21:25:9d:0d:0a:
                    b7:ef:a7:6f:18:56:80:9e:40:9c:9b:92:57:eb:b6:
                    48:54:ab:79:95:7c:85:2c:ec:20:7c:6a:0f:fe:70:
                    45:2a:99:0c:f8:6b:fe:c6:59:e3:9c:d5:1b:ac:99:
                    a1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2D:00:A7:DE:03:EB:E6:86:48:DC:0E:96:D8:ED:94:2C:14:40:19
            X509v3 Authority Key Identifier:
                keyid:3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3136372e3235302e3233362e302f32342d3234203d3e20323732303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:3a:c9:76:80:00:7c:6a:4f:51:aa:d1:b5:c6:87:20:e4:ce:
         a5:3c:a7:89:cc:32:88:95:25:93:81:2d:2f:14:69:10:5a:3e:
         66:9c:e2:19:92:6a:cd:a1:96:45:5b:fd:5e:9a:2d:ea:4a:b4:
         d3:7c:b9:d5:0c:9d:2e:d5:70:da:eb:00:8f:76:27:6a:f5:74:
         4e:99:7a:fe:b0:57:d0:2f:9c:e0:b0:97:bd:16:d7:ba:82:5d:
         36:ae:37:19:49:8b:6a:5e:92:5c:bc:cc:5f:10:66:7c:68:2d:
         ca:9d:26:3f:8c:98:58:4f:eb:a7:60:fb:b8:26:40:21:bb:c9:
         9b:e0:a8:cc:53:3c:c4:e9:7c:bf:e2:5d:0e:ca:3e:5c:95:ec:
         fe:10:25:7f:03:44:67:40:03:2c:11:c3:9f:65:8b:1b:01:fd:
         4f:8a:87:97:03:52:15:49:83:dd:1c:98:91:54:bd:3f:3b:47:
         94:e5:51:b2:05:65:60:8f:4e:1c:17:9c:e1:cf:05:ec:2c:6f:
         08:59:fc:5e:a0:08:f5:aa:9e:15:ff:10:30:5c:89:27:cd:6a:
         44:54:c4:87:a7:35:02:1a:3c:55:2e:51:06:50:c6:8c:c6:59:
         13:a3:91:1b:71:08:6a:2d:a3:13:f8:a7:18:b6:d1:d0:63:0f:
         7d:44:0c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:25 2024 by rpki-client on console-ams.rpki-client.org