Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/3136372e3234392e35332e302f32342d3234203d3e20323633373933.roa
File:                     3136372e3234392e35332e302f32342d3234203d3e20323633373933.roa (raw, json)
Hash identifier:          UIBuIINRjDa2LNDtBk0JnvG3XOi4tR1Z3qnebpMu5Rw=
Subject key identifier:   2F:CB:BC:2D:92:41:A6:36:C4:B1:4E:C4:11:F4:D5:12:C4:B8:BD:1B
Certificate issuer:       /CN=D7EE67424E7FC3136531741689B53CDA16769DD7
Certificate serial:       62675B5D8C5B59A423076173964BBD518F5A4737
Authority key identifier: D7:EE:67:42:4E:7F:C3:13:65:31:74:16:89:B5:3C:DA:16:76:9D:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/3136372e3234392e35332e302f32342d3234203d3e20323633373933.roa
Signing time:             Tue 05 Mar 2024 18:19:57 +0000
ROA not before:           Tue 05 Mar 2024 18:14:57 +0000
ROA not after:            Tue 04 Mar 2025 18:19:57 +0000
asID:                     263793
IP address blocks:        167.249.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 09:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:67:5b:5d:8c:5b:59:a4:23:07:61:73:96:4b:bd:51:8f:5a:47:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7EE67424E7FC3136531741689B53CDA16769DD7
        Validity
            Not Before: Mar  5 18:14:57 2024 GMT
            Not After : Mar  4 18:19:57 2025 GMT
        Subject: CN=2FCBBC2D9241A636C4B14EC411F4D512C4B8BD1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d0:41:19:e2:a7:08:9a:5b:70:ca:6a:68:53:
                    c8:37:86:13:87:39:18:16:76:46:84:dd:0a:ab:af:
                    b4:33:78:f2:d8:dd:c9:a2:7b:fc:03:13:d1:3c:2a:
                    52:7c:22:b1:23:92:5d:94:c0:52:f0:74:82:d5:2d:
                    05:e3:6c:e9:c5:06:73:e2:04:ca:3b:c9:8e:93:84:
                    b5:3e:d4:48:a3:15:c3:4f:13:7a:ba:85:f0:ef:5e:
                    a0:1e:96:97:66:a1:7e:10:a0:74:a3:69:ca:48:2c:
                    23:55:69:ed:f3:45:39:59:43:78:1a:28:a4:34:2c:
                    7d:e4:f0:da:21:47:d5:43:c3:96:aa:af:55:32:cd:
                    a7:49:2b:df:cc:31:4e:19:76:03:1f:73:f3:3a:d2:
                    50:02:aa:93:e6:9f:01:06:ba:1b:67:59:d0:ac:3d:
                    e2:af:d3:69:e7:a3:93:ca:34:bd:ff:09:ed:4b:eb:
                    06:bd:8f:59:1d:ca:ef:8f:ce:3f:e5:6d:dd:d5:0a:
                    1b:a9:7f:25:03:17:d4:9c:f2:e5:65:bc:97:b9:9f:
                    9c:e5:26:03:83:33:33:26:cd:cb:9b:59:e0:5e:e3:
                    d8:bc:a8:36:d7:5f:20:ff:ce:31:87:ac:35:c0:18:
                    99:cd:bc:eb:01:b0:d2:d4:3d:d8:7d:c4:1b:4d:38:
                    49:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CB:BC:2D:92:41:A6:36:C4:B1:4E:C4:11:F4:D5:12:C4:B8:BD:1B
            X509v3 Authority Key Identifier:
                keyid:D7:EE:67:42:4E:7F:C3:13:65:31:74:16:89:B5:3C:DA:16:76:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/3136372e3234392e35332e302f32342d3234203d3e20323633373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:65:72:97:40:ce:5f:e7:5a:c9:3d:ea:37:ee:1b:1a:e6:34:
         5f:ad:85:61:f6:76:2b:23:2a:ae:2f:eb:b6:55:71:7b:d3:e0:
         5f:fc:08:cf:bc:1e:b8:ba:80:ed:33:fc:00:2d:ad:24:9a:e9:
         5a:f9:2c:76:c3:63:2f:6d:a2:ee:33:62:ab:f4:2a:76:32:d9:
         1a:09:af:df:d3:e4:56:99:76:fd:e6:1a:fe:48:ae:fd:5b:64:
         74:42:b9:87:5e:cf:e1:38:8b:92:28:df:27:36:e3:c3:1f:2e:
         1d:c2:cc:67:7d:b7:95:33:9b:a2:52:5d:07:60:28:29:24:5e:
         b2:88:a7:c3:bb:47:1d:2f:c3:f1:92:fe:af:0e:f9:57:21:73:
         b0:18:02:0c:45:62:4c:c8:43:de:77:86:06:2a:67:e0:41:7d:
         4c:5f:d8:29:30:f8:99:8c:4d:35:39:bc:b4:b7:50:26:7f:f9:
         10:4f:09:d5:da:26:69:4e:eb:7c:e7:02:de:ef:55:c6:e6:18:
         cb:78:e1:f3:78:e3:61:69:a2:59:5d:0c:83:49:5e:65:45:8c:
         7f:ee:26:4a:42:5c:22:be:a6:75:f5:f4:04:bc:80:a7:61:63:
         b2:19:26:60:64:33:43:6d:3e:e7:29:7e:4a:74:f7:b4:e9:a9:
         97:ae:a9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 04:09:51 2024 by rpki-client on console-ams.rpki-client.org