Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/3136372e3234392e34342e302f32322d3234203d3e203532343236.roa
File:                     3136372e3234392e34342e302f32322d3234203d3e203532343236.roa (raw, json)
Hash identifier:          dZE9hSXxP7EiFl1QXqe+WOXK2CD7Uvovu+WUPtVnMXA=
Subject key identifier:   44:E7:03:51:D9:B0:BD:48:B0:0E:4F:33:3D:C9:B5:7A:AE:91:61:10
Certificate issuer:       /CN=2D2BA350074219D08DFBB94550147A89F29E05B9
Certificate serial:       2A3A28A9A6B3EBF044873EDC991788CDEC13ED24
Authority key identifier: 2D:2B:A3:50:07:42:19:D0:8D:FB:B9:45:50:14:7A:89:F2:9E:05:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D2BA350074219D08DFBB94550147A89F29E05B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/3136372e3234392e34342e302f32322d3234203d3e203532343236.roa
Signing time:             Thu 26 Jun 2025 19:23:49 +0000
ROA not before:           Thu 26 Jun 2025 19:18:49 +0000
ROA not after:            Thu 25 Jun 2026 19:23:49 +0000
asID:                     52426
IP address blocks:        167.249.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/2D2BA350074219D08DFBB94550147A89F29E05B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/2D2BA350074219D08DFBB94550147A89F29E05B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D2BA350074219D08DFBB94550147A89F29E05B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:3a:28:a9:a6:b3:eb:f0:44:87:3e:dc:99:17:88:cd:ec:13:ed:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D2BA350074219D08DFBB94550147A89F29E05B9
        Validity
            Not Before: Jun 26 19:18:49 2025 GMT
            Not After : Jun 25 19:23:49 2026 GMT
        Subject: CN=44E70351D9B0BD48B00E4F333DC9B57AAE916110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f2:b7:0c:8b:87:8e:92:db:fb:55:5d:6e:f6:
                    e2:d6:a9:73:5d:38:91:e6:f4:28:20:39:7e:4a:ac:
                    59:73:a2:5e:2e:9b:23:36:83:27:5e:45:f7:27:af:
                    38:fa:f3:48:5b:7d:da:86:93:57:1c:9b:30:26:42:
                    c0:ea:6f:7e:fa:69:69:34:32:96:21:8c:a5:be:0b:
                    48:46:67:c0:e8:cb:fe:48:ba:7a:4d:87:f2:4a:3d:
                    a7:28:f2:49:e1:1d:de:03:b8:a5:50:63:0f:b2:ff:
                    97:d2:b4:0f:67:22:08:18:d3:45:45:46:b5:3f:05:
                    2d:d5:40:cd:53:b4:09:d8:96:8e:ef:ef:39:2a:88:
                    1f:be:9b:dc:ad:34:2a:d1:21:1a:c3:6b:89:47:cd:
                    9f:b9:a4:f0:19:5a:47:2a:b6:5c:4a:c2:c2:f6:de:
                    68:1b:3a:83:a8:e0:37:32:c3:25:0d:4d:95:8e:68:
                    39:87:7a:6d:63:9f:ef:60:44:ab:a6:dd:92:d7:e7:
                    f8:15:ba:a8:26:80:8d:80:55:c0:f0:f7:13:6a:e3:
                    80:be:de:f8:06:be:41:5f:72:64:8b:1c:ca:6d:63:
                    80:05:92:34:39:0f:a0:07:76:92:a5:a4:b7:2c:96:
                    eb:7c:25:e5:20:7d:df:56:1c:78:c4:f3:8d:b3:4e:
                    09:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E7:03:51:D9:B0:BD:48:B0:0E:4F:33:3D:C9:B5:7A:AE:91:61:10
            X509v3 Authority Key Identifier:
                keyid:2D:2B:A3:50:07:42:19:D0:8D:FB:B9:45:50:14:7A:89:F2:9E:05:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/2D2BA350074219D08DFBB94550147A89F29E05B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D2BA350074219D08DFBB94550147A89F29E05B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE551D3EE7A1EAFDE63C3DAA1F48F400095687137EA2985A65FA2251EA1A3306/0/3136372e3234392e34342e302f32322d3234203d3e203532343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:ec:34:b8:54:c2:28:05:da:da:1f:de:58:64:8f:af:0a:c6:
         e7:d9:fc:7a:b7:4a:b6:9e:19:d8:67:34:e0:00:78:55:c1:36:
         6f:2e:30:df:a2:09:77:7a:c8:43:b6:e2:26:ed:98:d3:5a:cb:
         1d:d6:64:07:0e:d5:40:a0:d8:23:87:6f:cb:a8:6b:6b:67:b0:
         fd:db:10:db:bb:0b:d7:70:5e:1e:85:61:14:af:dd:1b:19:53:
         65:e8:ae:4f:07:55:d0:0d:5d:73:02:e1:ba:f1:13:a3:85:06:
         cb:96:ea:c9:5c:b8:d2:f5:25:d7:da:24:9f:87:ad:8f:8b:4b:
         b0:35:15:b3:23:2c:17:d1:94:04:17:aa:ed:78:da:e8:9f:8f:
         75:5b:ac:2a:0d:79:19:1d:5b:17:9e:37:e3:fb:bb:bb:58:24:
         35:6d:4d:df:e9:bd:ba:92:92:48:be:28:eb:d8:00:fe:3b:0f:
         6b:2d:0a:5f:16:00:77:5e:75:bb:33:6c:6c:0e:3c:a0:9f:58:
         66:56:fe:c3:f1:d5:37:07:fb:49:6c:98:f0:f8:4e:11:40:8e:
         1b:0d:8a:aa:8b:00:c0:10:8b:c6:25:70:a2:f1:f3:d1:fc:d1:
         cf:66:72:6c:58:5a:f4:4a:34:2b:f2:d6:00:15:43:1e:6f:ac:
         13:73:b1:95
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUKjooqaaz6/BEhz7cmReIzewT7SQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQyQkEzNTAwNzQyMTlEMDhERkJCOTQ1NTAxNDdBODlG
MjlFMDVCOTAeFw0yNTA2MjYxOTE4NDlaFw0yNjA2MjUxOTIzNDlaMDMxMTAvBgNV
BAMTKDQ0RTcwMzUxRDlCMEJENDhCMDBFNEYzMzNEQzlCNTdBQUU5MTYxMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC38rcMi4eOktv7VV1u9uLWqXNd
OJHm9CggOX5KrFlzol4umyM2gydeRfcnrzj680hbfdqGk1ccmzAmQsDqb376aWk0
MpYhjKW+C0hGZ8Doy/5IunpNh/JKPaco8knhHd4DuKVQYw+y/5fStA9nIggY00VF
RrU/BS3VQM1TtAnYlo7v7zkqiB++m9ytNCrRIRrDa4lHzZ+5pPAZWkcqtlxKwsL2
3mgbOoOo4DcywyUNTZWOaDmHem1jn+9gRKum3ZLX5/gVuqgmgI2AVcDw9xNq44C+
3vgGvkFfcmSLHMptY4AFkjQ5D6AHdpKlpLcslut8JeUgfd9WHHjE842zTgkVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUROcDUdmwvUiwDk8zPcm1eq6RYRAwHwYDVR0j
BBgwFoAULSujUAdCGdCN+7lFUBR6ifKeBbkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERTU1MUQzRUU3QTFFQUZERTYzQzNEQUExRjQ4RjQwMDA5
NTY4NzEzN0VBMjk4NUE2NUZBMjI1MUVBMUEzMzA2LzAvMkQyQkEzNTAwNzQyMTlE
MDhERkJCOTQ1NTAxNDdBODlGMjlFMDVCOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRDJCQTM1MDA3NDIxOUQwOERG
QkI5NDU1MDE0N0E4OUYyOUUwNUI5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREU1NTFEM0VFN0ExRUFGREU2M0MzREFBMUY0OEY0MDAwOTU2ODcxMzdF
QTI5ODVBNjVGQTIyNTFFQTFBMzMwNi8wLzMxMzYzNzJlMzIzNDM5MmUzNDM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM0MzIzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqf5LDAN
BgkqhkiG9w0BAQsFAAOCAQEAEew0uFTCKAXa2h/eWGSPrwrG59n8erdKtp4Z2Gc0
4AB4VcE2by4w36IJd3rIQ7biJu2Y01rLHdZkBw7VQKDYI4dvy6hra2ew/dsQ27sL
13BeHoVhFK/dGxlTZeiuTwdV0A1dcwLhuvETo4UGy5bqyVy40vUl19okn4etj4tL
sDUVsyMsF9GUBBeq7Xja6J+PdVusKg15GR1bF5434/u7u1gkNW1N3+m9upKSSL4o
69gA/jsPay0KXxYAd151uzNsbA48oJ9YZlb+w/HVNwf7SWyY8PhOEUCOGw2KqosA
wBCLxiVwovHz0fzRz2ZybFha9Eo0K/LWABVDHm+sE3OxlQ==
-----END CERTIFICATE-----
Generated at Fri Jul 4 09:37:16 2025 by rpki-client