Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3136372e3235302e3233362e302f32342d3234203d3e20323732303236.roa
File:                     3136372e3235302e3233362e302f32342d3234203d3e20323732303236.roa (raw, json)
Hash identifier:          kw4DrPyj/eUDNCJteWyIUbCkEqipCk70l8iUDOfL378=
Subject key identifier:   10:8E:AC:68:A3:49:7D:E2:F0:25:CE:89:3D:F7:27:C5:A2:23:9E:B7
Certificate issuer:       /CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
Certificate serial:       54489FC5CCB6EDE79F892DB6A86C42AC8C59F724
Authority key identifier: 3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3136372e3235302e3233362e302f32342d3234203d3e20323732303236.roa
Signing time:             Sun 27 Apr 2025 04:16:14 +0000
ROA not before:           Sun 27 Apr 2025 04:11:14 +0000
ROA not after:            Sun 26 Apr 2026 04:16:14 +0000
asID:                     272026
IP address blocks:        167.250.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:48:9f:c5:cc:b6:ed:e7:9f:89:2d:b6:a8:6c:42:ac:8c:59:f7:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
        Validity
            Not Before: Apr 27 04:11:14 2025 GMT
            Not After : Apr 26 04:16:14 2026 GMT
        Subject: CN=108EAC68A3497DE2F025CE893DF727C5A2239EB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cd:45:1f:fd:f2:7c:ed:07:41:2b:e5:de:e0:
                    f5:56:58:93:35:3b:b6:6d:d6:e1:b0:57:c4:9e:64:
                    6f:25:8e:fe:ef:68:4e:59:5e:e5:5d:c8:ea:ea:2c:
                    6c:e1:5b:6c:dd:ed:a7:6d:0a:91:de:5e:1c:76:9e:
                    9b:1e:14:21:45:49:54:27:54:2d:09:6b:13:f2:b4:
                    f9:4d:8f:6f:0c:62:d8:1d:3e:c4:9e:d9:52:6b:db:
                    e3:70:b2:a0:5b:23:be:b5:c3:1b:85:86:07:2b:0a:
                    3d:38:ef:b5:eb:30:60:60:b4:1a:e1:a6:86:2e:d3:
                    3e:90:84:7b:57:5e:d5:cd:8e:c3:6d:1a:be:ae:e0:
                    44:69:95:e6:3c:ea:11:39:c3:0b:98:08:b5:eb:3c:
                    8b:52:ab:05:c0:70:b7:8f:df:2d:4c:98:5b:db:e0:
                    19:66:5c:06:8a:0b:17:34:85:c8:64:2b:97:69:41:
                    ca:a2:64:ff:83:f3:8a:1e:ce:61:1f:03:04:62:de:
                    70:db:5a:9c:64:e1:94:9e:e9:81:e1:88:09:11:58:
                    88:4c:02:98:09:3a:8a:5e:3b:0f:be:cd:bd:12:66:
                    0d:b9:dc:ca:8a:14:6f:18:23:50:65:a4:af:15:c6:
                    ff:56:69:b9:e9:82:d9:8d:b3:2c:80:1b:ac:44:13:
                    ff:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8E:AC:68:A3:49:7D:E2:F0:25:CE:89:3D:F7:27:C5:A2:23:9E:B7
            X509v3 Authority Key Identifier:
                keyid:3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3136372e3235302e3233362e302f32342d3234203d3e20323732303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:7f:83:31:75:33:15:3f:8a:5c:aa:24:de:7b:24:16:8b:35:
         bf:4d:81:0d:f3:63:13:ca:bb:83:78:99:78:ac:57:d9:c2:a2:
         45:0e:6d:74:2b:94:a9:ff:16:22:be:60:45:a4:86:6a:9e:23:
         e0:a0:ae:c1:ab:fa:05:f5:a0:11:e7:38:2d:8f:fe:31:8c:48:
         0b:bb:54:34:20:12:86:1c:be:a9:bf:6c:cc:05:fd:3b:d4:ae:
         80:52:72:a2:ff:49:01:21:84:92:fd:67:29:48:73:b8:8a:b4:
         30:f6:aa:3c:2c:8c:63:0b:24:9a:25:63:16:45:03:6f:04:c5:
         ec:64:a4:6e:ed:b2:e3:57:56:e5:59:f8:b3:50:7f:ac:0e:34:
         bc:20:31:b3:00:27:d0:d9:ec:ec:44:1e:94:5f:4a:73:6d:f8:
         ed:69:b4:a2:8d:31:67:37:b8:03:3c:ff:90:a3:d9:c8:ad:87:
         55:71:2a:0a:78:e4:e4:ae:ac:95:d2:d5:1c:52:55:ba:23:06:
         39:08:51:40:4f:12:b1:84:ab:bb:40:4f:fa:17:9f:f4:46:f4:
         28:64:b3:54:54:4a:81:49:58:29:24:4d:a6:da:43:fa:20:e2:
         67:19:50:18:37:98:e9:7d:d1:f8:98:c2:ab:d8:d8:64:2c:e1:
         35:33:e5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 18:52:43 2025 by rpki-client