Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS269805.roa
File:                     AS269805.roa (raw, json)
Hash identifier:          gzPK3UYSLgN//LuTuW3Ru77QEBtB8PVOoiVRJy3/958=
Subject key identifier:   45:FF:FE:74:A6:F1:68:40:73:6C:B3:CC:9B:FA:79:3D:FF:24:D3:66
Certificate issuer:       /CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
Certificate serial:       47564DF54829843AF8EE52D2E81ECE3F53262905
Authority key identifier: 72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS269805.roa
Signing time:             Tue 05 Mar 2024 18:00:26 +0000
ROA not before:           Tue 05 Mar 2024 17:55:26 +0000
ROA not after:            Tue 04 Mar 2025 18:00:26 +0000
asID:                     269805
IP address blocks:        181.188.246.0/28 maxlen: 30

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:56:4d:f5:48:29:84:3a:f8:ee:52:d2:e8:1e:ce:3f:53:26:29:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
        Validity
            Not Before: Mar  5 17:55:26 2024 GMT
            Not After : Mar  4 18:00:26 2025 GMT
        Subject: CN=45FFFE74A6F16840736CB3CC9BFA793DFF24D366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f7:42:5d:36:d4:f2:ed:8b:db:9d:a9:b9:ce:
                    2b:41:24:a9:81:23:11:56:66:0b:1e:50:17:9e:01:
                    89:46:38:bf:fe:30:d0:f2:21:04:07:b2:e6:90:59:
                    a2:fe:1c:10:76:9d:18:fb:db:bc:ef:27:8c:47:5a:
                    63:96:44:c8:bc:88:30:c9:45:f5:70:f3:d8:0d:82:
                    4d:39:d6:24:96:12:86:81:53:8e:46:ed:f6:bf:55:
                    b2:26:45:be:e5:04:09:1a:01:ee:ec:e9:e8:1a:94:
                    07:4d:f7:0f:62:d1:5d:7a:37:f8:7d:39:95:f8:8c:
                    82:f3:bd:8b:0a:5d:fe:fc:75:f3:68:7e:fc:a8:ab:
                    78:c9:6c:4e:cc:1e:d7:94:81:89:43:26:ae:bf:2d:
                    d5:7a:41:3a:1c:31:23:0e:d7:cb:cc:a1:b8:e5:a2:
                    78:cf:3d:1e:68:9c:1b:a4:17:93:69:1c:48:e1:eb:
                    61:8b:db:3a:08:eb:6b:1d:98:1d:31:a5:1f:03:45:
                    cb:8c:ec:47:0c:4e:60:26:af:a1:f8:12:55:0a:37:
                    27:7d:52:69:8c:2d:2a:bb:be:af:c3:d4:8a:ba:4e:
                    1a:e8:98:db:49:08:83:f2:91:30:09:2a:17:6c:90:
                    85:ad:71:ae:e8:d0:2d:51:cd:57:c6:fa:4a:bd:76:
                    db:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FF:FE:74:A6:F1:68:40:73:6C:B3:CC:9B:FA:79:3D:FF:24:D3:66
            X509v3 Authority Key Identifier:
                keyid:72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS269805.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.246.0/28

    Signature Algorithm: sha256WithRSAEncryption
         86:47:ec:b8:42:50:f7:92:3e:bd:68:67:79:be:e4:e3:66:cf:
         a8:61:00:9a:cc:29:66:9f:d1:e7:3f:a8:15:da:90:a1:2d:16:
         f6:46:da:43:d1:18:86:8a:02:23:f6:25:75:cd:08:d0:d4:13:
         ba:c2:56:dd:b7:36:85:0b:be:f6:99:5a:9a:91:db:d7:1d:16:
         d6:69:ee:59:b2:51:01:aa:bb:7c:1f:8a:ae:4e:f9:6a:60:10:
         b2:ce:44:41:06:29:03:81:78:64:8c:84:8c:96:f2:19:7d:f3:
         8a:60:7a:8a:52:55:da:3c:ed:2d:85:9d:03:b2:8f:65:12:8a:
         96:be:77:46:00:72:ab:36:e6:c1:3b:07:87:f6:e6:f5:74:24:
         65:1b:08:5a:33:a8:a3:2f:83:4d:03:96:70:34:35:0c:29:0e:
         e2:7c:59:16:53:e1:84:c7:7f:59:d9:3e:65:f3:1c:2a:14:2f:
         43:6d:33:b8:e8:fd:83:fd:7d:57:55:6e:3d:68:e9:ed:0b:16:
         75:60:bc:dd:3b:13:56:fb:c6:ae:72:2f:5a:a3:d6:cb:4b:d1:
         85:f7:38:6a:02:f3:49:5f:62:b7:28:72:d0:d8:9e:8f:cb:8c:
         00:d9:ae:06:b3:ac:53:98:96:f7:3d:87:4e:ff:75:ee:b0:3c:
         ae:21:b8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:27:46 2024 by rpki-client on console-fra.rpki-client.org