Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS263738.roa
File:                     AS263738.roa (raw, json)
Hash identifier:          HIFu2knXdqBR5tSnE4MKkle0e30cub2cEDCGObvMD2o=
Subject key identifier:   9C:D9:AD:88:BE:52:C6:9F:B1:6F:2F:8D:55:7A:8C:29:1E:DA:6B:9F
Certificate issuer:       /CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
Certificate serial:       06D2F020CF9DB95C9FAD6CACB774FF0327B4CC5C
Authority key identifier: 72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS263738.roa
Signing time:             Tue 05 Mar 2024 18:00:29 +0000
ROA not before:           Tue 05 Mar 2024 17:55:29 +0000
ROA not after:            Tue 04 Mar 2025 18:00:29 +0000
asID:                     263738
IP address blocks:        200.7.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d2:f0:20:cf:9d:b9:5c:9f:ad:6c:ac:b7:74:ff:03:27:b4:cc:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
        Validity
            Not Before: Mar  5 17:55:29 2024 GMT
            Not After : Mar  4 18:00:29 2025 GMT
        Subject: CN=9CD9AD88BE52C69FB16F2F8D557A8C291EDA6B9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:86:03:eb:38:c2:c2:63:d0:c5:f9:43:69:77:
                    8f:67:b5:6a:a4:d1:62:39:6b:fe:a6:cf:99:b1:5d:
                    52:71:72:5b:c5:59:8b:60:71:34:eb:2f:4f:8a:80:
                    2a:bb:f3:77:49:57:15:27:49:b4:7d:59:f7:b3:78:
                    e7:92:cd:7e:24:90:98:5c:15:ee:5a:9b:14:1b:98:
                    b4:48:66:74:15:a7:79:09:da:5a:b5:ea:ef:b7:4c:
                    61:fb:94:82:f1:11:61:d2:45:5a:ab:ad:23:9f:44:
                    f7:50:dd:bd:4d:96:a9:70:fd:36:8b:42:77:b6:95:
                    90:01:21:3e:08:6b:7e:ba:3f:f2:ee:a8:bd:5d:62:
                    88:58:e7:43:b4:af:7a:c7:03:23:6e:ad:58:74:00:
                    f7:e1:03:2f:7f:74:52:23:51:a1:a6:d3:cd:5b:7d:
                    1a:45:44:45:86:f1:35:1a:c9:fa:c9:cd:ad:2d:0f:
                    54:ff:38:00:04:50:cd:64:c7:3b:27:fb:1b:6a:3d:
                    bf:dc:4d:06:95:55:c5:b7:1e:5e:f2:a3:3f:37:9c:
                    0d:cd:5e:57:ec:29:d2:cf:97:be:0d:a9:d3:78:0f:
                    3f:27:ff:0e:3f:f6:8f:1d:f9:9a:23:69:66:5d:ab:
                    23:f2:b1:e3:a1:b3:be:10:26:0f:f6:89:35:b7:5e:
                    71:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D9:AD:88:BE:52:C6:9F:B1:6F:2F:8D:55:7A:8C:29:1E:DA:6B:9F
            X509v3 Authority Key Identifier:
                keyid:72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS263738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:ed:6e:5e:37:49:3e:c1:36:bf:9d:60:58:ce:c9:00:18:bf:
         59:0d:04:1c:30:63:9b:90:34:72:8d:f1:6c:51:7d:1e:49:b4:
         ac:09:8f:3d:da:9b:59:1d:99:b0:ba:2a:43:a7:b9:12:59:d1:
         2b:59:75:20:8c:64:23:21:97:74:0d:e6:00:62:7e:42:24:95:
         27:82:19:6e:d2:bc:76:9b:56:f7:ea:dd:16:c2:38:ca:85:6b:
         f7:36:de:56:86:30:ab:a5:18:9a:10:f9:ff:d2:c5:7e:7c:76:
         b9:eb:e8:45:95:7f:42:01:a6:c7:b0:0e:dd:29:da:50:f0:84:
         88:14:d7:e8:de:47:23:83:2c:4f:43:ce:49:d6:9e:76:43:14:
         c4:ca:d9:45:9c:3c:b5:8f:ee:86:47:02:fd:66:6d:ba:14:32:
         5e:ee:f6:66:02:53:78:05:2a:dd:fc:a9:87:d7:da:14:ee:3b:
         71:f7:1c:3a:6d:4c:b5:61:ed:48:f5:75:4a:5e:29:b2:f9:fe:
         76:d1:c7:82:d7:13:be:b2:e6:f8:d2:6b:c1:e1:03:a3:a5:c6:
         48:23:87:cb:b1:19:bb:6a:a4:2e:01:4c:95:43:90:92:2f:f4:
         c1:26:58:9d:97:5b:ad:7a:b4:e5:de:e7:09:55:b5:99:63:37:
         b4:cf:3b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:29 2024 by rpki-client on console-fra.rpki-client.org