Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS263792.roa
File:                     AS263792.roa (raw, json)
Hash identifier:          eZa8vIHmJFLldM4HD9a5gDTmUHsdxQvzAMfRk6QvLwQ=
Subject key identifier:   BC:76:93:BD:04:A4:81:0E:4D:F6:68:D9:B7:77:7E:F4:61:6D:D2:41
Certificate issuer:       /CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
Certificate serial:       7FAEADB41F778D22D5C53563C30C482C0205D365
Authority key identifier: 72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS263792.roa
Signing time:             Tue 04 Feb 2025 18:07:26 +0000
ROA not before:           Tue 04 Feb 2025 18:02:26 +0000
ROA not after:            Tue 03 Feb 2026 18:07:26 +0000
asID:                     263792
IP address blocks:        200.7.201.0/24 maxlen: 24
                          200.7.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ae:ad:b4:1f:77:8d:22:d5:c5:35:63:c3:0c:48:2c:02:05:d3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
        Validity
            Not Before: Feb  4 18:02:26 2025 GMT
            Not After : Feb  3 18:07:26 2026 GMT
        Subject: CN=BC7693BD04A4810E4DF668D9B7777EF4616DD241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9f:ed:7b:d2:ff:51:75:a1:22:62:39:2f:fd:
                    b7:43:7d:a3:be:6d:33:56:13:14:ef:88:67:cd:02:
                    81:44:61:ca:c2:d1:5c:18:fb:94:88:f5:e3:54:36:
                    e3:b9:19:b0:7b:d8:22:35:1d:fd:58:ae:00:d3:95:
                    4c:06:bb:dc:81:36:1e:f6:a3:11:80:1e:2c:04:2a:
                    59:6b:b3:45:0d:d7:b1:35:82:9c:c9:c7:21:ae:d8:
                    2a:79:87:5a:47:65:1b:b2:95:14:d4:38:34:76:a3:
                    6b:2f:80:3d:c8:c0:bf:1d:32:fa:41:62:c7:4c:1d:
                    8a:2e:90:dc:77:1b:2c:49:6a:dc:6a:e0:1f:69:00:
                    de:f0:8f:a0:de:d4:e2:36:62:e1:73:0b:d5:56:fb:
                    24:04:e3:67:d9:1c:38:f3:81:3a:df:ad:34:59:63:
                    f9:af:6f:c2:16:dc:ce:1e:e0:45:27:72:36:13:81:
                    2c:3f:2c:e4:da:87:64:d0:43:d6:84:d4:74:b6:ec:
                    0a:2f:38:12:3a:6b:90:ec:70:13:50:fc:00:85:ab:
                    e6:86:d1:d0:d8:f4:c7:6e:ab:62:33:91:34:76:5e:
                    72:b1:a4:1b:33:90:e0:02:c8:fa:fd:d0:83:75:f5:
                    35:d8:a6:26:d8:79:14:ff:90:56:c9:94:0a:71:76:
                    f1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:76:93:BD:04:A4:81:0E:4D:F6:68:D9:B7:77:7E:F4:61:6D:D2:41
            X509v3 Authority Key Identifier:
                keyid:72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS263792.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.201.0-200.7.202.255

    Signature Algorithm: sha256WithRSAEncryption
         65:64:46:34:20:b5:04:71:86:12:03:ab:d1:cf:5d:52:5d:73:
         95:a1:b4:c9:55:9b:1f:ad:23:3b:31:92:47:5a:46:a6:a5:50:
         0f:84:61:b8:84:b9:fa:2f:7b:50:9f:fa:97:2a:26:1c:e9:60:
         f7:e8:10:f5:8d:13:61:fe:74:05:5b:41:22:89:d2:3f:4c:ca:
         35:84:4c:38:ba:56:6d:ce:fe:08:d0:85:f3:38:5c:1e:f8:1a:
         23:98:b3:ca:99:78:eb:78:e9:d9:0e:a8:9c:6e:18:b4:d9:fb:
         52:e1:74:43:24:71:92:57:95:cf:e6:00:29:ef:98:be:11:9e:
         ed:a0:00:b9:fd:b4:5c:30:a8:c9:74:1b:1f:03:f4:ff:5a:e8:
         3c:fa:f1:10:a8:80:80:40:5f:11:fe:a8:90:62:55:13:89:6b:
         06:e9:a3:68:8f:08:2a:ad:72:bb:ee:db:bb:61:8a:ae:7b:c2:
         6b:b0:5e:2c:89:eb:f1:cf:6f:df:fe:32:24:2e:3e:f5:9e:68:
         4e:a2:39:dd:c9:f3:70:fd:e7:35:1f:1d:1f:c5:d8:00:55:65:
         bd:bf:75:eb:69:8b:73:e3:c5:91:9a:7c:36:d7:fb:64:dc:3c:
         b1:1b:93:c4:32:5f:53:66:4d:a9:da:8c:7b:0c:7d:ac:27:19:
         41:10:61:bd
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIUf66ttB93jSLVxTVjwwxILAIF02UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI1RTI5OENDQTBCODQwREI3MjZGNjBFRUQxNDBDMzdG
REIyM0JENjAeFw0yNTAyMDQxODAyMjZaFw0yNjAyMDMxODA3MjZaMDMxMTAvBgNV
BAMTKEJDNzY5M0JEMDRBNDgxMEU0REY2NjhEOUI3Nzc3RUY0NjE2REQyNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxn+170v9RdaEiYjkv/bdDfaO+
bTNWExTviGfNAoFEYcrC0VwY+5SI9eNUNuO5GbB72CI1Hf1YrgDTlUwGu9yBNh72
oxGAHiwEKllrs0UN17E1gpzJxyGu2Cp5h1pHZRuylRTUODR2o2svgD3IwL8dMvpB
YsdMHYoukNx3GyxJatxq4B9pAN7wj6De1OI2YuFzC9VW+yQE42fZHDjzgTrfrTRZ
Y/mvb8IW3M4e4EUncjYTgSw/LOTah2TQQ9aE1HS27AovOBI6a5DscBNQ/ACFq+aG
0dDY9Mduq2IzkTR2XnKxpBszkOACyPr90IN19TXYpibYeRT/kFbJlApxdvEpAgMB
AAGjggKhMIICnTAdBgNVHQ4EFgQUvHaTvQSkgQ5N9mjZt3d+9GFt0kEwHwYDVR0j
BBgwFoAUcl4pjMoLhA23JvYO7RQMN/2yO9YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQjA3QTRDRjlDMDkzRDQ2QjE1RTZCMUIwOTk1NEZFOUM4
Mjc2MDA5MDc0RDAzNzcyRTQ1MjYxRDc2OTI3MUFDLzAvNzI1RTI5OENDQTBCODQw
REI3MjZGNjBFRUQxNDBDMzdGREIyM0JENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MjVFMjk4Q0NBMEI4NDBEQjcy
NkY2MEVFRDE0MEMzN0ZEQjIzQkQ2LmNlcjCBmAYIKwYBBQUHAQsEgYswgYgwgYUG
CCsGAQUFBzALhnlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy8xQjA3QTRDRjlDMDkzRDQ2QjE1RTZCMUIwOTk1NEZFOUM4Mjc2MDA5MDc0
RDAzNzcyRTQ1MjYxRDc2OTI3MUFDLzAvQVMyNjM3OTIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJwYIKwYBBQUHAQcBAf8EGDAWMBQEAgABMA4wDAMEAMgH
yQMEAMgHyjANBgkqhkiG9w0BAQsFAAOCAQEAZWRGNCC1BHGGEgOr0c9dUl1zlaG0
yVWbH60jOzGSR1pGpqVQD4RhuIS5+i97UJ/6lyomHOlg9+gQ9Y0TYf50BVtBIonS
P0zKNYRMOLpWbc7+CNCF8zhcHvgaI5izypl463jp2Q6onG4YtNn7UuF0QyRxkleV
z+YAKe+YvhGe7aAAuf20XDCoyXQbHwP0/1roPPrxEKiAgEBfEf6okGJVE4lrBumj
aI8IKq1yu+7bu2GKrnvCa7BeLInr8c9v3/4yJC4+9Z5oTqI53cnzcP3nNR8dH8XY
AFVlvb9162mLc+PFkZp8Ntf7ZNw8sRuTxDJfU2ZNqdqMewx9rCcZQRBhvQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:08 2025 by rpki-client