Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS264668.roa
File:                     AS264668.roa (raw, json)
Hash identifier:          voQGFJjp8AHv+ijOYp8Go2NfW9TYgKObR3vJg71h390=
Subject key identifier:   E7:F4:C1:4A:3D:F0:EF:63:6D:1E:C7:92:6A:CC:37:9C:FC:51:B5:B7
Certificate issuer:       /CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
Certificate serial:       7888A1ECC40D9E9450F0F75CABAA7B4A813C59E6
Authority key identifier: 72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS264668.roa
Signing time:             Tue 05 Mar 2024 18:00:29 +0000
ROA not before:           Tue 05 Mar 2024 17:55:29 +0000
ROA not after:            Tue 04 Mar 2025 18:00:29 +0000
asID:                     264668
IP address blocks:        181.188.202.0/24 maxlen: 24
                          181.188.203.0/24 maxlen: 24
                          181.188.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:88:a1:ec:c4:0d:9e:94:50:f0:f7:5c:ab:aa:7b:4a:81:3c:59:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
        Validity
            Not Before: Mar  5 17:55:29 2024 GMT
            Not After : Mar  4 18:00:29 2025 GMT
        Subject: CN=E7F4C14A3DF0EF636D1EC7926ACC379CFC51B5B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:29:13:12:63:15:83:d2:c4:87:a0:20:2e:4a:
                    57:a5:7c:d4:27:d2:f6:06:c7:f4:dc:d6:fa:9c:e4:
                    0c:a2:25:70:db:76:df:af:1e:b6:57:a9:2d:cd:16:
                    fd:52:9d:d3:02:57:22:ea:ea:17:09:00:d4:b5:76:
                    3b:3e:20:a8:24:80:91:5c:28:34:35:ce:b3:2f:3a:
                    f2:a9:3d:11:7a:4b:47:54:c5:aa:43:65:70:bb:32:
                    d9:24:f6:7c:82:c2:4b:17:bf:0c:b3:53:85:46:ce:
                    62:d4:24:47:48:9c:28:9d:61:42:04:34:77:ea:8b:
                    d5:52:2a:18:5f:ad:51:19:b4:95:42:f5:95:d3:c8:
                    f7:4a:83:a5:f6:18:6c:78:6c:de:9f:bf:bd:99:81:
                    5c:56:00:21:00:30:3d:3e:ae:ad:46:67:d3:e3:3e:
                    7e:5a:f1:c0:03:2a:e3:63:bd:19:84:ac:a0:fe:7f:
                    e2:3f:1f:40:26:d9:27:22:73:eb:fc:11:80:16:5b:
                    d9:77:77:8e:0c:e6:96:71:71:01:24:38:39:20:aa:
                    5c:58:94:bb:5a:71:ca:44:14:ca:1f:23:4e:36:f8:
                    a0:5d:53:7a:da:ac:1b:61:0d:b7:90:4c:5d:5f:6a:
                    98:08:d4:32:92:55:dc:d0:55:33:49:24:1a:51:5e:
                    21:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F4:C1:4A:3D:F0:EF:63:6D:1E:C7:92:6A:CC:37:9C:FC:51:B5:B7
            X509v3 Authority Key Identifier:
                keyid:72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS264668.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.202.0/23
                  181.188.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:16:58:54:d7:60:87:c7:bf:90:eb:92:57:a1:e9:2f:f8:4e:
         f7:ec:6d:1e:43:ec:cc:b7:a5:4c:55:4e:e2:de:a5:e4:ae:63:
         8e:fa:60:95:5f:4b:d1:b7:b8:b3:07:e6:6d:00:23:3a:bc:11:
         45:a9:20:3b:4e:bc:dd:b8:34:10:6f:b3:0f:fa:56:2d:95:b3:
         c7:1f:af:4b:86:a5:f9:d5:ef:08:95:25:0f:03:20:4f:d6:9e:
         33:e1:81:eb:0a:b1:26:4f:5b:5e:e0:7f:bf:9b:35:5f:b9:60:
         84:94:c3:d2:17:eb:19:8f:8d:28:71:36:51:bb:29:3b:3a:ce:
         52:d7:bd:e6:b0:d9:92:9e:e8:9b:08:e9:57:48:67:16:3a:55:
         56:f3:c8:06:df:aa:81:bc:f7:9f:9c:98:1b:c6:60:b0:d6:52:
         38:9c:d3:51:82:aa:a4:c5:ad:ac:3f:44:08:2d:a1:10:63:91:
         7a:3f:b3:b4:48:5b:64:a7:b3:c0:26:d2:06:6b:f2:bd:b2:21:
         2d:96:1c:a7:2f:be:b1:ff:4e:31:a7:0d:bd:79:ef:1d:f6:2b:
         72:eb:b4:5a:05:fe:80:d5:07:1c:e1:c3:0b:b8:2d:a3:74:f7:
         24:4f:4d:06:e9:0d:ec:b0:52:cd:01:c1:30:77:dd:f3:71:16:
         36:f3:4a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:34 2024 by rpki-client on console-ams.rpki-client.org