Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS26613.roa
File:                     AS26613.roa (raw, json)
Hash identifier:          ZpSdacA2LU5bsYBn/wZYUo3O43QXv/hdMx3KXlxonnc=
Subject key identifier:   75:87:2E:24:DA:E0:C1:F2:53:87:72:E5:C8:D8:6F:D5:A4:F5:4F:17
Certificate issuer:       /CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
Certificate serial:       035841C6F709A6B4F3D98916D9621175829F62F0
Authority key identifier: 72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS26613.roa
Signing time:             Tue 04 Feb 2025 18:07:29 +0000
ROA not before:           Tue 04 Feb 2025 18:02:29 +0000
ROA not after:            Tue 03 Feb 2026 18:07:29 +0000
asID:                     26613
IP address blocks:        181.188.212.0/24 maxlen: 24
                          200.7.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:58:41:c6:f7:09:a6:b4:f3:d9:89:16:d9:62:11:75:82:9f:62:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
        Validity
            Not Before: Feb  4 18:02:29 2025 GMT
            Not After : Feb  3 18:07:29 2026 GMT
        Subject: CN=75872E24DAE0C1F2538772E5C8D86FD5A4F54F17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ec:a1:2e:79:40:13:66:ed:d3:42:4e:22:ef:
                    3a:df:1e:a3:19:67:bb:2c:d3:39:4a:b7:4c:bb:c3:
                    49:d8:f5:23:da:7c:78:31:54:b8:eb:9c:86:0b:2d:
                    93:7d:c0:19:1a:e3:a3:2d:36:a8:08:f6:e9:c4:59:
                    b8:9e:d1:14:b7:6b:bc:44:13:17:3f:a3:5b:74:6e:
                    cc:19:9e:71:6c:6c:a1:8b:b6:02:af:b8:f6:ee:24:
                    6d:bd:56:42:ec:0f:ed:aa:b3:f1:43:12:21:a4:33:
                    13:fa:27:4c:0c:0a:c3:e1:75:02:5f:1c:91:48:93:
                    ab:97:f7:ae:f1:c3:48:c6:38:92:27:ee:1d:82:93:
                    b7:02:b9:48:d5:35:69:e8:77:a8:de:a4:15:e9:86:
                    20:10:9c:c0:f4:06:24:00:28:6a:67:59:e0:73:8a:
                    e5:bd:ad:7b:6b:03:39:a5:64:1b:62:da:09:9f:b2:
                    a8:f3:12:e3:5b:2b:5d:8a:23:cd:d4:3c:f6:c5:25:
                    9d:34:1c:73:bc:16:2a:e2:af:2b:68:96:fe:10:c1:
                    fb:9b:40:9b:ff:b0:05:06:2e:6e:2e:76:70:46:00:
                    0f:f8:2a:20:77:25:46:7e:48:4d:b1:17:38:d8:d3:
                    aa:43:04:b8:80:c6:35:65:15:be:71:3c:9d:0f:78:
                    0d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:87:2E:24:DA:E0:C1:F2:53:87:72:E5:C8:D8:6F:D5:A4:F5:4F:17
            X509v3 Authority Key Identifier:
                keyid:72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS26613.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.212.0/24
                  200.7.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:7d:6a:08:f1:94:3a:1b:91:0c:e0:56:b1:af:c6:8c:da:5c:
         6a:28:3f:9e:cb:91:87:15:94:7e:39:e8:cc:cd:f0:af:34:fe:
         1f:c9:9c:a6:16:3d:76:1c:8b:be:05:45:7b:b0:bf:92:2f:e9:
         48:40:eb:a3:9f:28:ed:a9:67:32:eb:6f:c0:43:10:76:1e:ac:
         d9:f8:25:aa:e0:06:ad:be:34:4f:2f:a1:4f:97:c6:bc:2c:70:
         58:68:06:76:92:fc:05:db:46:0a:bc:f2:8e:02:01:d7:0a:c1:
         7a:f0:be:43:58:9e:46:19:39:3e:54:47:82:0c:6c:48:9d:3b:
         90:dd:aa:b9:00:5a:a1:82:52:90:bd:94:ac:d9:f4:2d:b5:c0:
         5c:d6:28:c9:c2:a1:e8:41:57:b9:9d:e1:9c:2c:af:69:d4:24:
         25:f9:a9:a6:81:c1:af:95:07:44:a2:a0:bc:35:e2:2c:c5:04:
         c3:bb:73:a9:31:51:93:1e:88:a2:4d:8c:40:e0:de:b3:45:4e:
         6f:17:a7:5c:04:d0:02:06:8c:71:f5:dc:7f:59:65:06:ac:1c:
         c2:d2:ed:bb:f5:19:ae:22:20:b2:38:24:fd:f3:74:7a:e5:24:
         4c:ce:df:bd:e8:2c:8a:4a:94:ad:ea:77:43:6d:69:cd:a7:19:
         4a:1c:dd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:00 2025 by rpki-client