Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS269805.roa
File:                     AS269805.roa (raw, json)
Hash identifier:          Z5MMPAim0yxMsYrjQ4OuSH5SWi40hwI23II7vgvYROY=
Subject key identifier:   CE:B9:B9:43:5A:E2:8C:2B:E6:4C:A0:C9:68:D1:BB:7E:ED:1E:B8:A3
Certificate issuer:       /CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
Certificate serial:       1C05D13AC8A9BF6BA74750FEAC2A131B867794B6
Authority key identifier: 72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS269805.roa
Signing time:             Tue 04 Feb 2025 18:07:28 +0000
ROA not before:           Tue 04 Feb 2025 18:02:28 +0000
ROA not after:            Tue 03 Feb 2026 18:07:28 +0000
asID:                     269805
IP address blocks:        181.188.246.0/28 maxlen: 30
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 20:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:05:d1:3a:c8:a9:bf:6b:a7:47:50:fe:ac:2a:13:1b:86:77:94:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
        Validity
            Not Before: Feb  4 18:02:28 2025 GMT
            Not After : Feb  3 18:07:28 2026 GMT
        Subject: CN=CEB9B9435AE28C2BE64CA0C968D1BB7EED1EB8A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:60:a2:cb:e5:0d:95:b5:2b:35:e1:f9:9f:14:
                    c2:00:26:3c:dc:6a:38:7d:07:17:20:d0:ce:a1:1a:
                    c4:c0:8f:a8:7d:f5:cb:1e:6a:60:a7:56:cb:ac:66:
                    c4:3d:8b:e4:5e:24:4b:68:e5:df:14:2c:dc:14:0f:
                    22:25:47:37:d8:1d:1c:1d:be:2d:62:b0:a5:bb:8d:
                    20:c7:5f:7d:8b:28:95:86:19:31:17:8a:00:bd:1e:
                    81:3c:df:7a:e3:d5:02:e7:00:87:ec:dd:e3:8b:fa:
                    f2:25:bb:d5:05:f8:f0:81:58:6c:1a:67:4a:97:92:
                    85:1d:cb:b8:84:ae:f9:43:17:f9:56:4f:dd:e6:36:
                    6a:3a:a4:d0:5c:38:f8:6e:0e:4c:fe:78:d0:02:d5:
                    92:19:e7:6d:21:c1:86:dc:bc:39:96:b6:0a:c0:b8:
                    83:b5:9b:79:1a:85:2c:d1:fd:8b:1a:0f:2a:87:e5:
                    48:5b:f2:31:c7:84:45:cd:0c:e4:c5:be:34:c6:ba:
                    0a:ff:41:c3:21:70:b1:9a:ff:a2:9b:f4:0a:b5:32:
                    26:7c:cc:1b:8f:c2:44:43:ee:86:d9:b6:64:90:3a:
                    98:bd:95:e5:0c:2b:98:e6:cd:53:f7:2d:af:b9:63:
                    aa:1d:eb:16:7e:c4:48:0b:88:f4:11:7d:c3:b8:90:
                    5d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B9:B9:43:5A:E2:8C:2B:E6:4C:A0:C9:68:D1:BB:7E:ED:1E:B8:A3
            X509v3 Authority Key Identifier:
                keyid:72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS269805.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.246.0/28

    Signature Algorithm: sha256WithRSAEncryption
         ba:12:00:50:13:82:0f:90:b4:e2:7e:a2:83:f1:14:6f:df:c7:
         75:a8:8f:fb:95:c6:35:59:38:98:52:24:d8:e0:e7:38:22:22:
         f0:97:d9:4a:bd:f8:91:c5:8d:57:df:f3:6a:98:67:b1:0d:74:
         98:c0:4b:f0:dc:29:1d:8a:74:99:47:fe:59:00:2c:7a:6f:c6:
         40:c3:ec:21:43:8c:15:ac:50:8a:a8:31:a4:6b:65:d0:1a:e8:
         47:74:7f:ee:39:d4:55:d4:d3:40:a5:d6:f0:70:0d:f5:7f:2c:
         c0:f7:12:f6:94:67:0f:fd:b2:02:59:3f:c0:ad:7f:47:1a:53:
         45:8a:1a:4e:70:1a:22:15:a8:1a:1c:ee:c6:81:ef:9a:d4:c9:
         2f:56:74:a4:bd:e6:34:93:10:eb:24:43:80:35:cf:78:55:af:
         ce:a3:ea:40:ed:67:00:e3:38:07:59:9b:0a:59:f9:79:ed:7a:
         cf:0c:7c:18:7f:a1:70:82:b0:96:b8:28:5c:16:65:31:5b:7a:
         aa:c0:5d:2a:79:94:e0:99:57:ef:a1:2f:63:e7:5f:f3:78:df:
         12:f7:95:38:3e:b8:9f:4d:db:c6:52:c2:a2:57:89:12:11:41:
         fc:54:9d:f7:48:a1:12:0c:46:51:8b:77:54:9a:97:e4:02:24:
         3a:ca:b5:8d
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIUHAXROsipv2unR1D+rCoTG4Z3lLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI1RTI5OENDQTBCODQwREI3MjZGNjBFRUQxNDBDMzdG
REIyM0JENjAeFw0yNTAyMDQxODAyMjhaFw0yNjAyMDMxODA3MjhaMDMxMTAvBgNV
BAMTKENFQjlCOTQzNUFFMjhDMkJFNjRDQTBDOTY4RDFCQjdFRUQxRUI4QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPYKLL5Q2VtSs14fmfFMIAJjzc
ajh9Bxcg0M6hGsTAj6h99cseamCnVsusZsQ9i+ReJEto5d8ULNwUDyIlRzfYHRwd
vi1isKW7jSDHX32LKJWGGTEXigC9HoE833rj1QLnAIfs3eOL+vIlu9UF+PCBWGwa
Z0qXkoUdy7iErvlDF/lWT93mNmo6pNBcOPhuDkz+eNAC1ZIZ520hwYbcvDmWtgrA
uIO1m3kahSzR/YsaDyqH5Uhb8jHHhEXNDOTFvjTGugr/QcMhcLGa/6Kb9Aq1MiZ8
zBuPwkRD7obZtmSQOpi9leUMK5jmzVP3La+5Y6od6xZ+xEgLiPQRfcO4kF29AgMB
AAGjggKaMIICljAdBgNVHQ4EFgQUzrm5Q1rijCvmTKDJaNG7fu0euKMwHwYDVR0j
BBgwFoAUcl4pjMoLhA23JvYO7RQMN/2yO9YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQjA3QTRDRjlDMDkzRDQ2QjE1RTZCMUIwOTk1NEZFOUM4
Mjc2MDA5MDc0RDAzNzcyRTQ1MjYxRDc2OTI3MUFDLzAvNzI1RTI5OENDQTBCODQw
REI3MjZGNjBFRUQxNDBDMzdGREIyM0JENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MjVFMjk4Q0NBMEI4NDBEQjcy
NkY2MEVFRDE0MEMzN0ZEQjIzQkQ2LmNlcjCBmAYIKwYBBQUHAQsEgYswgYgwgYUG
CCsGAQUFBzALhnlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy8xQjA3QTRDRjlDMDkzRDQ2QjE1RTZCMUIwOTk1NEZFOUM4Mjc2MDA5MDc0
RDAzNzcyRTQ1MjYxRDc2OTI3MUFDLzAvQVMyNjk4MDUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQS1vPYA
MA0GCSqGSIb3DQEBCwUAA4IBAQC6EgBQE4IPkLTifqKD8RRv38d1qI/7lcY1WTiY
UiTY4Oc4IiLwl9lKvfiRxY1X3/NqmGexDXSYwEvw3CkdinSZR/5ZACx6b8ZAw+wh
Q4wVrFCKqDGka2XQGuhHdH/uOdRV1NNApdbwcA31fyzA9xL2lGcP/bICWT/ArX9H
GlNFihpOcBoiFagaHO7Gge+a1MkvVnSkveY0kxDrJEOANc94Va/Oo+pA7WcA4zgH
WZsKWfl57XrPDHwYf6FwgrCWuChcFmUxW3qqwF0qeZTgmVfvoS9j51/zeN8S95U4
PrifTdvGUsKiV4kSEUH8VJ33SKESDEZRi3dUmpfkAiQ6yrWN
-----END CERTIFICATE-----
Generated at Mon Apr 14 12:40:01 2025 by rpki-client