Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS269955.roa
File:                     AS269955.roa (raw, json)
Hash identifier:          JWMr3do5Wr82R37YAHaL30GG/bBMBLyxocMd0NZToHs=
Subject key identifier:   69:46:78:24:25:61:43:90:4D:C8:54:AA:E8:D8:E3:AC:96:BC:5D:21
Certificate issuer:       /CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
Certificate serial:       541A315E2A29B5D6463ADAF50A8D97261FC8EE43
Authority key identifier: 72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS269955.roa
Signing time:             Tue 05 Mar 2024 18:00:26 +0000
ROA not before:           Tue 05 Mar 2024 17:55:26 +0000
ROA not after:            Tue 04 Mar 2025 18:00:26 +0000
asID:                     269955
IP address blocks:        200.7.210.176/28 maxlen: 30

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 03 May 2024 14:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:1a:31:5e:2a:29:b5:d6:46:3a:da:f5:0a:8d:97:26:1f:c8:ee:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
        Validity
            Not Before: Mar  5 17:55:26 2024 GMT
            Not After : Mar  4 18:00:26 2025 GMT
        Subject: CN=69467824256143904DC854AAE8D8E3AC96BC5D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:84:45:b6:d9:d1:a9:93:65:04:3b:bd:cf:e8:
                    5b:95:5f:ba:71:fe:aa:21:61:c5:bc:5c:27:fa:44:
                    e7:70:73:fa:41:a3:48:7a:52:b3:e7:28:3e:4e:34:
                    e6:c1:1d:78:f1:8c:71:05:78:16:d7:2e:e9:36:26:
                    a1:47:fd:87:13:8a:32:df:03:2f:1e:a3:1f:d8:db:
                    19:5f:75:a7:68:35:f3:cf:2d:9a:2b:5b:41:fd:fb:
                    ef:11:db:47:69:1a:91:a5:2e:38:eb:72:3c:c2:49:
                    a9:95:3a:fe:2f:dd:f5:b5:b5:cf:c4:33:d2:d7:d6:
                    c0:81:ed:24:d9:3e:40:93:0d:dc:b7:ff:35:de:59:
                    b8:09:74:18:db:31:4a:f4:2c:b5:13:1c:3e:1a:15:
                    d7:d9:7f:e9:6d:a1:74:86:9e:93:32:74:cf:82:e2:
                    9d:b7:73:cf:a0:db:86:78:53:5e:15:27:a1:49:4d:
                    eb:62:78:b9:6d:1f:25:43:be:2f:a7:0d:b4:51:bc:
                    72:80:7c:33:7b:13:50:65:5f:e1:7e:dc:b7:ad:2b:
                    87:18:70:fc:d7:50:8b:11:83:c0:fb:60:e6:6a:ac:
                    c1:3a:71:cc:c7:73:6a:1a:a3:56:d7:24:16:38:8f:
                    b2:93:c7:6c:49:24:2d:29:0c:a0:16:ed:02:be:06:
                    00:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:46:78:24:25:61:43:90:4D:C8:54:AA:E8:D8:E3:AC:96:BC:5D:21
            X509v3 Authority Key Identifier:
                keyid:72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS269955.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.210.176/28

    Signature Algorithm: sha256WithRSAEncryption
         64:03:a6:fb:24:4f:6e:b9:d4:5a:be:97:01:f5:8b:94:26:5f:
         34:16:c4:78:91:f6:5f:44:22:03:af:f7:2a:40:c2:86:87:28:
         da:ab:91:e7:7a:85:6a:cd:85:4e:2c:0a:ad:d3:89:22:d9:2d:
         56:11:7e:cd:6c:ce:a5:fb:5d:e8:47:44:ae:cb:ff:e1:77:a5:
         60:1f:b1:f6:dd:b3:03:43:ef:00:64:cb:86:17:5b:a2:f8:e8:
         4c:32:3c:14:48:c7:a0:98:b5:df:d6:eb:a6:ab:6a:07:4e:4f:
         3a:a7:97:75:da:4b:d9:c8:4d:c2:f5:d7:be:9c:b1:d6:42:0b:
         40:b5:4c:d9:5d:4a:ac:8e:65:4a:f5:ba:b5:06:aa:fe:d1:2c:
         7b:20:1d:75:6f:d2:9e:a5:b0:17:cc:33:d6:5e:ac:16:b1:61:
         2c:0d:04:d3:24:11:a6:16:a7:32:f9:e6:7b:0d:f8:37:d0:2d:
         10:6d:1b:e9:1d:76:6b:3a:01:f1:31:ac:b9:f1:e0:4c:0f:0c:
         5e:08:95:3d:ec:05:f2:a2:7f:91:85:c8:0a:de:58:bf:7a:25:
         30:d9:65:2a:6f:c4:9f:bc:fd:60:c1:bf:81:05:d6:3a:6c:f7:
         4b:2e:e7:0d:d0:ce:69:d2:b9:a3:a4:b2:8a:39:a6:88:3a:38:
         7b:ae:98:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 04:54:18 2024 by rpki-client on console-fra.rpki-client.org