Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS263199.roa
File:                     AS263199.roa (raw, json)
Hash identifier:          tBw9fVbsdIVXQ2rznY36hmSbyFd3LZGdW7M7SdowSm4=
Subject key identifier:   A5:38:B0:85:4C:83:55:C9:49:1E:CC:64:85:B8:C0:57:09:66:1D:3B
Certificate issuer:       /CN=6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2
Certificate serial:       1E92BCC5E780A461CBFB965BC4FD6484AF6632F9
Authority key identifier: 6E:CA:7C:B8:91:2A:DE:FB:C9:94:84:E0:53:EB:E8:52:A3:A0:E8:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS263199.roa
Signing time:             Tue 04 Feb 2025 20:03:04 +0000
ROA not before:           Tue 04 Feb 2025 19:58:04 +0000
ROA not after:            Tue 03 Feb 2026 20:03:04 +0000
asID:                     263199
IP address blocks:        190.146.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 12 Feb 2025 22:42:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:92:bc:c5:e7:80:a4:61:cb:fb:96:5b:c4:fd:64:84:af:66:32:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2
        Validity
            Not Before: Feb  4 19:58:04 2025 GMT
            Not After : Feb  3 20:03:04 2026 GMT
        Subject: CN=A538B0854C8355C9491ECC6485B8C05709661D3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f4:a6:d5:19:56:01:88:02:dc:cf:9e:f8:bf:
                    7d:a6:fd:bf:a7:cc:ac:7c:b4:d8:a5:9f:9c:69:2c:
                    ce:2f:e7:a6:3e:9e:4c:27:34:1d:a4:e0:3d:4e:54:
                    3c:b8:e3:2c:2b:4c:05:b9:bc:4b:4f:fe:4e:36:78:
                    70:19:46:69:62:05:e6:dc:b1:49:04:19:ab:c5:48:
                    eb:7a:50:cd:1b:24:59:8e:b3:d3:5c:f8:96:c2:44:
                    9e:6d:e4:f3:23:58:64:51:cd:01:81:84:6a:1a:15:
                    88:47:30:56:74:ad:e0:3a:06:7e:51:ef:b3:73:53:
                    94:78:a6:cd:ce:b8:50:3d:25:82:06:38:26:38:fa:
                    8e:7a:ac:d6:c9:a9:d4:52:0a:0d:13:0f:8b:b3:91:
                    2d:21:5f:d5:9e:20:bf:69:1d:83:31:ac:ea:57:2f:
                    22:0b:38:48:b9:6c:95:4d:a2:c2:70:73:e9:1d:5d:
                    b4:11:fa:0f:b9:12:d1:94:59:bb:3b:25:b2:4c:1d:
                    8d:fa:c4:bd:20:7f:a0:ec:4f:c8:26:41:b5:e1:a0:
                    62:19:ce:77:1e:eb:cf:b8:a7:e1:2d:c7:8c:64:67:
                    bd:98:9b:4e:ab:71:94:34:32:2c:2b:39:0f:35:e3:
                    14:a9:03:c9:44:49:0a:77:07:e4:56:8b:52:1a:68:
                    b9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:38:B0:85:4C:83:55:C9:49:1E:CC:64:85:B8:C0:57:09:66:1D:3B
            X509v3 Authority Key Identifier:
                keyid:6E:CA:7C:B8:91:2A:DE:FB:C9:94:84:E0:53:EB:E8:52:A3:A0:E8:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS263199.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.146.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:60:cf:57:c5:a0:9f:9a:93:39:20:f8:df:a7:81:0f:d5:cf:
         87:75:66:1c:be:8f:66:d6:94:58:ad:27:93:0a:ef:51:da:f0:
         b5:9a:14:f7:56:90:9d:9b:59:8d:c2:95:6d:3c:d6:a4:87:a5:
         98:c7:47:30:e6:e9:06:50:bd:99:d7:59:ce:a0:85:51:ba:7a:
         d7:5b:31:7f:33:8f:9e:08:8e:7b:d6:77:56:c5:48:78:ba:c6:
         ad:44:79:41:c8:d8:c9:78:74:c9:b0:d2:c0:62:a7:bd:f1:d2:
         f3:6b:fa:fa:b5:eb:d0:94:d9:60:f3:3c:ac:ac:45:b6:00:d2:
         4c:77:20:56:a9:3a:49:71:63:9b:f6:e6:c0:94:ea:3c:d1:6d:
         42:e6:97:b7:19:aa:dc:05:ab:6d:00:57:47:b5:24:8b:af:12:
         55:8b:78:88:9c:7a:65:25:1a:88:5c:1c:5e:88:6a:bf:0c:35:
         6e:9a:bb:64:03:86:85:48:04:f7:74:d1:0d:32:d6:cd:64:8c:
         e4:04:ae:fb:c3:2f:09:6c:22:ce:2d:65:db:e7:41:a4:94:99:
         5f:77:ec:12:cd:58:8b:88:1b:0d:b9:06:f2:62:d5:ec:c0:2d:
         43:9d:e8:0d:d5:fb:9e:4f:dc:0b:97:c6:fe:36:b5:c4:37:e9:
         e2:ff:e4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 10 04:07:59 2025 by rpki-client