Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS26611.roa
File:                     AS26611.roa (raw, json)
Hash identifier:          lNYMpAIbn6EdaINnEo7V/IIxfOexmB8/FpjyIy3gPMs=
Subject key identifier:   C2:FF:25:4B:B6:4D:2D:46:C3:89:61:5F:4C:62:AA:9D:F0:01:5F:96
Certificate issuer:       /CN=6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2
Certificate serial:       34DC1005421FBB52C9B70620E176EDB6FFB9E38E
Authority key identifier: 6E:CA:7C:B8:91:2A:DE:FB:C9:94:84:E0:53:EB:E8:52:A3:A0:E8:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS26611.roa
Signing time:             Tue 05 Mar 2024 18:16:08 +0000
ROA not before:           Tue 05 Mar 2024 18:11:08 +0000
ROA not after:            Tue 04 Mar 2025 18:16:08 +0000
asID:                     26611
IP address blocks:        190.144.128.0/18 maxlen: 24
                          190.144.196.0/24 maxlen: 24
                          2800:480:ff50::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:dc:10:05:42:1f:bb:52:c9:b7:06:20:e1:76:ed:b6:ff:b9:e3:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2
        Validity
            Not Before: Mar  5 18:11:08 2024 GMT
            Not After : Mar  4 18:16:08 2025 GMT
        Subject: CN=C2FF254BB64D2D46C389615F4C62AA9DF0015F96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:00:c1:0c:43:48:04:de:11:86:be:79:cf:bb:
                    0a:57:d6:b9:88:04:cb:7f:0a:4d:e7:1b:55:b3:3b:
                    b4:f2:f8:2d:36:42:ab:e9:5d:0c:75:fc:77:0c:97:
                    49:b6:2b:4e:d9:d8:fb:d0:22:f4:e6:e9:b5:67:f9:
                    ca:f3:3e:99:7b:03:44:30:93:d6:01:97:f5:7a:3c:
                    e0:29:a5:e9:5a:9c:5b:d4:02:a7:c9:d0:be:33:e8:
                    c4:9e:f2:14:be:6e:a3:33:ee:fd:53:a9:9a:bb:01:
                    10:42:5f:a3:12:16:0b:59:d4:af:2f:80:43:60:be:
                    6f:e0:78:21:4b:38:cb:35:64:95:79:70:7a:3b:ff:
                    4a:0b:2c:46:f1:78:b5:4c:cd:ce:9e:ca:d1:bc:3e:
                    52:43:8b:71:ec:e3:6a:09:07:d2:fe:c2:36:2b:70:
                    8b:bc:e0:91:cd:8e:2b:5f:70:db:9a:ac:fa:45:14:
                    c0:9a:3b:7c:2d:a7:5d:c7:fe:64:aa:cf:bf:81:43:
                    ad:b3:a2:4e:23:35:33:c0:a8:31:0d:fd:43:f5:7c:
                    39:5e:48:2c:dd:63:b5:73:61:87:ba:0b:a0:05:00:
                    b1:47:09:e9:5a:57:5b:fa:37:6b:77:39:62:cd:71:
                    f5:4f:10:a9:44:84:60:ea:4b:f2:da:41:ee:d3:29:
                    c9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FF:25:4B:B6:4D:2D:46:C3:89:61:5F:4C:62:AA:9D:F0:01:5F:96
            X509v3 Authority Key Identifier:
                keyid:6E:CA:7C:B8:91:2A:DE:FB:C9:94:84:E0:53:EB:E8:52:A3:A0:E8:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS26611.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.144.128.0/18
                  190.144.196.0/24
                IPv6:
                  2800:480:ff50::/48

    Signature Algorithm: sha256WithRSAEncryption
         e7:79:24:a1:7a:94:ab:9f:ef:b7:11:32:ef:97:d6:79:f6:aa:
         7f:c7:41:a2:5c:68:d7:e9:9a:f8:3b:ba:0c:95:00:e2:17:75:
         55:18:0b:52:d1:99:80:8c:8e:59:af:1b:4f:a3:25:44:1c:83:
         86:03:a0:df:0f:c0:ec:2f:ec:5e:22:0a:cc:ee:41:78:42:dc:
         09:34:c5:26:7b:ae:b0:23:d7:e0:db:aa:d2:1b:fc:24:40:12:
         19:49:1b:65:b5:e1:d0:0b:6c:1e:55:a7:76:d9:1c:9d:ad:a0:
         05:95:fc:f3:50:4f:11:40:e3:bb:b7:5a:4d:c8:7c:63:16:6b:
         23:39:80:a9:aa:06:d5:f8:76:20:3f:4c:a7:a8:35:16:85:0c:
         4a:5e:3f:b6:24:b9:a6:e6:b0:5f:e6:0f:b0:16:23:e9:5d:63:
         83:04:e3:9f:fd:9a:f7:05:13:bc:b5:2e:3f:c7:4c:71:2e:4f:
         1f:eb:5c:20:1b:be:81:38:5e:ee:58:64:3a:2d:06:10:15:70:
         70:81:d0:43:0b:0e:6e:cb:99:24:6d:87:46:54:38:c1:0e:a6:
         ea:e0:48:44:36:8a:a0:61:00:d9:91:f6:da:c2:01:fa:e6:9e:
         64:12:06:30:5d:55:c2:5f:db:7e:f3:9e:55:f7:d5:96:92:a9:
         f1:f0:eb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 13:34:52 2024 by rpki-client on console-fra.rpki-client.org