Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS262916.roa
File:                     AS262916.roa (raw, json)
Hash identifier:          n4JaG4hznzivlMo9BiwWuxse1p+b+6Zvbp8Bf3ElvgQ=
Subject key identifier:   87:9B:2D:49:C3:DB:70:C0:26:93:10:15:C9:86:6D:9A:8D:41:EF:5A
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       0D5772B4B03F49FF42CCC51D8D7B7197D620D4
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS262916.roa
Signing time:             Tue 12 Nov 2024 22:10:00 +0000
ROA not before:           Tue 12 Nov 2024 22:05:00 +0000
ROA not after:            Tue 11 Nov 2025 22:10:00 +0000
asID:                     262916
IP address blocks:        200.52.172.0/24 maxlen: 24
                          200.52.194.0/24 maxlen: 24
                          200.52.200.0/23 maxlen: 24
                          200.52.203.0/24 maxlen: 24
                          200.52.206.0/24 maxlen: 24
                          200.56.130.0/23 maxlen: 24
                          200.56.134.0/24 maxlen: 24
                          200.66.39.0/24 maxlen: 24
                          200.77.45.0/24 maxlen: 24
                          200.77.46.0/24 maxlen: 24
                          200.77.50.0/24 maxlen: 24
                          200.77.121.0/24 maxlen: 24
                          200.92.129.0/24 maxlen: 24
                          200.92.152.0/24 maxlen: 24
                          200.92.199.0/24 maxlen: 24
                          200.92.201.0/24 maxlen: 24
                          200.92.202.0/23 maxlen: 24
                          200.92.204.0/23 maxlen: 23
                          200.92.208.0/23 maxlen: 23
                          200.92.210.0/24 maxlen: 24
                          200.92.216.0/24 maxlen: 24
                          201.132.2.0/23 maxlen: 24
                          201.132.4.0/24 maxlen: 24
                          201.132.7.0/24 maxlen: 24
                          201.132.11.0/24 maxlen: 24
                          201.132.18.0/23 maxlen: 24
                          201.132.20.0/23 maxlen: 24
                          201.132.22.0/24 maxlen: 24
                          201.132.24.0/23 maxlen: 24
                          201.132.26.0/24 maxlen: 24
                          201.132.27.0/24 maxlen: 24
                          201.132.28.0/23 maxlen: 24
                          201.132.32.0/24 maxlen: 24
                          201.132.33.0/24 maxlen: 24
                          201.132.35.0/24 maxlen: 24
                          201.132.36.0/24 maxlen: 24
                          201.132.37.0/24 maxlen: 24
                          201.132.42.0/24 maxlen: 24
                          201.132.80.0/22 maxlen: 24
                          201.132.84.0/24 maxlen: 24
                          201.132.104.0/24 maxlen: 24
                          201.132.110.0/24 maxlen: 24
                          201.132.119.0/24 maxlen: 24
                          201.132.155.0/24 maxlen: 24
                          201.132.160.0/24 maxlen: 24
                          201.132.162.0/24 maxlen: 24
                          201.132.203.0/24 maxlen: 24
                          201.164.45.0/24 maxlen: 24
                          201.164.47.0/24 maxlen: 24
                          201.164.61.0/24 maxlen: 24
                          201.164.62.0/24 maxlen: 24
                          201.164.152.0/24 maxlen: 24
                          201.164.155.0/24 maxlen: 24
                          201.164.176.0/23 maxlen: 24
                          201.164.180.0/22 maxlen: 24
                          201.165.55.0/24 maxlen: 24
                          201.165.86.0/24 maxlen: 24
                          201.165.222.0/24 maxlen: 24
                          201.165.252.0/24 maxlen: 24
                          201.165.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:57:72:b4:b0:3f:49:ff:42:cc:c5:1d:8d:7b:71:97:d6:20:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: Nov 12 22:05:00 2024 GMT
            Not After : Nov 11 22:10:00 2025 GMT
        Subject: CN=879B2D49C3DB70C026931015C9866D9A8D41EF5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d5:9e:5d:b5:ea:34:b2:02:e4:ac:84:1f:45:
                    84:a6:7a:23:23:a0:1d:cd:af:f8:a8:17:11:61:d9:
                    39:72:7d:f1:a3:c3:2c:b0:22:6d:3f:43:8e:5d:b1:
                    b8:e0:c2:b4:b2:f2:41:43:21:43:ae:ee:bd:7a:3a:
                    17:5f:3f:46:71:ff:e5:37:4e:91:c1:4d:5c:47:39:
                    cf:89:2c:6e:88:e6:0b:96:90:24:92:5e:75:91:1d:
                    9e:0c:c4:2f:cc:26:bd:8c:cc:99:7c:cf:0b:32:80:
                    38:0b:37:3c:74:ab:9a:ab:c9:ba:52:76:e0:65:63:
                    fb:99:c2:1b:52:88:73:4c:15:61:fd:6c:ff:de:84:
                    14:07:ae:f5:dd:de:61:9f:dd:9e:30:e2:9e:4c:40:
                    e0:fc:f5:1c:dd:17:f0:9a:b5:5a:71:78:80:2e:47:
                    33:fb:fe:27:cd:37:92:65:44:5e:47:b4:9b:fe:44:
                    5f:5e:81:f2:10:5e:ec:8b:14:83:a3:39:45:a6:40:
                    62:d6:f8:0f:cc:50:52:1f:79:24:46:aa:60:79:fc:
                    f5:06:9f:d5:d2:ff:bd:4a:af:ff:39:e8:44:a6:4d:
                    1a:7a:27:44:31:4e:12:9c:04:7e:c7:eb:77:af:49:
                    3c:62:72:f7:6a:53:50:e7:f6:e2:3c:18:ac:1f:ca:
                    50:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9B:2D:49:C3:DB:70:C0:26:93:10:15:C9:86:6D:9A:8D:41:EF:5A
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS262916.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.172.0/24
                  200.52.194.0/24
                  200.52.200.0/23
                  200.52.203.0/24
                  200.52.206.0/24
                  200.56.130.0/23
                  200.56.134.0/24
                  200.66.39.0/24
                  200.77.45.0-200.77.46.255
                  200.77.50.0/24
                  200.77.121.0/24
                  200.92.129.0/24
                  200.92.152.0/24
                  200.92.199.0/24
                  200.92.201.0-200.92.205.255
                  200.92.208.0-200.92.210.255
                  200.92.216.0/24
                  201.132.2.0-201.132.4.255
                  201.132.7.0/24
                  201.132.11.0/24
                  201.132.18.0-201.132.22.255
                  201.132.24.0-201.132.29.255
                  201.132.32.0/23
                  201.132.35.0-201.132.37.255
                  201.132.42.0/24
                  201.132.80.0-201.132.84.255
                  201.132.104.0/24
                  201.132.110.0/24
                  201.132.119.0/24
                  201.132.155.0/24
                  201.132.160.0/24
                  201.132.162.0/24
                  201.132.203.0/24
                  201.164.45.0/24
                  201.164.47.0/24
                  201.164.61.0-201.164.62.255
                  201.164.152.0/24
                  201.164.155.0/24
                  201.164.176.0/23
                  201.164.180.0/22
                  201.165.55.0/24
                  201.165.86.0/24
                  201.165.222.0/24
                  201.165.252.0/24
                  201.165.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:ad:02:db:cd:16:4b:c0:01:fa:e3:10:ef:ed:27:59:94:bc:
         81:67:b1:e6:68:13:77:b1:3b:f3:ff:8e:fe:b7:bb:f2:96:54:
         52:ab:71:c4:ea:43:70:88:95:45:51:07:c3:44:34:6d:2a:1b:
         d3:89:4c:dc:11:99:39:a1:54:1e:01:6f:5a:3e:df:c8:3a:64:
         3d:32:f4:72:dc:f8:16:ea:86:11:21:28:5d:cf:c6:0a:f5:c7:
         26:48:7e:95:c5:a8:ac:11:7d:80:df:a4:bc:05:20:2d:96:ad:
         e7:be:2a:6a:19:44:3e:a2:5b:82:62:03:7d:cd:b2:df:e1:d1:
         62:0f:2b:31:67:8e:80:0d:79:3c:1f:db:9f:c7:db:55:31:3b:
         61:91:6f:05:c2:d3:0a:f7:e6:75:ac:2a:a5:e8:5c:cd:a0:6d:
         d8:64:6d:54:40:7c:99:24:f0:af:30:9a:00:7f:ba:2b:81:bb:
         05:34:9e:3f:63:0e:60:0b:ef:dd:1a:98:89:7b:20:0b:9f:37:
         f9:a1:58:41:19:3a:b1:de:6a:62:08:b0:28:a3:5f:71:0e:5a:
         47:c9:5a:74:49:c8:fe:7d:11:44:56:38:00:0f:ec:ab:5a:84:
         e3:13:73:20:21:a0:84:b5:f9:1a:ce:86:3e:b4:c3:75:2e:01:
         e5:bc:35:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:03 2024 by rpki-client on console-fra.rpki-client.org