Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/AS266665.roa
File:                     AS266665.roa (raw, json)
Hash identifier:          TIiqp00EjVgH4mPeH2ZzVRoSE23+KA8CnR2ZLHHAlgw=
Subject key identifier:   45:B4:67:72:60:87:CE:AC:68:1A:DA:65:16:03:3C:63:71:27:40:4C
Certificate issuer:       /CN=097F785B43ED2B7D3FDFAC24B9123C5D18C208EB
Certificate serial:       06ABD8D09606EF210E3D7BA07B0AF199AD3F8172
Authority key identifier: 09:7F:78:5B:43:ED:2B:7D:3F:DF:AC:24:B9:12:3C:5D:18:C2:08:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/AS266665.roa
Signing time:             Tue 04 Feb 2025 18:44:50 +0000
ROA not before:           Tue 04 Feb 2025 18:39:50 +0000
ROA not after:            Tue 03 Feb 2026 18:44:50 +0000
asID:                     266665
IP address blocks:        190.171.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ab:d8:d0:96:06:ef:21:0e:3d:7b:a0:7b:0a:f1:99:ad:3f:81:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097F785B43ED2B7D3FDFAC24B9123C5D18C208EB
        Validity
            Not Before: Feb  4 18:39:50 2025 GMT
            Not After : Feb  3 18:44:50 2026 GMT
        Subject: CN=45B467726087CEAC681ADA6516033C637127404C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dc:92:c7:08:0e:51:8a:c4:5e:38:f8:da:98:
                    8b:f5:d2:23:c9:94:91:bb:b3:ee:a0:37:95:c8:46:
                    9b:6e:62:c8:dc:a9:1f:e7:79:b0:15:0c:c1:5a:92:
                    74:4f:15:1f:57:11:35:f8:8c:fe:42:fb:0c:d3:1e:
                    82:54:85:cd:e2:8b:df:08:5e:66:cc:51:ad:a0:ba:
                    03:32:cf:3e:8b:25:84:68:f6:18:c9:7f:ae:a4:33:
                    85:86:f4:4d:2b:82:48:32:1b:f4:53:96:f2:9f:c6:
                    bd:3d:7b:3e:77:b1:9b:53:93:c2:0f:f1:32:45:29:
                    ac:a9:a5:68:6b:fa:ae:dc:7c:bc:c6:5c:ab:48:cf:
                    9c:45:5a:99:42:61:5c:39:54:95:6f:d4:4b:f7:a5:
                    fc:ee:67:12:2b:f1:17:24:bb:46:b1:aa:15:f7:c0:
                    aa:56:2c:66:c0:49:e0:b8:84:db:e5:8a:75:7f:fe:
                    be:b0:be:ed:c3:f4:9e:6c:d9:0b:0c:2c:b6:de:79:
                    bd:59:06:cf:96:49:70:da:a5:40:4b:4c:a1:d8:de:
                    86:f4:6b:84:37:0b:ae:6e:d5:07:f6:b4:f7:37:04:
                    16:71:92:58:76:35:64:00:49:ef:e0:20:b0:37:79:
                    08:e4:79:c5:fc:12:8a:e3:8c:cb:78:f6:8a:ed:bf:
                    ab:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B4:67:72:60:87:CE:AC:68:1A:DA:65:16:03:3C:63:71:27:40:4C
            X509v3 Authority Key Identifier:
                keyid:09:7F:78:5B:43:ED:2B:7D:3F:DF:AC:24:B9:12:3C:5D:18:C2:08:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/AS266665.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:c7:83:76:34:b0:b2:43:d8:9f:ba:50:a5:36:91:bf:a3:a4:
         5b:39:0d:5a:cc:9c:fe:15:06:ac:e6:57:d5:a9:52:0b:d6:99:
         f5:a8:de:42:05:3a:0a:ad:d2:b8:63:8f:e1:6b:21:10:cf:e6:
         45:e7:c1:14:34:fe:59:d2:b6:e0:92:a3:05:a1:67:27:e2:e6:
         3e:ee:93:8b:15:22:24:9d:4c:35:24:a0:80:e8:5b:6a:d8:2a:
         37:bd:e5:e0:0b:e5:50:a2:28:6e:b1:16:b3:d9:39:ef:14:ef:
         fc:9c:02:90:13:7d:50:60:1c:b9:f2:c7:ca:4b:eb:ea:c4:c0:
         95:f5:8a:e4:1e:b3:a0:ca:13:40:2e:30:87:6a:60:67:05:e1:
         f6:06:e2:78:dc:c1:3f:70:e0:91:30:7b:0b:35:8d:de:e3:54:
         7e:1c:ed:f1:56:d4:1c:ab:00:f8:dc:f2:7f:8d:8b:1c:50:ba:
         ac:40:2c:b6:8d:49:18:9c:d7:69:c7:12:06:e4:bd:38:7c:59:
         d7:a0:71:c5:71:1c:c2:f5:b5:01:f7:29:b7:42:6c:3d:b3:ac:
         71:c2:f1:c0:1e:f6:e9:b1:bc:af:08:64:c9:36:2c:a4:10:fa:
         b0:46:19:03:ff:8a:73:07:c0:8c:39:06:f9:f2:fa:db:10:68:
         d7:62:b4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:48 2025 by rpki-client