Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/AS266665.roa
File:                     AS266665.roa (raw, json)
Hash identifier:          T9AP0WcWfSy+2GbSPvd2ZgxcBNCLOFN6ppZbN7Sqg+I=
Subject key identifier:   CB:0F:5B:88:9E:91:25:92:50:BD:92:11:D6:27:A5:EF:38:05:0F:61
Certificate issuer:       /CN=097F785B43ED2B7D3FDFAC24B9123C5D18C208EB
Certificate serial:       05C79FA8D75A01ECC37EF404C678F03602FB1150
Authority key identifier: 09:7F:78:5B:43:ED:2B:7D:3F:DF:AC:24:B9:12:3C:5D:18:C2:08:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/AS266665.roa
Signing time:             Tue 05 Mar 2024 18:14:57 +0000
ROA not before:           Tue 05 Mar 2024 18:09:57 +0000
ROA not after:            Tue 04 Mar 2025 18:14:57 +0000
asID:                     266665
IP address blocks:        190.171.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 06:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c7:9f:a8:d7:5a:01:ec:c3:7e:f4:04:c6:78:f0:36:02:fb:11:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097F785B43ED2B7D3FDFAC24B9123C5D18C208EB
        Validity
            Not Before: Mar  5 18:09:57 2024 GMT
            Not After : Mar  4 18:14:57 2025 GMT
        Subject: CN=CB0F5B889E91259250BD9211D627A5EF38050F61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7d:a6:14:59:18:c4:55:21:17:2c:c5:35:12:
                    c3:5c:14:9b:3b:6c:cf:e0:e0:0f:ab:8f:ad:f6:cb:
                    ba:16:e3:3d:50:52:21:1b:70:63:91:41:9f:eb:c4:
                    d0:f8:40:a6:db:4c:09:49:9b:d2:11:f0:83:87:9c:
                    00:52:2f:90:77:80:7d:1e:23:60:68:67:ce:b3:b3:
                    e8:89:c8:4e:b6:0a:c0:d6:5c:04:f0:72:0d:2f:ab:
                    f8:6e:b8:57:22:8b:23:4d:94:6d:c9:e4:04:9a:d2:
                    9e:b7:66:1d:1a:98:a6:ac:02:72:af:b7:7a:6a:c8:
                    11:de:fc:e4:a5:6b:60:64:9c:a5:b9:29:c7:3b:0f:
                    4d:b8:c9:31:20:c3:2d:b9:d8:87:2f:cf:1e:d7:b0:
                    7d:a5:9b:49:47:eb:ae:38:9c:f7:38:7c:d0:72:13:
                    7a:40:7a:c5:24:0f:f4:e8:d7:47:3c:f3:9a:f0:9d:
                    e8:76:f8:e8:6d:ee:ef:a9:78:f6:cd:4b:0a:65:19:
                    41:ba:34:ba:cf:d7:a5:1b:79:56:de:cd:a0:9c:a2:
                    8c:10:5c:86:00:2a:e0:ea:4e:1d:f2:93:2f:a6:da:
                    57:d8:35:41:e0:8a:5b:b9:8c:09:81:98:c7:c3:bd:
                    b8:f3:35:b9:c9:19:15:3b:c8:b2:a5:3f:25:bb:b1:
                    7e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0F:5B:88:9E:91:25:92:50:BD:92:11:D6:27:A5:EF:38:05:0F:61
            X509v3 Authority Key Identifier:
                keyid:09:7F:78:5B:43:ED:2B:7D:3F:DF:AC:24:B9:12:3C:5D:18:C2:08:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097F785B43ED2B7D3FDFAC24B9123C5D18C208EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C51AF65A66F5A739893F3BA77F729CFC31576A6A2D503ADFEFA2E4BC2244A0D/0/AS266665.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:a3:4d:d7:d0:61:26:89:dc:6c:58:44:1d:c8:33:42:ec:09:
         21:1e:d9:a2:a7:82:dc:39:a4:2e:b5:7f:b8:16:82:76:06:c8:
         e4:f8:91:0a:6e:5a:6a:fb:4c:cd:f6:e0:7c:e5:a1:24:b6:d8:
         63:41:2a:e6:90:da:39:fc:85:43:68:b5:9d:bf:2d:ff:2a:6e:
         f7:3a:0d:a3:c2:2b:f8:46:fc:ea:9a:74:9f:71:d7:55:1c:55:
         b5:88:c9:0f:89:21:53:7d:a3:8d:8b:bc:7c:61:2e:2d:4b:ca:
         2a:46:b7:09:48:42:d7:a2:02:66:00:7e:c4:ff:ae:04:2f:29:
         d3:d1:73:af:94:f9:88:1e:46:2b:86:3f:b3:03:ee:b1:46:93:
         25:8b:df:a8:99:df:34:ab:27:eb:26:89:22:21:af:ed:f9:7f:
         37:28:a3:77:22:68:7e:05:17:21:90:66:79:0e:47:f8:62:d0:
         38:df:bd:c7:32:6f:57:52:be:34:b2:2b:19:f6:02:32:97:46:
         3f:8e:dd:77:b5:8c:83:09:61:8e:b3:c5:19:a1:7d:a2:86:72:
         41:85:77:4b:2d:5a:b1:86:55:c0:71:6d:a2:0c:e9:a0:6e:11:
         79:28:17:e4:24:b9:bb:f6:a4:96:04:4a:22:03:cc:d4:21:ff:
         53:b7:3f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 06:45:13 2024 by rpki-client on console-fra.rpki-client.org