Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS262175.roa
File:                     AS262175.roa (raw, json)
Hash identifier:          heZPLpzhF8MrmOxAPei0sACZNNzmytsQbyFxTkqVVAY=
Subject key identifier:   EC:E8:E9:7C:FA:03:2A:D5:9B:50:79:99:79:87:B5:01:31:91:92:3B
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       1BA408A24C6ACD601C0AF467D3334071FF53C16A
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS262175.roa
Signing time:             Tue 04 Feb 2025 18:13:41 +0000
ROA not before:           Tue 04 Feb 2025 18:08:41 +0000
ROA not after:            Tue 03 Feb 2026 18:13:41 +0000
asID:                     262175
IP address blocks:        201.251.182.0/23 maxlen: 24
                          201.251.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a4:08:a2:4c:6a:cd:60:1c:0a:f4:67:d3:33:40:71:ff:53:c1:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Feb  4 18:08:41 2025 GMT
            Not After : Feb  3 18:13:41 2026 GMT
        Subject: CN=ECE8E97CFA032AD59B5079997987B5013191923B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a4:e9:37:c6:2c:5c:e2:f7:9a:62:d1:42:22:
                    b0:f1:16:ff:ff:22:0e:bb:86:ed:c9:00:9b:ec:a3:
                    37:b3:72:2e:a9:e8:64:44:11:04:b4:5c:01:9e:a6:
                    2a:7c:1b:61:80:9c:55:66:44:69:ba:26:8d:7a:96:
                    3f:df:e9:5b:bb:c3:d0:dc:b3:34:f7:f1:77:82:1e:
                    23:67:19:fa:78:23:3d:04:c1:7c:4b:3c:97:b9:bc:
                    50:3c:f4:9d:e2:4b:18:36:4a:a0:eb:1e:0a:81:ad:
                    82:d3:36:c2:71:a4:9c:68:c3:67:21:0e:a9:19:43:
                    ad:41:97:a1:f6:e9:87:b4:e5:15:e5:fb:bb:6d:81:
                    30:2c:fd:b8:a5:73:f0:aa:ff:56:ca:05:43:9d:28:
                    6a:34:c3:4c:18:03:5a:1e:04:9b:36:8a:5f:cc:3a:
                    d7:0e:b1:99:15:f7:33:eb:14:f6:b5:68:f1:83:d2:
                    1a:94:d3:4f:ab:19:a4:d1:3b:f9:b3:a8:62:73:d3:
                    04:9a:1d:d4:b0:5e:72:89:fb:82:16:75:88:88:d9:
                    85:ba:29:80:87:c9:22:3f:f1:23:3f:49:66:46:b6:
                    24:8b:a0:62:8f:c3:12:44:0b:22:79:1b:79:d5:5a:
                    6b:64:a2:c8:65:6d:18:51:89:6c:bc:67:f7:20:18:
                    59:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E8:E9:7C:FA:03:2A:D5:9B:50:79:99:79:87:B5:01:31:91:92:3B
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS262175.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.251.182.0-201.251.185.255

    Signature Algorithm: sha256WithRSAEncryption
         a2:1f:72:9f:9b:46:52:37:c3:26:57:49:d3:30:79:66:a2:83:
         ee:b8:0b:30:a8:8f:37:e4:d6:fb:74:e1:77:aa:fc:89:d6:74:
         05:d7:d7:bb:db:54:fe:e8:b5:9b:8e:3c:ee:f8:70:bc:3e:28:
         85:02:bb:45:20:b5:62:8a:4c:c9:c8:5c:a6:8b:b2:72:c8:97:
         d7:a6:e4:c3:6e:d4:81:15:7e:07:5e:64:7f:e7:e4:6a:16:7f:
         a0:43:75:47:29:f3:e6:a1:0a:ec:3e:de:60:c6:78:d2:a4:5e:
         7e:6f:60:4d:6c:7b:47:33:a8:76:dc:0d:2e:85:c9:04:1a:df:
         e1:cb:63:3e:79:5d:62:a6:1b:a4:7e:cd:ea:b0:19:5e:60:bf:
         95:e7:18:d3:3c:8c:26:13:d6:ce:54:d6:90:50:dd:e6:bb:a3:
         fc:24:8d:56:42:d5:9d:8f:8b:28:2a:bf:8f:f3:66:00:8e:bb:
         47:95:61:65:a4:ed:c2:32:44:f9:dd:9b:04:49:88:46:73:4c:
         03:1f:8a:77:2e:1c:a6:28:c3:82:a9:b0:e3:40:cf:c4:57:75:
         ba:b7:79:44:4f:5f:8f:e4:17:56:52:9a:0b:45:d7:76:c0:eb:
         10:ce:e7:f2:02:59:4c:7e:e5:df:45:99:d3:3e:05:4f:74:25:
         31:06:d4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:03 2025 by rpki-client