Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS262175.roa
File:                     AS262175.roa (raw, json)
Hash identifier:          KKE2EMcLl6St11Esngb1pS63h7ruw1rFadWt++/piHg=
Subject key identifier:   6A:15:5D:9E:D0:09:02:57:D4:C8:F4:6A:67:7E:F0:12:30:D0:6F:40
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       20E3962C185D60EFD9949F2308CAE95E96EB136D
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS262175.roa
Signing time:             Tue 05 Mar 2024 18:07:51 +0000
ROA not before:           Tue 05 Mar 2024 18:02:51 +0000
ROA not after:            Tue 04 Mar 2025 18:07:51 +0000
asID:                     262175
IP address blocks:        201.251.182.0/23 maxlen: 24
                          201.251.184.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e3:96:2c:18:5d:60:ef:d9:94:9f:23:08:ca:e9:5e:96:eb:13:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Mar  5 18:02:51 2024 GMT
            Not After : Mar  4 18:07:51 2025 GMT
        Subject: CN=6A155D9ED0090257D4C8F46A677EF01230D06F40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ed:d1:f8:74:b5:5b:09:4b:02:f5:32:d7:6f:
                    e8:cb:25:b0:79:c4:7f:c4:44:ea:de:0f:cc:79:26:
                    b4:f6:b5:4a:15:15:71:05:b6:6a:b1:f6:da:e5:3c:
                    6d:0f:19:07:0f:6d:03:48:51:22:23:62:6b:c7:28:
                    0e:4c:38:8c:27:c1:01:36:0c:60:a3:c5:26:70:e2:
                    47:5a:c0:4b:2e:d1:d5:5f:53:9e:d2:7c:fb:12:2f:
                    bd:92:21:ad:53:0b:34:61:ca:dd:cf:60:73:bc:41:
                    3e:ca:54:d5:f8:6b:66:9b:ce:9a:1d:82:59:4a:91:
                    41:8f:0a:55:00:77:fd:13:96:de:f9:e1:25:48:a9:
                    d8:ac:90:20:07:04:70:5b:27:f0:9a:44:ea:78:f5:
                    17:40:2e:dd:62:f1:79:83:56:bf:9f:99:f9:9d:f3:
                    1e:6a:bc:74:dc:d2:b9:0f:b6:ba:a0:b7:83:3e:0f:
                    c3:f6:6e:1f:1d:e5:2a:0a:d3:ce:80:10:fb:54:04:
                    b2:8b:ad:fc:13:18:93:48:d5:cc:4a:fb:70:43:c3:
                    63:eb:83:52:76:46:cc:f2:ac:15:19:60:6b:57:af:
                    89:1f:3e:e0:fc:2f:29:1b:16:fb:be:0f:c1:2a:3e:
                    d3:c2:af:e7:07:fe:dc:db:81:24:e9:0b:a4:f9:3d:
                    46:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:15:5D:9E:D0:09:02:57:D4:C8:F4:6A:67:7E:F0:12:30:D0:6F:40
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS262175.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.251.182.0-201.251.185.255

    Signature Algorithm: sha256WithRSAEncryption
         ac:63:a4:de:d2:97:90:3d:02:7d:a2:d6:27:4b:be:36:ec:73:
         1f:be:e6:f6:9d:fb:23:38:63:de:6a:77:e1:1e:e4:e2:8f:db:
         26:ca:34:fa:b5:73:bc:f4:4e:56:d1:d9:80:75:41:4d:b6:c3:
         57:39:e4:85:de:5d:10:f6:f8:e6:56:94:77:4f:fa:5d:b1:2a:
         c9:5f:22:c8:b0:80:05:52:34:06:0e:29:98:0b:18:d4:67:99:
         28:78:59:96:bf:7c:ec:a3:83:f7:c7:dd:dc:79:e8:f1:71:0c:
         c2:15:f2:60:b9:d3:99:e4:4f:30:8e:8c:e5:f1:b3:42:53:b9:
         8e:1b:b1:21:55:96:43:64:95:71:e1:ac:b2:66:d4:28:c5:d0:
         18:a9:57:44:bb:3c:02:cc:54:d1:d6:3e:dd:2a:b1:7b:b3:ca:
         34:8c:23:ff:93:4e:8e:94:f6:b1:41:a3:b1:04:04:8b:b7:d8:
         69:5a:c9:0c:7b:9e:ab:2e:93:da:e3:ac:60:ca:68:6e:13:1f:
         ae:99:f3:9c:4b:4e:82:56:96:ee:d1:49:3f:72:39:db:49:59:
         be:8c:79:bf:c3:71:0c:63:a2:3c:de:b8:41:96:84:12:86:65:
         7a:b6:d1:34:19:9f:c3:04:cb:73:31:15:99:53:ab:45:4f:7f:
         cf:74:27:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:22 2024 by rpki-client on console-fra.rpki-client.org