Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS263181.roa
File:                     AS263181.roa (raw, json)
Hash identifier:          M+Ywp2+VLDGX1SYxTLcgeBiJpCY/oemIIcKdjdFzEYQ=
Subject key identifier:   1D:CF:BC:A4:44:75:76:54:21:52:D4:A6:94:61:4E:81:3F:05:8A:5A
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       7A5E29DC3FBB8C2F33CA3E193E18188DB44A98F1
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS263181.roa
Signing time:             Tue 04 Feb 2025 18:13:43 +0000
ROA not before:           Tue 04 Feb 2025 18:08:43 +0000
ROA not after:            Tue 03 Feb 2026 18:13:43 +0000
asID:                     263181
IP address blocks:        186.38.30.0/23 maxlen: 24
                          186.38.32.0/23 maxlen: 24
                          186.56.8.0/23 maxlen: 24
                          186.56.10.0/24 maxlen: 24
                          201.251.0.0/24 maxlen: 24
                          201.251.137.0/24 maxlen: 24
                          201.251.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:5e:29:dc:3f:bb:8c:2f:33:ca:3e:19:3e:18:18:8d:b4:4a:98:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Feb  4 18:08:43 2025 GMT
            Not After : Feb  3 18:13:43 2026 GMT
        Subject: CN=1DCFBCA4447576542152D4A694614E813F058A5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3b:29:df:88:58:b0:b4:99:40:54:ce:03:6d:
                    c2:f7:c2:a3:58:06:ec:ba:9e:50:4e:c5:54:fd:96:
                    e5:ea:5f:86:1c:58:9f:cb:7e:9b:bb:26:29:b0:35:
                    f6:79:10:89:d4:ec:61:7e:9f:9b:73:81:09:f7:97:
                    df:39:57:e5:39:ca:55:04:fd:24:3e:c2:86:4c:79:
                    26:33:fd:15:31:8c:d6:ce:68:b3:d5:71:67:61:6c:
                    b9:59:74:df:a3:30:69:c1:1f:da:2a:d0:dc:ec:26:
                    b7:a9:9d:fc:0e:a3:23:e0:cf:ca:25:6b:b4:35:92:
                    92:d8:bc:0d:90:1c:44:00:1c:a0:f3:61:85:ca:a9:
                    49:2f:d3:69:30:68:b7:82:48:86:e6:48:59:b6:35:
                    a8:5a:7c:4c:c1:13:d5:c4:ca:a9:0b:8d:60:1d:54:
                    b9:e0:56:bd:d6:94:12:d1:64:3c:e4:fa:aa:53:af:
                    f2:83:ee:f2:33:15:7c:23:ba:f7:1f:da:81:74:c7:
                    51:c1:de:23:a3:c8:c0:9c:e9:bf:5f:02:d0:48:45:
                    35:c6:8a:2b:fc:66:b6:05:08:12:73:a8:39:e5:3b:
                    8f:5e:0a:c6:56:3b:a6:6b:6b:1c:e1:e2:59:e0:69:
                    be:0b:55:ca:10:92:3d:e8:9c:54:d9:c1:30:0d:32:
                    15:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CF:BC:A4:44:75:76:54:21:52:D4:A6:94:61:4E:81:3F:05:8A:5A
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS263181.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.38.30.0-186.38.33.255
                  186.56.8.0-186.56.10.255
                  201.251.0.0/24
                  201.251.137.0-201.251.138.255

    Signature Algorithm: sha256WithRSAEncryption
         64:e5:1b:67:07:21:3d:b9:18:81:c5:fa:3c:d2:12:dd:af:37:
         1e:77:fb:67:45:fb:f9:53:57:ce:e1:b3:ee:10:fc:b1:50:24:
         e6:af:07:00:7e:14:01:21:29:a2:41:4e:26:b3:81:11:27:1a:
         73:55:9f:f4:92:56:8b:d1:f5:b7:b0:21:1c:14:cb:50:2f:b7:
         b0:74:1b:ef:05:fb:b8:6a:2a:15:cc:de:31:5f:24:18:b4:3d:
         ee:d4:cf:a2:93:8b:59:20:be:c3:b6:29:6a:0f:1b:30:3f:bf:
         7b:70:4b:7b:c2:47:3b:a1:fc:4a:e2:65:70:fd:93:77:09:53:
         fc:09:e8:d2:3f:31:1b:42:6e:c1:a8:d7:ec:db:a8:b9:56:1c:
         7f:25:22:86:c3:d6:c9:54:44:d0:59:69:71:8c:0a:dc:ed:39:
         da:4f:72:16:46:6d:1d:c4:45:e2:28:05:84:52:33:a2:8f:73:
         37:13:34:a5:fd:01:2f:58:b9:58:c8:af:d6:05:35:11:70:5f:
         6d:fd:40:18:df:8b:c3:9d:13:a8:32:82:58:c6:c9:fd:1b:b9:
         e6:89:c3:ff:18:51:e4:42:16:d3:70:31:c4:4e:9d:1f:a5:d3:
         1b:0a:15:70:e1:75:d1:eb:d8:2a:33:e8:64:c4:93:cb:90:9f:
         60:61:a3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:52 2025 by rpki-client