Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS263181.roa
File:                     AS263181.roa (raw, json)
Hash identifier:          Y2y5TtcpyrSm1/Ad9o9mFlYigVMUh6G8oCK//dfnSZI=
Subject key identifier:   05:E2:80:0E:74:D3:12:DF:E6:1A:43:14:AF:70:2C:4F:B6:DB:CC:5A
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       66E4E837019B1EBE91896A7554427FECE3FD4601
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS263181.roa
Signing time:             Tue 05 Mar 2024 18:07:59 +0000
ROA not before:           Tue 05 Mar 2024 18:02:59 +0000
ROA not after:            Tue 04 Mar 2025 18:07:59 +0000
asID:                     263181
IP address blocks:        186.38.30.0/23 maxlen: 24
                          186.38.32.0/23 maxlen: 24
                          186.56.8.0/23 maxlen: 24
                          186.56.10.0/24 maxlen: 24
                          201.251.0.0/24 maxlen: 24
                          201.251.137.0/24 maxlen: 24
                          201.251.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e4:e8:37:01:9b:1e:be:91:89:6a:75:54:42:7f:ec:e3:fd:46:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Mar  5 18:02:59 2024 GMT
            Not After : Mar  4 18:07:59 2025 GMT
        Subject: CN=05E2800E74D312DFE61A4314AF702C4FB6DBCC5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9e:16:75:a5:e9:89:3e:74:7c:9f:fd:a8:fe:
                    06:7e:b8:f5:2d:38:5c:60:d9:a6:af:0b:42:3c:ae:
                    6a:96:a8:80:22:77:7e:f8:cb:72:5b:7a:3b:37:31:
                    12:b8:fc:eb:e6:91:30:1f:e6:48:0c:88:ea:91:5e:
                    af:02:22:d2:ec:78:07:b9:a1:33:1e:ce:d9:44:ec:
                    e4:6e:44:b1:6f:c4:12:71:22:c1:47:1d:23:e2:37:
                    52:53:ed:9b:c0:9b:66:dc:69:5e:4c:63:bb:0e:6b:
                    7d:1d:05:6a:c6:42:09:c6:0e:76:7f:fb:01:dd:b7:
                    bc:ee:ad:d7:f5:28:b6:d9:c6:c8:e8:91:8e:51:22:
                    de:de:1a:18:7e:44:7a:21:cd:8f:92:9c:fe:fa:aa:
                    3d:aa:b8:11:7e:eb:a3:8e:2b:40:a6:d0:17:91:ef:
                    84:b6:d7:0f:f4:13:22:19:df:33:e7:07:4f:cc:c3:
                    97:56:59:47:49:1b:4e:0a:1a:fb:b2:ce:94:7e:c6:
                    c4:cc:1f:c7:2c:fd:34:23:8a:92:cf:24:ca:26:16:
                    0c:65:1a:35:66:a5:29:32:0d:b3:92:ce:d3:24:37:
                    2d:ce:c5:5d:52:47:5e:50:c8:db:c9:58:8e:31:6a:
                    d0:95:7c:13:5e:a2:26:39:43:8a:61:10:24:71:e6:
                    2a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E2:80:0E:74:D3:12:DF:E6:1A:43:14:AF:70:2C:4F:B6:DB:CC:5A
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS263181.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.38.30.0-186.38.33.255
                  186.56.8.0-186.56.10.255
                  201.251.0.0/24
                  201.251.137.0-201.251.138.255

    Signature Algorithm: sha256WithRSAEncryption
         af:17:49:03:c4:9f:45:ed:50:f0:92:13:c5:0b:57:2f:27:f9:
         dc:5c:15:98:ef:39:18:c3:a2:83:16:81:3b:a0:de:53:2c:f1:
         2e:5b:99:75:b1:8c:df:0d:6d:bd:7e:89:34:8e:b4:93:72:22:
         79:8a:ff:00:69:e6:30:41:57:11:11:f4:00:9e:9f:2b:f2:f9:
         f4:7a:2a:29:61:40:e5:2f:0e:ba:59:b1:46:80:15:73:82:9d:
         ec:8d:c1:2c:e4:cf:c9:08:40:b4:f8:c7:21:01:d9:29:37:de:
         c9:af:8c:be:cb:5e:93:4c:3e:e1:f8:f5:21:3d:ef:b4:6b:ca:
         4d:40:49:c8:00:98:3f:47:fd:ed:72:15:a4:d3:f0:11:9d:79:
         5b:57:78:a4:9f:cd:b1:b8:a3:9a:06:fa:2c:1c:4e:41:ab:b8:
         e3:65:a1:a2:8b:88:f4:9b:7a:77:fb:4b:ca:00:6b:b1:64:f7:
         f0:db:7a:76:4d:1d:f3:1e:97:60:81:d2:95:4c:14:6a:a9:cb:
         0f:79:e3:ed:2f:d5:22:2c:1a:3e:e4:35:c4:0b:71:a1:9b:c9:
         2d:82:09:d6:ac:7d:f8:ac:0d:1d:94:c6:4a:d1:d0:95:c9:7a:
         21:cd:1d:f4:d9:f6:85:36:4f:e6:9a:11:a3:7c:ff:d5:e2:db:
         73:45:12:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:23 2024 by rpki-client on console-ams.rpki-client.org