Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS263221.roa
File:                     AS263221.roa (raw, json)
Hash identifier:          Y0hB6++VdQQvBxgS9wpcls6JZHZ+aLFSSzkaBaMxlqM=
Subject key identifier:   5C:AE:3E:E8:29:3B:70:4E:C7:70:42:AA:64:E4:0B:DB:47:49:A7:0D
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       643C84BBFB5897CA3D3A1238179C9C992FAEA8F4
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS263221.roa
Signing time:             Tue 05 Mar 2024 18:07:57 +0000
ROA not before:           Tue 05 Mar 2024 18:02:57 +0000
ROA not after:            Tue 04 Mar 2025 18:07:57 +0000
asID:                     263221
IP address blocks:        201.251.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3c:84:bb:fb:58:97:ca:3d:3a:12:38:17:9c:9c:99:2f:ae:a8:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Mar  5 18:02:57 2024 GMT
            Not After : Mar  4 18:07:57 2025 GMT
        Subject: CN=5CAE3EE8293B704EC77042AA64E40BDB4749A70D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ba:ed:5b:19:7d:50:b7:e5:93:86:fc:e3:4a:
                    d4:d6:7c:e2:00:d7:7b:29:c2:d8:40:7c:90:8c:90:
                    0b:12:e4:95:04:f0:d4:67:e0:3f:70:a0:fb:5e:ff:
                    4b:ad:6b:46:4f:e8:95:52:3b:e2:f2:57:d8:1b:49:
                    5a:21:79:3d:a0:9d:4b:cd:fe:99:5e:c1:aa:cc:f7:
                    70:f3:f7:21:1d:4c:eb:34:c8:49:0e:d9:d6:63:53:
                    88:de:cb:e7:bd:f1:f1:3c:17:8f:0c:b9:af:41:f7:
                    8b:5c:60:02:c7:75:20:54:f3:99:ab:c7:f0:2f:3c:
                    1b:80:8c:0e:df:60:8f:50:3b:27:24:5b:fd:20:0a:
                    ca:22:9f:c2:6e:00:f2:7e:84:03:40:9f:2e:f9:1d:
                    c9:05:fd:20:3d:ff:9f:2c:51:6e:f3:1f:f7:4a:b7:
                    45:30:96:f4:ee:d5:85:57:be:f9:91:d4:ff:95:84:
                    06:24:16:da:c7:c2:4d:a8:84:31:94:b6:2a:f5:64:
                    87:30:74:ae:1e:5e:bd:80:8d:c1:3d:6e:91:3d:6b:
                    f7:6e:55:b3:b7:b3:12:91:a7:af:28:74:3d:96:98:
                    f8:2a:d7:8b:1f:5b:68:e4:dd:a6:14:91:86:33:d0:
                    75:ba:bc:60:f5:f8:9b:d3:02:98:ac:47:35:14:88:
                    a4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AE:3E:E8:29:3B:70:4E:C7:70:42:AA:64:E4:0B:DB:47:49:A7:0D
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS263221.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.251.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:31:7c:fd:6e:e9:86:a3:9f:64:a3:26:aa:f4:a3:76:3a:20:
         5b:a9:53:9c:78:4b:1e:f0:46:0f:ae:37:63:49:80:cc:2f:98:
         f3:55:ca:ca:dd:14:46:42:09:0b:55:0f:68:a8:79:83:9b:01:
         fe:11:44:9c:56:a6:98:7d:b3:70:61:76:aa:96:3b:87:cb:3e:
         02:41:12:61:23:39:16:d3:4c:a0:ac:71:00:38:13:70:1c:7f:
         b0:6d:2e:15:25:c6:42:07:bf:84:c9:00:cc:a3:b4:db:87:fb:
         39:ea:1b:ee:24:d0:a3:2a:ac:2d:f2:8f:79:f0:1d:af:d8:19:
         6f:fe:14:7f:5a:fd:ba:45:ae:ce:2d:09:05:55:a2:d8:56:bc:
         66:fa:8e:65:ca:d1:e1:ef:d1:be:31:92:23:ae:97:cb:6a:15:
         11:88:48:5d:46:55:78:22:24:ff:99:9b:63:b9:e4:a4:f8:9f:
         17:dd:82:74:e3:f6:5d:b3:70:d0:5b:e4:37:47:4e:25:0b:5c:
         96:f2:b6:e3:19:72:4d:31:ea:c3:39:20:8e:68:02:a3:39:48:
         06:0c:4d:35:2a:cd:7d:8a:c9:a0:33:8f:f6:f3:bb:31:39:c2:
         37:10:20:11:ef:20:a0:00:65:78:69:f8:97:2a:38:40:67:2f:
         79:8c:05:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:23 2024 by rpki-client on console-ams.rpki-client.org