Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS263742.roa
File:                     AS263742.roa (raw, json)
Hash identifier:          7tvouLWZ7jQ9c7u+tIzl/24+8H4xEPELQyDCcjYfrFs=
Subject key identifier:   D7:66:A6:FE:83:07:A3:4A:D9:C6:33:44:E3:BD:64:0A:49:92:4A:6A
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       1AE41ACDA4448F3811CDBCE11776EE3AF6316FA8
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS263742.roa
Signing time:             Tue 05 Mar 2024 18:07:55 +0000
ROA not before:           Tue 05 Mar 2024 18:02:55 +0000
ROA not after:            Tue 04 Mar 2025 18:07:55 +0000
asID:                     263742
IP address blocks:        201.251.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e4:1a:cd:a4:44:8f:38:11:cd:bc:e1:17:76:ee:3a:f6:31:6f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Mar  5 18:02:55 2024 GMT
            Not After : Mar  4 18:07:55 2025 GMT
        Subject: CN=D766A6FE8307A34AD9C63344E3BD640A49924A6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:36:9e:8a:bf:90:05:0b:06:f0:f8:e3:3e:fc:
                    e7:7b:fa:b6:8e:5e:b8:64:1c:fc:90:2d:a2:62:34:
                    c7:d5:4d:99:dd:00:78:92:09:74:8d:39:76:ca:6b:
                    f2:54:3b:4d:5e:68:c9:a2:70:ed:ef:79:38:e9:d3:
                    30:49:31:ed:5f:58:1b:f9:34:1c:ef:7b:0d:2a:34:
                    ab:3a:be:a7:9f:a1:d5:13:97:87:c4:93:e0:02:fe:
                    66:bd:77:b1:a2:83:bf:56:6c:0f:f9:65:67:23:d6:
                    ad:12:cf:78:ad:8c:f7:c3:52:12:f5:f8:b2:2a:0f:
                    fb:46:5a:20:4c:c9:fa:54:b1:04:5a:ae:46:a1:73:
                    a5:6b:e2:4d:a4:12:34:7e:ed:81:4c:5c:55:1a:c5:
                    86:ee:0b:f4:c8:a0:d8:05:cc:65:9f:07:ec:c9:7e:
                    8b:c0:90:4d:09:fc:78:45:28:29:a4:19:e0:e4:86:
                    fa:cb:9f:50:d9:f3:d8:9e:68:cd:12:1c:37:1d:5f:
                    0b:8c:ed:73:42:ba:6b:65:44:49:52:94:ee:33:09:
                    db:9b:c4:51:a1:87:aa:19:59:87:47:13:d8:f6:e6:
                    e7:42:ed:bc:01:4f:3f:67:8d:d9:95:59:a3:61:bf:
                    42:ed:c7:26:3d:60:8f:19:a5:05:ad:3d:fb:78:df:
                    2e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:66:A6:FE:83:07:A3:4A:D9:C6:33:44:E3:BD:64:0A:49:92:4A:6A
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS263742.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.251.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:e6:0c:5e:b8:7b:d5:aa:f4:b1:64:b1:10:44:2f:f8:38:56:
         ed:ff:67:2b:db:e7:4c:4f:38:f2:fa:51:df:b4:58:b6:1a:99:
         38:28:e0:2f:d4:e2:90:00:1a:61:3a:54:76:4e:81:a8:5f:e7:
         8d:8e:40:d9:83:89:55:0d:73:27:18:7e:fa:c0:79:3c:f2:b6:
         d0:85:97:76:ab:f9:12:3b:e9:7b:36:85:36:29:2e:65:ad:2f:
         17:37:8d:10:9c:aa:7d:1d:79:60:dd:71:ce:f0:71:32:73:d0:
         bc:7b:a9:99:03:72:c9:2f:74:cd:e2:9c:ff:60:7b:fe:05:a4:
         6f:f4:eb:64:35:72:3d:b9:2d:f7:dd:7e:0d:25:13:64:3d:12:
         35:57:f7:2f:a0:df:9e:37:ef:a6:01:60:91:b1:82:bb:e7:65:
         a1:e8:b0:fd:cf:31:35:d8:1c:2a:f1:69:d8:04:47:af:df:5d:
         bd:2a:14:29:94:07:9d:96:43:8b:86:2a:8e:22:eb:e4:21:74:
         cb:af:a2:ca:a6:14:ab:0f:7b:85:8b:8c:4b:c1:eb:66:b2:1f:
         62:ca:10:66:97:e1:f4:e2:73:3f:33:72:93:b6:3f:9e:ce:8f:
         08:52:72:35:2a:15:ec:02:58:50:8c:d0:76:b0:9c:49:c1:11:
         34:e0:0f:9d
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUGuQazaREjzgRzbzhF3buOvYxb6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEwODE5QzdDOUI0Qzg1Q0UwQjFEMjI3NDFCRTVFNDBB
MUYwRTdCMTAeFw0yNDAzMDUxODAyNTVaFw0yNTAzMDQxODA3NTVaMDMxMTAvBgNV
BAMTKEQ3NjZBNkZFODMwN0EzNEFEOUM2MzM0NEUzQkQ2NDBBNDk5MjRBNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4Np6Kv5AFCwbw+OM+/Od7+raO
XrhkHPyQLaJiNMfVTZndAHiSCXSNOXbKa/JUO01eaMmicO3veTjp0zBJMe1fWBv5
NBzvew0qNKs6vqefodUTl4fEk+AC/ma9d7Gig79WbA/5ZWcj1q0Sz3itjPfDUhL1
+LIqD/tGWiBMyfpUsQRarkahc6Vr4k2kEjR+7YFMXFUaxYbuC/TIoNgFzGWfB+zJ
fovAkE0J/HhFKCmkGeDkhvrLn1DZ89ieaM0SHDcdXwuM7XNCumtlRElSlO4zCdub
xFGhh6oZWYdHE9j25udC7bwBTz9njdmVWaNhv0LtxyY9YI8ZpQWtPft43y5ZAgMB
AAGjggKZMIIClTAdBgNVHQ4EFgQU12am/oMHo0rZxjNE471kCkmSSmowHwYDVR0j
BBgwFoAUQQgZx8m0yFzgsdInQb5eQKHw57EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RDFBNUU2NUFDQjQxNzMzOTg1NUFEQTVBNkM1NDE2REMw
NDFDQ0YwNjQwODAzODQzODk4QkU1NkM0REY2QzMyLzAvNDEwODE5QzdDOUI0Qzg1
Q0UwQjFEMjI3NDFCRTVFNDBBMUYwRTdCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MTA4MTlDN0M5QjRDODVDRTBC
MUQyMjc0MUJFNUU0MEExRjBFN0IxLmNlcjCBmAYIKwYBBQUHAQsEgYswgYgwgYUG
CCsGAQUFBzALhnlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy81RDFBNUU2NUFDQjQxNzMzOTg1NUFEQTVBNkM1NDE2REMwNDFDQ0YwNjQw
ODAzODQzODk4QkU1NkM0REY2QzMyLzAvQVMyNjM3NDIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADJ+2Yw
DQYJKoZIhvcNAQELBQADggEBAArmDF64e9Wq9LFksRBEL/g4Vu3/Zyvb50xPOPL6
Ud+0WLYamTgo4C/U4pAAGmE6VHZOgahf542OQNmDiVUNcycYfvrAeTzyttCFl3ar
+RI76Xs2hTYpLmWtLxc3jRCcqn0deWDdcc7wcTJz0Lx7qZkDcskvdM3inP9ge/4F
pG/062Q1cj25Lffdfg0lE2Q9EjVX9y+g354376YBYJGxgrvnZaHosP3PMTXYHCrx
adgER6/fXb0qFCmUB52WQ4uGKo4i6+QhdMuvosqmFKsPe4WLjEvB62ayH2LKEGaX
4fTicz8zcpO2P57OjwhScjUqFewCWFCM0HawnEnBETTgD50=
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:07:58 2024 by rpki-client on console-ams.rpki-client.org