Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS263786.roa
File:                     AS263786.roa (raw, json)
Hash identifier:          +c1n3nsu4H2fDjfr+gPqL9IWwDQ8s4aBLLB1rI7mxYM=
Subject key identifier:   73:F0:30:94:BF:BD:48:69:20:4F:2B:70:02:0F:CD:DB:D9:41:C3:59
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       7B907BBA7826FDEB63F790D45B721A5A5C7AC45E
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS263786.roa
Signing time:             Tue 05 Mar 2024 18:07:54 +0000
ROA not before:           Tue 05 Mar 2024 18:02:54 +0000
ROA not after:            Tue 04 Mar 2025 18:07:54 +0000
asID:                     263786
IP address blocks:        186.38.60.0/24 maxlen: 24
                          186.38.61.0/24 maxlen: 24
                          201.251.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:90:7b:ba:78:26:fd:eb:63:f7:90:d4:5b:72:1a:5a:5c:7a:c4:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Mar  5 18:02:54 2024 GMT
            Not After : Mar  4 18:07:54 2025 GMT
        Subject: CN=73F03094BFBD4869204F2B70020FCDDBD941C359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9e:57:cc:7b:db:73:09:51:6f:83:c9:6f:18:
                    87:13:6f:28:1e:6b:4c:31:b6:9f:0a:2b:48:a1:b0:
                    ad:47:78:80:7c:33:c7:bc:6f:85:df:13:d2:c5:61:
                    f6:03:92:6a:ad:3f:a0:40:92:14:c3:4d:ca:df:88:
                    1d:a6:e7:9c:3f:66:f8:0d:12:49:af:f1:66:fb:22:
                    51:c6:e8:4a:42:60:36:30:e6:e3:d9:1b:e9:46:dc:
                    7f:26:25:41:64:aa:c8:21:3b:5f:4e:bc:82:fb:3b:
                    14:34:a9:26:c9:2d:90:fc:01:ba:0a:e4:e0:12:3d:
                    63:42:af:fd:67:54:a0:2d:8e:3d:30:fb:cf:34:33:
                    ab:c6:b5:e4:84:f6:bf:cd:ce:cc:ca:c5:9f:f8:49:
                    f9:dc:77:78:96:f6:d4:cc:57:65:1e:8b:a5:67:31:
                    72:b2:36:73:7e:89:c4:d3:ee:2e:fd:67:64:48:63:
                    93:1b:00:6b:fe:ce:cc:3b:7e:e1:bf:d7:a5:ed:ff:
                    c5:ff:b9:52:9f:82:a3:e5:4d:d5:22:d2:90:88:4c:
                    64:44:84:11:3c:79:f1:3c:3b:e2:d2:09:47:96:0e:
                    6b:81:dd:e4:8c:fc:b9:d8:37:49:d8:81:11:2f:34:
                    4a:23:99:dd:47:6d:83:fb:21:3f:bd:83:3b:ab:2a:
                    21:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F0:30:94:BF:BD:48:69:20:4F:2B:70:02:0F:CD:DB:D9:41:C3:59
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS263786.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.38.60.0/23
                  201.251.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:93:71:ed:7d:bf:fc:66:7e:08:d3:ec:37:75:d6:ec:e7:34:
         a5:a8:23:1b:4b:b5:51:86:e7:08:63:9d:b1:67:e4:4e:d0:cf:
         98:5e:d8:3a:36:eb:d0:48:26:ed:c9:8f:53:c5:c5:39:0f:a2:
         29:62:ef:fc:d2:e6:2a:00:1c:34:0d:dd:26:62:13:cc:ee:3e:
         aa:39:c3:7c:79:34:e3:aa:1f:c9:5e:b1:5b:90:49:7a:77:e4:
         6c:59:24:62:ea:1f:2d:50:1f:e9:ec:66:6b:70:80:3d:d5:46:
         aa:f1:59:81:76:34:a9:1c:41:ed:53:8f:b6:00:f1:8f:b6:08:
         66:87:c9:ec:f7:01:d8:1e:36:3b:29:fc:9c:3e:d9:8b:6e:2c:
         c1:66:04:7b:bc:63:9a:99:bb:10:82:80:68:97:c8:ee:af:97:
         77:c4:70:46:57:a7:67:99:c2:d0:74:f4:09:20:59:70:42:7d:
         70:2e:86:71:aa:0d:d9:06:a1:ab:d4:6d:cd:bd:dd:85:a0:59:
         4b:e9:2b:0d:dd:a5:1b:ca:3b:e1:6a:9b:63:17:57:4c:36:60:
         3d:5b:7d:ff:e4:bc:c9:33:93:3f:b7:92:6d:32:5b:ee:85:77:
         2c:2f:bd:2c:d9:89:cc:d0:58:ea:00:ab:81:84:27:eb:ba:ed:
         d1:14:8f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:22 2024 by rpki-client on console-fra.rpki-client.org