Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS264656.roa
File:                     AS264656.roa (raw, json)
Hash identifier:          3lWuk+sQo6vTdVFp9R7IvSWppB6ofEPXvBg/njhvCKs=
Subject key identifier:   D5:7E:40:CB:AB:70:F5:C5:F6:19:7C:2A:5A:2D:C1:FF:A1:41:88:C3
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       4D11B7B26202F99560C32FBCE70E360B004468BA
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS264656.roa
Signing time:             Tue 04 Feb 2025 18:13:46 +0000
ROA not before:           Tue 04 Feb 2025 18:08:46 +0000
ROA not after:            Tue 03 Feb 2026 18:13:46 +0000
asID:                     264656
IP address blocks:        186.38.44.0/24 maxlen: 24
                          201.251.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:11:b7:b2:62:02:f9:95:60:c3:2f:bc:e7:0e:36:0b:00:44:68:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Feb  4 18:08:46 2025 GMT
            Not After : Feb  3 18:13:46 2026 GMT
        Subject: CN=D57E40CBAB70F5C5F6197C2A5A2DC1FFA14188C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e4:d5:e5:27:10:0f:e2:13:27:63:0d:00:df:
                    04:4e:1a:6b:67:52:b5:ad:64:7d:56:b9:08:a1:4f:
                    0c:c5:09:bb:4d:fc:ea:20:3e:b6:a4:b0:95:bb:1b:
                    ea:cd:6f:84:c8:78:3f:93:a6:46:d8:09:38:0e:a6:
                    5c:0c:ce:6e:69:79:b5:6e:d6:5f:d7:a2:26:c7:00:
                    a8:a0:fd:2a:dd:c5:99:59:c6:aa:de:3d:53:c1:4c:
                    67:6a:2d:fd:09:d8:9f:73:a9:d6:02:0a:3a:29:f3:
                    7f:36:5a:62:b4:19:b6:0d:39:4e:4c:37:87:68:61:
                    11:9c:16:81:2b:fe:b8:6d:92:04:96:96:92:45:69:
                    d3:b2:6c:8f:35:7e:28:bc:e7:ad:94:20:54:2f:93:
                    f3:27:06:da:d7:40:4a:71:69:2a:6e:fc:35:a0:1e:
                    19:4b:4b:95:d2:70:92:2c:0a:ac:d9:65:de:56:15:
                    6a:1f:db:19:e3:08:1c:b6:84:bf:4a:22:58:6c:9e:
                    01:43:b3:6a:50:b4:d8:57:fa:13:8b:4d:9c:25:b9:
                    8a:e5:54:0d:c1:d1:dd:11:2d:9d:87:71:b9:3a:81:
                    29:a8:d2:0f:75:8f:c2:d6:3b:48:73:70:d0:4c:a0:
                    16:68:8a:ba:9e:c0:51:75:06:58:46:0a:e7:a5:ce:
                    0d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7E:40:CB:AB:70:F5:C5:F6:19:7C:2A:5A:2D:C1:FF:A1:41:88:C3
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS264656.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.38.44.0/24
                  201.251.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:0d:1f:11:2f:ba:a5:65:47:78:bf:23:c0:ce:78:cf:98:f7:
         c7:4c:f4:bc:42:92:24:45:74:4b:a3:17:85:04:36:0f:ca:ef:
         36:b7:04:02:59:fe:c5:47:cd:06:85:72:f3:dd:f1:b7:9f:04:
         26:31:83:72:0e:8f:93:a8:d8:4d:b0:c5:f8:8d:89:f7:51:79:
         03:2e:48:df:75:40:66:18:db:8f:ac:ec:af:f4:30:38:fd:1d:
         99:42:b6:b0:c7:53:9d:b0:8a:94:28:71:2b:b6:de:d4:6d:5c:
         60:07:07:12:ea:94:73:d5:f2:e9:65:e6:e7:d4:c5:60:c1:17:
         3f:75:6a:0a:46:0a:b9:91:58:d0:90:a3:f6:1f:11:43:46:16:
         36:78:e0:26:0f:19:ad:b1:05:b8:17:0b:5c:ce:cc:0c:21:39:
         6b:05:11:05:ef:44:e3:df:a0:ed:fe:ad:b0:e7:a4:8f:27:c1:
         f0:60:4d:00:6e:a3:ba:e0:8e:66:2e:a2:78:19:b6:75:25:16:
         86:6b:e4:3c:fb:c7:ad:0b:39:ed:4c:58:62:c8:7c:99:f3:9b:
         ab:cc:04:fd:64:42:8b:b2:f7:36:96:a2:f5:8d:6f:15:75:e0:
         04:1c:71:73:1f:f3:3a:fa:da:6e:50:2b:49:27:9d:53:79:42:
         c7:d9:d6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:39 2025 by rpki-client