Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS264830.roa
File:                     AS264830.roa (raw, json)
Hash identifier:          +ZPL2HyG17S52xP0jCgu17JRPcRFt7K9m6JAqUb3rNc=
Subject key identifier:   0C:BD:E6:03:93:95:E0:4E:EA:80:BD:5E:9C:C4:59:57:D2:92:00:CE
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       08542FC0D4F703FEEC760301F99B27F845FD1038
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS264830.roa
Signing time:             Tue 05 Mar 2024 18:07:59 +0000
ROA not before:           Tue 05 Mar 2024 18:02:59 +0000
ROA not after:            Tue 04 Mar 2025 18:07:59 +0000
asID:                     264830
IP address blocks:        186.56.71.0/24 maxlen: 24
                          186.56.72.0/24 maxlen: 24
                          201.251.215.0/24 maxlen: 24
                          201.251.216.0/22 maxlen: 24
                          201.251.220.0/24 maxlen: 24
                          201.251.235.0/24 maxlen: 24
                          201.251.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:54:2f:c0:d4:f7:03:fe:ec:76:03:01:f9:9b:27:f8:45:fd:10:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Mar  5 18:02:59 2024 GMT
            Not After : Mar  4 18:07:59 2025 GMT
        Subject: CN=0CBDE6039395E04EEA80BD5E9CC45957D29200CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:77:11:3f:1e:ad:3a:1a:c4:ef:d1:84:01:cf:
                    46:b3:a5:9f:78:a5:2a:67:bc:93:61:82:c9:d6:63:
                    f3:fe:b0:1a:67:49:4d:f3:f2:c8:cc:51:b0:e2:e8:
                    06:a8:88:2a:8a:f2:50:a4:34:7e:7b:34:1b:08:2f:
                    e9:3d:23:ef:c5:d6:6a:b9:9c:5d:e8:1e:e0:c7:ee:
                    84:21:68:45:7f:d7:a1:ea:be:27:76:d0:19:e4:f5:
                    a4:6a:f8:07:e3:81:2d:c3:28:0c:7f:72:4c:ce:64:
                    c6:fe:0b:e3:0b:5d:f6:5f:b2:76:71:1a:be:76:3d:
                    8f:cf:58:20:74:30:45:80:72:ca:85:c1:a1:23:69:
                    87:df:bf:a8:43:41:c8:59:68:28:90:f2:72:d6:d0:
                    e5:ea:1f:ba:24:26:d6:38:08:b4:2d:25:c3:d3:33:
                    c3:0e:26:a1:e6:d1:0a:85:d6:78:b9:4f:d2:1c:72:
                    ea:a5:81:04:5b:89:07:b3:36:93:2b:c8:7f:04:f4:
                    e5:e8:cb:18:8e:53:13:9b:73:bd:b8:31:70:8f:d9:
                    58:2d:fd:3a:84:2b:92:75:88:2a:06:02:36:a9:58:
                    a5:07:ae:5e:5b:fb:8b:98:b6:d7:99:49:48:28:dd:
                    58:41:8b:63:33:6d:a7:9e:45:0a:7f:a0:53:84:53:
                    b8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BD:E6:03:93:95:E0:4E:EA:80:BD:5E:9C:C4:59:57:D2:92:00:CE
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS264830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.56.71.0-186.56.72.255
                  201.251.215.0-201.251.220.255
                  201.251.235.0-201.251.236.255

    Signature Algorithm: sha256WithRSAEncryption
         48:9b:cc:91:a5:4e:b1:69:5e:87:d8:32:5e:62:ea:ca:e6:2e:
         ec:fb:1b:be:49:4f:3b:67:c5:3d:5f:c5:9e:1d:39:c2:6b:c9:
         e9:9d:0b:42:13:6b:67:99:4e:1c:75:6e:68:32:e4:c3:89:f7:
         f7:96:81:b7:5c:f5:9a:ea:46:92:83:17:ce:1f:01:63:24:e1:
         78:0a:70:f1:c2:da:4d:ae:98:3f:c8:03:f9:bb:1c:ce:1f:9b:
         ee:25:3f:f9:de:a5:d7:e6:9a:8b:fc:9c:3b:f8:44:c1:91:46:
         ce:9d:50:b7:ae:6f:ee:68:27:cf:ab:88:d5:ba:bf:d8:89:c1:
         a2:7a:70:a2:a0:1b:42:81:a1:85:c6:8c:f3:f4:1b:7c:7d:aa:
         7b:7e:5c:c0:5f:b4:0f:e3:5d:9b:e6:6f:04:86:98:cb:61:72:
         a4:f2:06:7d:ab:6e:b8:eb:c9:ec:72:f8:d5:c0:b7:13:bf:99:
         80:f8:ef:a5:6c:4b:14:7e:aa:f1:52:ed:10:40:6f:df:b1:79:
         ff:ac:80:3e:d7:5e:12:9f:1f:c9:f2:a9:85:5b:52:9f:80:91:
         f8:dc:75:73:a4:4d:e6:09:b7:6d:98:16:b9:a3:41:e7:8a:95:
         2a:25:19:c5:8d:5d:da:00:ee:04:3e:fc:67:db:39:97:69:5e:
         4a:e3:df:e3
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgIUCFQvwNT3A/7sdgMB+Zsn+EX9EDgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEwODE5QzdDOUI0Qzg1Q0UwQjFEMjI3NDFCRTVFNDBB
MUYwRTdCMTAeFw0yNDAzMDUxODAyNTlaFw0yNTAzMDQxODA3NTlaMDMxMTAvBgNV
BAMTKDBDQkRFNjAzOTM5NUUwNEVFQTgwQkQ1RTlDQzQ1OTU3RDI5MjAwQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkdxE/Hq06GsTv0YQBz0azpZ94
pSpnvJNhgsnWY/P+sBpnSU3z8sjMUbDi6AaoiCqK8lCkNH57NBsIL+k9I+/F1mq5
nF3oHuDH7oQhaEV/16Hqvid20Bnk9aRq+AfjgS3DKAx/ckzOZMb+C+MLXfZfsnZx
Gr52PY/PWCB0MEWAcsqFwaEjaYffv6hDQchZaCiQ8nLW0OXqH7okJtY4CLQtJcPT
M8MOJqHm0QqF1ni5T9IccuqlgQRbiQezNpMryH8E9OXoyxiOUxObc724MXCP2Vgt
/TqEK5J1iCoGAjapWKUHrl5b+4uYtteZSUgo3VhBi2MzbaeeRQp/oFOEU7gzAgMB
AAGjggK9MIICuTAdBgNVHQ4EFgQUDL3mA5OV4E7qgL1enMRZV9KSAM4wHwYDVR0j
BBgwFoAUQQgZx8m0yFzgsdInQb5eQKHw57EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RDFBNUU2NUFDQjQxNzMzOTg1NUFEQTVBNkM1NDE2REMw
NDFDQ0YwNjQwODAzODQzODk4QkU1NkM0REY2QzMyLzAvNDEwODE5QzdDOUI0Qzg1
Q0UwQjFEMjI3NDFCRTVFNDBBMUYwRTdCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MTA4MTlDN0M5QjRDODVDRTBC
MUQyMjc0MUJFNUU0MEExRjBFN0IxLmNlcjCBmAYIKwYBBQUHAQsEgYswgYgwgYUG
CCsGAQUFBzALhnlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy81RDFBNUU2NUFDQjQxNzMzOTg1NUFEQTVBNkM1NDE2REMwNDFDQ0YwNjQw
ODAzODQzODk4QkU1NkM0REY2QzMyLzAvQVMyNjQ4MzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwQwYIKwYBBQUHAQcBAf8ENDAyMDAEAgABMCowDAMEALo4
RwMEALo4SDAMAwQAyfvXAwQAyfvcMAwDBADJ++sDBADJ++wwDQYJKoZIhvcNAQEL
BQADggEBAEibzJGlTrFpXofYMl5i6srmLuz7G75JTztnxT1fxZ4dOcJryemdC0IT
a2eZThx1bmgy5MOJ9/eWgbdc9ZrqRpKDF84fAWMk4XgKcPHC2k2umD/IA/m7HM4f
m+4lP/nepdfmmov8nDv4RMGRRs6dULeub+5oJ8+riNW6v9iJwaJ6cKKgG0KBoYXG
jPP0G3x9qnt+XMBftA/jXZvmbwSGmMthcqTyBn2rbrjryexy+NXAtxO/mYD476Vs
SxR+qvFS7RBAb9+xef+sgD7XXhKfH8nyqYVbUp+AkfjcdXOkTeYJt22YFrmjQeeK
lSolGcWNXdoA7gQ+/GfbOZdpXkrj3+M=
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:07:58 2024 by rpki-client on console-ams.rpki-client.org