Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS267786.roa
File:                     AS267786.roa (raw, json)
Hash identifier:          MqbJjoqDO2sKwwZbPrDDONPhPDt9SYfarJJO73ykh4o=
Subject key identifier:   79:3A:F0:E7:76:10:CF:CD:C1:84:09:C9:3F:92:71:47:25:34:39:16
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       6CC644E1DEFCC5B957B092A04D2B74F9E617DA74
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS267786.roa
Signing time:             Tue 05 Mar 2024 18:08:00 +0000
ROA not before:           Tue 05 Mar 2024 18:03:00 +0000
ROA not after:            Tue 04 Mar 2025 18:08:00 +0000
asID:                     267786
IP address blocks:        186.38.99.0/24 maxlen: 24
                          201.251.146.0/24 maxlen: 24
                          201.251.206.0/24 maxlen: 24
                          201.251.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c6:44:e1:de:fc:c5:b9:57:b0:92:a0:4d:2b:74:f9:e6:17:da:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Mar  5 18:03:00 2024 GMT
            Not After : Mar  4 18:08:00 2025 GMT
        Subject: CN=793AF0E77610CFCDC18409C93F92714725343916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c9:1e:a7:8a:b9:b3:cc:62:c5:3a:ae:4e:1c:
                    41:28:0a:6c:f3:2b:c1:fa:cb:cb:6f:31:f1:18:30:
                    3a:89:46:91:58:a4:c9:5c:5b:bd:bc:07:6a:f3:ab:
                    d5:56:b4:70:c4:54:9a:8d:d0:45:c6:84:a3:11:9d:
                    8e:c1:47:55:11:6d:f9:23:9b:0f:47:6a:5a:f1:a4:
                    dc:1a:dc:72:69:ef:96:07:b3:aa:7b:c0:c8:17:b0:
                    ae:81:20:82:12:1e:d2:c0:f9:07:77:bd:5b:77:b1:
                    cb:0b:c9:ac:33:8c:bc:84:bd:3b:78:5d:ad:3c:70:
                    cf:5b:51:b5:e8:6d:3b:9c:b0:59:16:cf:76:e5:07:
                    ca:88:9f:1e:4d:f1:85:0b:83:fc:ab:3f:3b:bf:5e:
                    50:16:eb:b8:b9:0a:20:40:b4:22:50:1b:84:e3:ba:
                    46:fa:18:e8:16:90:b8:41:99:2f:e7:28:02:d7:95:
                    47:7a:3f:0c:42:e5:43:27:29:da:5d:92:e2:b9:7f:
                    8a:c8:91:45:1f:fb:53:72:2a:09:8e:4e:82:66:6f:
                    48:77:03:dc:1f:23:83:96:e4:4f:94:69:63:d6:9f:
                    77:3f:ec:09:3b:11:cf:25:3b:36:b5:53:4f:6a:e5:
                    a0:b2:39:ea:41:b5:c2:27:ba:24:6c:a6:62:38:a4:
                    8d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3A:F0:E7:76:10:CF:CD:C1:84:09:C9:3F:92:71:47:25:34:39:16
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS267786.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.38.99.0/24
                  201.251.146.0/24
                  201.251.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:26:85:b7:d2:d9:c2:c3:89:9a:21:ea:09:ec:90:db:01:4d:
         9f:d3:78:d6:da:81:2a:43:4d:31:c9:fe:29:22:7b:70:1d:c7:
         ab:84:2b:c0:12:95:b4:67:d5:ab:91:ee:50:b9:dc:3d:fb:77:
         04:b8:f5:7e:74:72:02:c1:60:0a:44:ea:60:33:b3:b5:0d:4f:
         68:d9:ff:ce:29:5f:89:5c:1b:ea:3e:ff:ab:ff:f2:88:8e:27:
         2c:63:c3:e1:42:07:10:85:e1:c5:04:a4:28:7e:94:b3:9b:8f:
         12:b3:66:a9:56:7f:43:22:73:22:2d:a5:dc:5e:88:d2:0a:af:
         df:f5:66:2a:1d:61:5f:24:c8:8e:b4:1d:e3:b4:6b:f5:58:27:
         f5:c3:40:13:7b:8a:a4:ac:7e:be:e8:c2:d2:64:43:11:ec:b9:
         20:66:7c:6d:62:01:4e:a2:72:64:f9:9e:09:73:a0:94:46:0a:
         98:57:de:f5:44:b9:ba:f8:2d:31:2c:83:bb:99:d2:19:e7:6d:
         dd:92:a4:98:e9:c4:ea:6b:27:41:1a:43:47:5e:2c:22:af:2c:
         ee:cc:0c:5d:82:ea:3a:36:e2:5b:6a:51:48:8b:c1:01:63:c8:
         8b:74:8d:bd:fd:9b:6b:65:bf:df:ab:11:02:f5:9b:82:3a:c0:
         85:03:34:fe
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:22 2024 by rpki-client on console-fra.rpki-client.org