Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS269823.roa
File:                     AS269823.roa (raw, json)
Hash identifier:          /nZtIdxsAGjol7o6r+Gt6IzZ0s/DM2Qa+IkbsHTLdw0=
Subject key identifier:   51:E5:F1:D0:4D:74:AE:9B:7D:20:DA:77:6E:83:A2:94:9D:28:87:E4
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       1839E70933A18B45F9BE09D16602797D2513DB38
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS269823.roa
Signing time:             Tue 04 Feb 2025 18:13:39 +0000
ROA not before:           Tue 04 Feb 2025 18:08:39 +0000
ROA not after:            Tue 03 Feb 2026 18:13:39 +0000
asID:                     269823
IP address blocks:        201.251.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:39:e7:09:33:a1:8b:45:f9:be:09:d1:66:02:79:7d:25:13:db:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Feb  4 18:08:39 2025 GMT
            Not After : Feb  3 18:13:39 2026 GMT
        Subject: CN=51E5F1D04D74AE9B7D20DA776E83A2949D2887E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:65:20:34:54:9b:bc:8f:41:22:b1:25:28:82:
                    79:85:ba:ab:9c:79:48:ef:32:f7:a5:8e:5b:0e:40:
                    e1:b0:df:14:57:55:5b:4f:77:15:61:f0:e0:bb:e3:
                    79:9e:38:9c:0d:81:89:ca:3b:12:ca:1c:d8:21:57:
                    13:10:1b:aa:fa:a6:87:a2:af:51:bb:47:84:7c:3c:
                    01:84:54:82:06:08:bf:12:62:9a:bc:c5:36:43:ef:
                    c6:ea:1b:7f:99:c1:88:d1:15:ba:56:67:75:68:55:
                    7d:e2:4e:55:72:3f:fe:67:96:ef:0f:89:71:b3:79:
                    50:f7:21:94:ac:41:47:f0:24:2c:85:70:81:23:60:
                    86:5a:90:4a:09:db:33:a6:72:9d:eb:3e:7c:71:4c:
                    a0:60:3e:97:47:b9:31:f6:e6:91:f1:13:b4:e2:b4:
                    18:db:62:0f:c0:6d:a6:52:7f:63:08:c9:ff:68:bf:
                    2e:c0:cd:42:6d:78:b2:83:5d:8c:5b:80:9e:8d:b9:
                    ab:e9:c2:44:79:ba:1a:f7:b0:4e:e3:4c:2b:8c:49:
                    da:48:c5:4b:81:07:d9:bd:3e:67:3d:83:46:fd:69:
                    4b:dc:08:7a:8e:41:4f:37:c1:1b:1d:ec:18:65:81:
                    02:22:19:69:f1:60:57:c3:38:a3:4b:7b:d0:74:f9:
                    5f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E5:F1:D0:4D:74:AE:9B:7D:20:DA:77:6E:83:A2:94:9D:28:87:E4
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS269823.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.251.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:82:54:f4:24:92:71:82:87:2e:90:99:5f:c5:ba:d1:1f:f2:
         2c:ee:5b:94:dd:cb:d4:ba:40:8b:10:8c:80:db:c8:cc:48:7d:
         0f:19:a5:6f:3a:57:41:40:63:b8:48:87:2a:57:d2:e6:89:17:
         f1:16:d2:fa:dc:a6:f4:95:42:54:ca:66:5d:32:2e:7b:9c:be:
         ea:83:ed:2a:52:cd:56:ac:8b:bc:6e:a7:2a:e1:02:19:6a:5a:
         6e:be:7f:f1:ce:58:5b:6b:0a:47:64:84:63:c2:e7:12:c0:01:
         53:da:1f:ca:d6:08:24:19:b4:8a:ed:9e:ad:2c:31:d8:db:d1:
         2d:d9:93:01:82:92:a8:1d:6d:22:0f:2e:4c:87:62:fb:e6:1f:
         f3:56:2e:e2:d5:b9:51:3a:82:12:41:1e:1f:a9:7b:7d:7a:f3:
         83:b3:b3:ac:99:f4:f1:e9:e8:45:d7:9c:98:00:fb:4b:86:58:
         b1:a3:1a:79:64:af:14:94:1e:b9:e4:d0:b3:7c:38:e4:84:e6:
         4b:e5:da:28:a4:85:31:58:fb:ae:e6:18:0e:68:d2:1d:ae:86:
         81:84:0a:a2:5c:b1:07:1b:65:29:23:a6:06:0b:92:7b:7b:d5:
         f5:b5:ee:d1:77:ea:9c:bd:50:72:cd:6a:88:7b:d5:8f:a7:fa:
         fc:a0:cf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:02 2025 by rpki-client