Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS26613.roa
File:                     AS26613.roa (raw, json)
Hash identifier:          BYRXc+7mf2HknEYDjy4QguoW0srGX8Bi22MnwCTzQOQ=
Subject key identifier:   70:B1:91:63:00:05:6D:1A:05:D2:39:78:BB:6A:0F:E1:4A:1F:17:86
Certificate issuer:       /CN=B6F8E7D0BF951583E0959B2A92A8920330CEBE59
Certificate serial:       1F285CDD0B4277060A50801F866A27F75FA286D8
Authority key identifier: B6:F8:E7:D0:BF:95:15:83:E0:95:9B:2A:92:A8:92:03:30:CE:BE:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS26613.roa
Signing time:             Tue 05 Mar 2024 17:44:47 +0000
ROA not before:           Tue 05 Mar 2024 17:39:47 +0000
ROA not after:            Tue 04 Mar 2025 17:44:47 +0000
asID:                     26613
IP address blocks:        181.113.192.0/24 maxlen: 24
                          186.46.168.0/24 maxlen: 24
                          190.152.95.0/24 maxlen: 24
                          190.152.110.0/24 maxlen: 24
                          190.152.251.0/24 maxlen: 24
                          190.152.252.0/24 maxlen: 24
                          190.152.253.0/24 maxlen: 24
                          190.152.254.0/24 maxlen: 24
                          190.152.255.0/24 maxlen: 24
                          190.214.220.0/22 maxlen: 24
                          190.214.250.0/24 maxlen: 24
                          190.214.252.0/24 maxlen: 24
                          190.214.253.0/24 maxlen: 24
                          200.107.34.0/24 maxlen: 24
                          200.125.206.0/24 maxlen: 24
                          201.219.56.0/24 maxlen: 24
                          2800:370:4::/48 maxlen: 64
                          2800:370:18::/48 maxlen: 64
                          2800:370:2a::/48 maxlen: 64
                          2800:370:3e::/48 maxlen: 64
                          2800:370:4007::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.crl
                          rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:28:5c:dd:0b:42:77:06:0a:50:80:1f:86:6a:27:f7:5f:a2:86:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F8E7D0BF951583E0959B2A92A8920330CEBE59
        Validity
            Not Before: Mar  5 17:39:47 2024 GMT
            Not After : Mar  4 17:44:47 2025 GMT
        Subject: CN=70B1916300056D1A05D23978BB6A0FE14A1F1786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fd:bf:2e:49:eb:33:14:22:9b:b2:9f:25:f7:
                    7c:51:6d:ec:e9:bc:12:5f:a5:81:36:f7:28:cf:44:
                    21:ec:bf:ed:73:2b:c9:fc:cd:ea:ad:7e:f7:8b:2d:
                    03:d0:6f:73:67:7b:d5:06:e9:67:33:8e:5a:7e:7d:
                    cb:b5:8c:ad:e6:33:06:7b:d0:b3:a7:5e:78:3a:09:
                    2d:22:40:5a:0e:94:6c:cb:b8:d8:06:ba:d3:a4:98:
                    f8:3b:63:d4:4d:7a:2c:f8:d7:49:63:2f:04:37:87:
                    b5:8b:47:43:67:2e:c1:08:73:da:06:aa:de:fe:47:
                    36:9c:e8:35:c9:1b:46:35:8d:a9:00:42:84:71:db:
                    03:b8:40:8d:43:ee:4c:56:91:e1:e0:fe:7e:1a:97:
                    8b:de:8e:4e:c8:5b:a9:c4:c5:07:0a:16:24:19:eb:
                    22:6b:33:f1:b3:b0:78:47:07:9e:e2:dc:91:b5:13:
                    ac:03:89:b1:3f:85:f7:d6:bf:2e:f7:87:bc:f5:1c:
                    ce:40:e7:6c:6b:33:2d:06:e5:cd:ea:f0:9f:ec:15:
                    8f:cc:7d:56:3a:dc:4d:42:8a:56:9e:ea:44:27:77:
                    68:61:3d:30:59:9c:98:9d:35:e5:8f:ad:66:7e:cc:
                    f8:0b:c0:15:8d:42:3f:e5:5d:d6:40:59:d9:39:57:
                    67:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B1:91:63:00:05:6D:1A:05:D2:39:78:BB:6A:0F:E1:4A:1F:17:86
            X509v3 Authority Key Identifier:
                keyid:B6:F8:E7:D0:BF:95:15:83:E0:95:9B:2A:92:A8:92:03:30:CE:BE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS26613.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.113.192.0/24
                  186.46.168.0/24
                  190.152.95.0/24
                  190.152.110.0/24
                  190.152.251.0-190.152.255.255
                  190.214.220.0/22
                  190.214.250.0/24
                  190.214.252.0/23
                  200.107.34.0/24
                  200.125.206.0/24
                  201.219.56.0/24
                IPv6:
                  2800:370:4::/48
                  2800:370:18::/48
                  2800:370:2a::/48
                  2800:370:3e::/48
                  2800:370:4007::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:d7:6c:54:50:ec:f9:a7:28:53:63:1f:d3:dc:c0:17:f2:d3:
         68:09:1b:15:d2:50:c6:fd:2e:d1:6e:5a:87:73:b1:c0:eb:63:
         a9:80:31:62:a0:a5:06:62:c9:e7:08:4f:18:35:56:24:5a:a0:
         b7:f2:7a:41:ba:03:be:2b:1c:f4:35:4e:13:a4:99:a8:51:b8:
         f2:14:09:ae:6a:75:57:fe:81:95:2d:65:d0:e5:4f:d5:3d:39:
         ce:7c:20:1e:69:11:b0:ce:19:2c:c9:e5:f3:e9:cd:e1:2c:17:
         84:2f:18:34:ca:55:02:28:ee:71:e9:cd:10:1b:f1:00:67:bd:
         97:9c:e5:b2:c0:d2:e8:b1:f2:00:14:d7:bc:95:e2:09:7b:65:
         a7:45:f1:2b:55:7a:a8:f8:1e:0f:9b:18:e2:34:52:35:17:41:
         60:c1:c5:bd:18:04:68:76:b2:00:9e:73:f7:8d:3a:1a:4a:26:
         3e:70:84:18:5c:e6:20:bb:4c:2d:33:09:9f:a6:b8:3f:a2:cd:
         a9:da:48:c1:12:3e:21:13:a3:9c:4d:58:8f:a0:1d:ae:e9:03:
         d5:26:3e:f1:f9:5b:03:f8:77:d1:36:ed:b6:62:bf:fe:c0:c1:
         c0:0f:a6:51:d3:94:cd:34:57:f6:5f:0f:4d:87:e9:78:2e:52:
         ce:06:18:46
-----BEGIN CERTIFICATE-----
MIIGCTCCBPGgAwIBAgIUHyhc3QtCdwYKUIAfhmon91+ihtgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZGOEU3RDBCRjk1MTU4M0UwOTU5QjJBOTJBODkyMDMz
MENFQkU1OTAeFw0yNDAzMDUxNzM5NDdaFw0yNTAzMDQxNzQ0NDdaMDMxMTAvBgNV
BAMTKDcwQjE5MTYzMDAwNTZEMUEwNUQyMzk3OEJCNkEwRkUxNEExRjE3ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn/b8uSeszFCKbsp8l93xRbezp
vBJfpYE29yjPRCHsv+1zK8n8zeqtfveLLQPQb3Nne9UG6Wczjlp+fcu1jK3mMwZ7
0LOnXng6CS0iQFoOlGzLuNgGutOkmPg7Y9RNeiz410ljLwQ3h7WLR0NnLsEIc9oG
qt7+Rzac6DXJG0Y1jakAQoRx2wO4QI1D7kxWkeHg/n4al4vejk7IW6nExQcKFiQZ
6yJrM/GzsHhHB57i3JG1E6wDibE/hffWvy73h7z1HM5A52xrMy0G5c3q8J/sFY/M
fVY63E1Cilae6kQnd2hhPTBZnJidNeWPrWZ+zPgLwBWNQj/lXdZAWdk5V2fzAgMB
AAGjggMTMIIDDzAdBgNVHQ4EFgQUcLGRYwAFbRoF0jl4u2oP4UofF4YwHwYDVR0j
BBgwFoAUtvjn0L+VFYPglZsqkqiSAzDOvlkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83M0I2ODY4RTU2QjEyQzM1QzYzQjBBQjc2MzAyM0YyNTA4
MTIzQzMxMUNEN0VGNEY1MTYxRUY2RDBBNTUyOTlFLzAvQjZGOEU3RDBCRjk1MTU4
M0UwOTU5QjJBOTJBODkyMDMzMENFQkU1OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNkY4RTdEMEJGOTUxNTgzRTA5
NTlCMkE5MkE4OTIwMzMwQ0VCRTU5LmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy83M0I2ODY4RTU2QjEyQzM1QzYzQjBBQjc2MzAyM0YyNTA4MTIzQzMxMUNE
N0VGNEY1MTYxRUY2RDBBNTUyOTlFLzAvQVMyNjYxMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBmQYIKwYBBQUHAQcBAf8EgYkwgYYwTwQCAAEwSQMEALVx
wAMEALouqAMEAL6YXwMEAL6YbjALAwQAvpj7AwMAvpgDBAK+1twDBAC+1voDBAG+
1vwDBADIayIDBADIfc4DBADJ2zgwMwQCAAIwLQMHACgAA3AABAMHACgAA3AAGAMH
ACgAA3AAKgMHACgAA3AAPgMHACgAA3BABzANBgkqhkiG9w0BAQsFAAOCAQEAJNds
VFDs+acoU2Mf09zAF/LTaAkbFdJQxv0u0W5ah3OxwOtjqYAxYqClBmLJ5whPGDVW
JFqgt/J6QboDvisc9DVOE6SZqFG48hQJrmp1V/6BlS1l0OVP1T05znwgHmkRsM4Z
LMnl8+nN4SwXhC8YNMpVAijucenNEBvxAGe9l5zlssDS6LHyABTXvJXiCXtlp0Xx
K1V6qPgeD5sY4jRSNRdBYMHFvRgEaHayAJ5z9406GkomPnCEGFzmILtMLTMJn6a4
P6LNqdpIwRI+IROjnE1Yj6AdrukD1SY+8flbA/h30TbttmK//sDBwA+mUdOUzTRX
9l8PTYfpeC5SzgYYRg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:36 2024 by rpki-client on console-fra.rpki-client.org