Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS263719.roa
File:                     AS263719.roa (raw, json)
Hash identifier:          wo8WvtKyHqA4/uMzTnyIqRABy8Z52cwRi+v4DcSv3jA=
Subject key identifier:   4E:E8:18:FC:8F:49:F1:FE:22:9C:8D:39:CC:73:09:78:BD:5A:79:BB
Certificate issuer:       /CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
Certificate serial:       0A9A3E766849D9D5A4D8A7667C74E418FECC5EB3
Authority key identifier: DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS263719.roa
Signing time:             Tue 05 Mar 2024 17:55:24 +0000
ROA not before:           Tue 05 Mar 2024 17:50:24 +0000
ROA not after:            Tue 04 Mar 2025 17:55:24 +0000
asID:                     263719
IP address blocks:        2800:680:11::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:9a:3e:76:68:49:d9:d5:a4:d8:a7:66:7c:74:e4:18:fe:cc:5e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
        Validity
            Not Before: Mar  5 17:50:24 2024 GMT
            Not After : Mar  4 17:55:24 2025 GMT
        Subject: CN=4EE818FC8F49F1FE229C8D39CC730978BD5A79BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:11:94:e7:2d:ca:fc:1a:37:13:ce:65:72:c0:
                    fe:6a:ee:aa:25:ab:85:6b:56:61:36:a1:32:29:e3:
                    27:cb:31:e3:3d:8d:bc:e2:f3:5a:20:23:32:b4:1c:
                    0d:77:29:04:14:d2:27:d5:e4:e4:4c:e7:17:0c:f5:
                    bf:7d:0c:88:64:ae:c1:3f:a8:d4:cc:ec:0b:fc:d2:
                    cd:aa:d3:0c:a2:45:44:41:6f:97:ee:09:50:c1:25:
                    5b:cd:96:55:8f:93:09:fe:41:a2:f8:27:24:d8:0e:
                    57:11:d8:0d:fc:d5:c0:96:e8:20:13:f7:14:91:40:
                    d3:00:0c:b3:4a:f6:12:23:b6:0b:20:5c:59:ad:b0:
                    be:c6:5f:f1:57:35:c7:14:fe:60:db:f4:bb:81:9a:
                    bd:d4:87:85:d7:93:16:ed:7a:bf:5e:8d:12:ba:44:
                    e2:94:fb:8d:7b:25:3c:33:57:dd:60:85:ef:f9:8e:
                    09:9e:45:8a:6b:93:28:0f:da:b0:a5:e3:ee:f2:2e:
                    7c:02:01:d0:d9:26:fb:3a:88:96:59:1b:c9:1d:1e:
                    ea:fe:36:14:3c:26:a6:24:8d:74:8d:05:a5:1f:a0:
                    63:ab:f6:e4:73:05:4e:e1:f1:76:35:d1:2e:68:1f:
                    28:62:eb:cb:ec:f1:2f:57:9c:3b:70:66:37:12:46:
                    39:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E8:18:FC:8F:49:F1:FE:22:9C:8D:39:CC:73:09:78:BD:5A:79:BB
            X509v3 Authority Key Identifier:
                keyid:DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS263719.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:680:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:93:8a:e0:80:d0:ff:ad:ff:c6:c9:dd:87:1f:27:fd:fc:5c:
         3f:1f:79:81:b1:93:ca:18:59:a3:06:48:0b:ab:a5:82:dc:fd:
         a7:28:22:67:d6:fb:54:f7:a0:13:78:62:79:1e:d7:25:4e:42:
         ac:3a:37:f1:d2:f2:3b:c9:d7:a9:89:3a:14:21:a3:79:f8:77:
         93:26:e9:47:db:dd:13:9e:f5:f0:ef:6b:0a:99:d4:b8:69:77:
         92:58:25:a1:15:c2:ab:2e:11:b4:ae:64:f2:52:a4:ed:e9:c0:
         de:b8:c0:8d:4f:46:29:9d:9c:79:b9:f0:bc:11:7e:68:0c:61:
         11:2f:35:d4:c6:e2:30:a4:54:37:d7:59:9d:56:29:4b:d4:00:
         45:b4:14:ce:bf:dd:b5:65:3e:34:ea:4b:10:1c:98:0a:4e:18:
         5f:9d:2d:64:1b:b0:52:22:8b:4f:a0:31:2b:38:f2:76:ab:57:
         09:05:6b:78:f6:68:34:7e:78:25:e4:40:0a:d1:8f:31:90:60:
         6f:65:2f:d8:3a:7d:10:3b:d5:8f:15:75:50:a6:40:19:e3:26:
         9b:d1:fd:c4:2e:98:b6:c8:12:f5:09:56:4f:99:41:27:49:14:
         cd:7c:a0:e0:93:e1:f3:e7:09:60:ff:07:d9:a3:c4:0e:75:96:
         84:14:17:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:11 2024 by rpki-client on console-fra.rpki-client.org