Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS263804.roa
File:                     AS263804.roa (raw, json)
Hash identifier:          SW/4npY2A1Ymz9zZYO73czwGzg7PGWu3d6rv3bLN4QE=
Subject key identifier:   13:09:7A:FD:8F:7D:04:41:6B:48:E8:7A:0C:0F:87:C9:56:88:E0:EB
Certificate issuer:       /CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
Certificate serial:       1DC2C58984DBCD8DAE6851F0D68D61E2550D8F3E
Authority key identifier: DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS263804.roa
Signing time:             Tue 05 Mar 2024 17:55:24 +0000
ROA not before:           Tue 05 Mar 2024 17:50:24 +0000
ROA not after:            Tue 04 Mar 2025 17:55:24 +0000
asID:                     263804
IP address blocks:        186.112.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c2:c5:89:84:db:cd:8d:ae:68:51:f0:d6:8d:61:e2:55:0d:8f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
        Validity
            Not Before: Mar  5 17:50:24 2024 GMT
            Not After : Mar  4 17:55:24 2025 GMT
        Subject: CN=13097AFD8F7D04416B48E87A0C0F87C95688E0EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8f:f7:ee:74:54:bd:dd:9f:7c:a8:90:1e:46:
                    6a:29:13:1b:f1:d2:89:32:6d:50:40:55:21:10:2c:
                    ea:c1:ce:0a:d0:9d:52:80:b6:5f:7d:4a:92:69:be:
                    06:37:d7:c3:5a:82:47:50:88:17:eb:04:3e:76:1a:
                    71:ec:ff:06:47:b4:51:2d:60:b3:75:43:6c:c2:43:
                    84:22:65:c0:dc:e9:2e:36:c9:b2:b9:61:94:15:7e:
                    2b:0d:94:4c:96:89:c7:f5:82:2e:5e:01:23:f3:b2:
                    56:52:d7:3c:5f:4e:6a:84:0f:a1:a1:38:fc:61:24:
                    be:8f:ad:2f:0c:01:5b:80:39:6d:81:e2:75:96:61:
                    8e:91:63:f4:a9:e8:42:5d:32:6b:32:74:a9:db:b9:
                    04:0b:66:e9:b0:d8:b8:9a:b6:28:a3:a0:74:54:e4:
                    ab:26:2e:89:52:98:20:31:32:5f:53:d4:77:e0:de:
                    8c:de:e3:d8:e2:49:35:74:2b:09:92:35:43:ef:ce:
                    59:a0:ce:e8:87:9f:96:a6:93:cd:d7:b8:92:69:c7:
                    65:3e:db:39:6e:ab:12:dc:5d:23:1c:a1:80:f6:55:
                    22:e7:40:6a:69:d5:d1:f0:31:91:6a:6d:82:de:0c:
                    92:bf:80:79:ef:7b:f5:e5:2c:e0:c0:d3:36:7f:28:
                    5f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:09:7A:FD:8F:7D:04:41:6B:48:E8:7A:0C:0F:87:C9:56:88:E0:EB
            X509v3 Authority Key Identifier:
                keyid:DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS263804.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.112.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:9c:90:67:b7:a6:60:b6:20:e4:1a:ad:e6:08:9b:7f:34:f5:
         15:ee:2f:31:16:8a:25:77:b6:43:6d:22:91:5d:48:92:60:ac:
         47:a1:b7:2c:dc:7f:d0:71:30:dd:a3:ce:4a:38:da:df:53:b5:
         e5:04:3c:f0:a9:7b:b7:54:86:3d:f3:19:3c:c9:23:d1:2b:2e:
         fb:00:98:ba:48:7d:91:23:2a:40:da:17:de:98:b1:a3:5e:43:
         73:60:eb:db:28:7e:07:2d:7c:57:80:5f:a4:66:95:d6:0e:4e:
         3e:b5:16:73:2b:e1:ae:b3:ea:3f:1c:80:22:dd:67:1b:a8:e1:
         f8:88:80:b9:24:b5:83:32:6a:e6:93:cd:7d:f3:03:91:0e:d5:
         12:72:60:1d:1c:c0:84:c7:62:cd:a5:b1:62:3c:19:84:a6:b1:
         ff:46:42:fd:cd:33:c6:50:1c:2d:ac:02:ec:28:64:29:ce:b0:
         6f:ef:21:e9:a8:5e:aa:9d:76:d5:27:b0:4b:4c:fd:75:d1:2b:
         5a:dd:be:59:fa:4a:f0:44:2e:ac:73:bf:16:68:11:7d:c2:8c:
         0f:7f:34:67:21:5f:c8:53:ec:95:eb:5a:4c:7d:e6:35:cf:0b:
         9a:74:4d:ff:dd:56:f0:5c:8a:6c:37:21:a0:2e:33:09:bd:f3:
         d1:93:89:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:50 2024 by rpki-client on console-ams.rpki-client.org