Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS263804.roa
File:                     AS263804.roa (raw, json)
Hash identifier:          SDD7J7VL3iqKjGjgGdo15ihZ6yTVJ4D3ETAK8x1P9es=
Subject key identifier:   96:34:89:BA:1A:09:48:BB:B5:88:04:6F:C0:D0:71:D3:79:0C:D9:71
Certificate issuer:       /CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
Certificate serial:       3E76E2DC41678D2287BA136A8D858DAD21F070E7
Authority key identifier: DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS263804.roa
Signing time:             Tue 04 Feb 2025 18:19:58 +0000
ROA not before:           Tue 04 Feb 2025 18:14:58 +0000
ROA not after:            Tue 03 Feb 2026 18:19:58 +0000
asID:                     263804
IP address blocks:        186.112.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:76:e2:dc:41:67:8d:22:87:ba:13:6a:8d:85:8d:ad:21:f0:70:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
        Validity
            Not Before: Feb  4 18:14:58 2025 GMT
            Not After : Feb  3 18:19:58 2026 GMT
        Subject: CN=963489BA1A0948BBB588046FC0D071D3790CD971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:74:4f:f1:0b:01:ea:0d:f8:f1:e6:80:4c:ff:
                    ad:26:29:32:fc:3f:e2:79:b0:cd:f2:74:6a:4a:c8:
                    66:4d:d5:f7:96:dc:ef:18:31:e8:62:e6:28:a6:ef:
                    8d:8f:a7:2d:de:cf:c8:fa:e1:00:ea:8a:2c:a1:ba:
                    94:18:54:31:c4:30:4d:11:e1:f9:3c:0b:3e:60:3b:
                    fd:60:13:dd:c6:d5:4d:6c:ee:bc:2d:06:8d:0d:e3:
                    e9:b4:a5:8f:38:e2:02:58:ef:1f:4b:bd:62:51:25:
                    06:49:fa:35:15:c4:87:d1:b8:ac:b3:cb:b5:71:2a:
                    cb:fa:45:ce:3a:eb:69:4d:e9:19:da:ff:7f:0b:62:
                    de:b8:fb:39:65:7b:87:44:27:85:b8:ea:46:ab:94:
                    3c:d2:02:20:4f:dd:a4:a3:7c:a2:1d:6d:49:69:44:
                    3f:0a:b5:03:5d:0e:71:da:5b:40:ea:01:8d:1c:40:
                    ce:56:34:ca:10:f0:6c:28:5b:8d:8c:35:45:0a:7c:
                    b5:da:57:c3:35:9f:15:c2:91:c4:7a:b9:bc:a5:e4:
                    04:15:c2:27:5c:f9:2d:39:c4:59:72:c2:bf:1a:d1:
                    6a:14:5a:ae:dd:c4:46:e6:48:76:8b:b6:c5:61:c7:
                    dc:bf:28:2e:d7:82:13:09:d1:fe:83:7d:0a:8d:44:
                    e8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:34:89:BA:1A:09:48:BB:B5:88:04:6F:C0:D0:71:D3:79:0C:D9:71
            X509v3 Authority Key Identifier:
                keyid:DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS263804.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.112.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:8b:7e:b5:40:cf:ba:58:3f:4e:51:6d:82:c8:50:42:17:d2:
         2b:99:11:8f:86:db:c7:26:c2:61:aa:da:e9:18:be:50:ed:43:
         14:9c:a7:0b:cd:ac:b3:09:4e:89:6e:13:9f:1e:90:a0:80:07:
         1d:fe:a7:3b:b4:8a:02:ea:9f:9f:08:be:b7:ee:b8:c1:a1:18:
         89:02:f5:86:78:18:db:b4:c3:48:92:ce:85:59:38:bd:63:61:
         4b:9d:1c:91:64:ff:9e:87:85:25:50:38:4f:55:86:e4:9d:97:
         13:51:37:6e:25:5b:c6:d6:dd:41:45:d1:eb:17:83:e2:cd:98:
         5a:7c:1c:a7:17:44:e3:38:13:ab:a0:61:c6:14:50:7b:f1:1d:
         5b:98:5f:53:82:ab:fd:1f:f3:fc:aa:85:7e:41:02:38:ef:56:
         28:bb:be:8b:5c:cf:f2:77:1b:c9:37:70:85:53:34:56:55:ef:
         89:3c:63:f9:b7:27:b2:43:72:cd:2c:54:98:e8:34:84:44:45:
         27:f3:fb:e1:2b:1e:ea:bf:5b:dd:34:c6:e1:2b:29:3e:2f:95:
         3e:b0:0c:c9:76:26:93:eb:eb:44:59:aa:1a:d6:a5:18:8a:33:
         81:ed:5a:8f:7b:7d:6d:53:c8:3f:c5:11:52:79:8d:19:4c:5d:
         51:8a:53:5d
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUPnbi3EFnjSKHuhNqjYWNrSHwcOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREIwNjIzNkI5NkVFMDA5MzRGQ0QzOUE1NjBFNUJDMDRF
QjdCOUVBNDAeFw0yNTAyMDQxODE0NThaFw0yNjAyMDMxODE5NThaMDMxMTAvBgNV
BAMTKDk2MzQ4OUJBMUEwOTQ4QkJCNTg4MDQ2RkMwRDA3MUQzNzkwQ0Q5NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvdE/xCwHqDfjx5oBM/60mKTL8
P+J5sM3ydGpKyGZN1feW3O8YMehi5iim742Ppy3ez8j64QDqiiyhupQYVDHEME0R
4fk8Cz5gO/1gE93G1U1s7rwtBo0N4+m0pY844gJY7x9LvWJRJQZJ+jUVxIfRuKyz
y7VxKsv6Rc4662lN6Rna/38LYt64+zlle4dEJ4W46karlDzSAiBP3aSjfKIdbUlp
RD8KtQNdDnHaW0DqAY0cQM5WNMoQ8GwoW42MNUUKfLXaV8M1nxXCkcR6ubyl5AQV
widc+S05xFlywr8a0WoUWq7dxEbmSHaLtsVhx9y/KC7XghMJ0f6DfQqNROgXAgMB
AAGjggKZMIIClTAdBgNVHQ4EFgQUljSJuhoJSLu1iARvwNBx03kM2XEwHwYDVR0j
BBgwFoAU2wYja5buAJNPzTmlYOW8BOt7nqQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QkEwNEYzQkY2MURDMDQ1NDM3OUU4MzYyNUQ3NjkzMjIx
RDI0N0Q3RTc3RTFDRUIyRjlFN0E0OTk3NEFCNzA3LzAvREIwNjIzNkI5NkVFMDA5
MzRGQ0QzOUE1NjBFNUJDMDRFQjdCOUVBNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjA2MjM2Qjk2RUUwMDkzNEZD
RDM5QTU2MEU1QkMwNEVCN0I5RUE0LmNlcjCBmAYIKwYBBQUHAQsEgYswgYgwgYUG
CCsGAQUFBzALhnlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy83QkEwNEYzQkY2MURDMDQ1NDM3OUU4MzYyNUQ3NjkzMjIxRDI0N0Q3RTc3
RTFDRUIyRjlFN0E0OTk3NEFCNzA3LzAvQVMyNjM4MDQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC6cIAw
DQYJKoZIhvcNAQELBQADggEBAM+LfrVAz7pYP05RbYLIUEIX0iuZEY+G28cmwmGq
2ukYvlDtQxScpwvNrLMJToluE58ekKCABx3+pzu0igLqn58IvrfuuMGhGIkC9YZ4
GNu0w0iSzoVZOL1jYUudHJFk/56HhSVQOE9VhuSdlxNRN24lW8bW3UFF0esXg+LN
mFp8HKcXROM4E6ugYcYUUHvxHVuYX1OCq/0f8/yqhX5BAjjvVii7votcz/J3G8k3
cIVTNFZV74k8Y/m3J7JDcs0sVJjoNIRERSfz++ErHuq/W900xuErKT4vlT6wDMl2
JpPr60RZqhrWpRiKM4HtWo97fW1TyD/FEVJ5jRlMXVGKU10=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:38 2025 by rpki-client