Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS262187.roa
File:                     AS262187.roa (raw, json)
Hash identifier:          8TBq3nu2/iJelLFdE02dT1H6FFynRWFiQIG9eqqp5/w=
Subject key identifier:   1E:33:79:6C:24:35:1B:A8:D7:62:06:FB:E1:2E:A9:4C:E2:6B:F4:D1
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       35D6BFD4053803C6C64C83C012C8D1CE1ED0C88B
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS262187.roa
Signing time:             Tue 10 Sep 2024 12:55:00 +0000
ROA not before:           Tue 10 Sep 2024 12:50:00 +0000
ROA not after:            Tue 09 Sep 2025 12:55:00 +0000
asID:                     262187
IP address blocks:        190.136.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d6:bf:d4:05:38:03:c6:c6:4c:83:c0:12:c8:d1:ce:1e:d0:c8:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Sep 10 12:50:00 2024 GMT
            Not After : Sep  9 12:55:00 2025 GMT
        Subject: CN=1E33796C24351BA8D76206FBE12EA94CE26BF4D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e6:47:1c:89:51:16:27:b3:d3:a2:cd:f7:14:
                    16:f0:93:0b:65:33:39:c2:cc:e7:e0:38:64:c9:a6:
                    bd:2f:96:4a:86:b0:84:31:6f:d9:a8:45:a9:47:78:
                    c5:1c:b4:63:b3:12:9d:fd:d8:f0:d7:6a:36:74:95:
                    aa:e4:e9:1e:79:4c:3c:91:ea:50:42:39:c5:12:28:
                    94:32:f5:fc:4b:37:d9:d6:5e:72:7c:3d:41:ab:b5:
                    71:44:f6:16:06:d0:ec:ee:61:81:66:98:91:b6:aa:
                    d4:1b:d1:b5:69:b9:5f:36:bb:4e:af:af:93:fa:6a:
                    fa:8d:24:8a:fb:58:06:b9:5d:e1:71:6e:68:9e:15:
                    66:b2:6d:af:7c:d8:bd:67:90:7d:06:4c:ff:77:e8:
                    bc:e3:d7:20:a4:79:d6:08:e7:44:6c:eb:23:f9:32:
                    99:f9:a6:a1:a5:e0:79:5d:5f:dd:75:ee:19:bb:a9:
                    f8:a6:48:96:2c:28:1c:ab:11:53:72:25:af:2b:19:
                    f0:3e:fd:9e:30:a1:74:1b:01:2e:a0:fa:97:39:0d:
                    32:5e:61:54:53:6f:68:81:e7:39:9d:d7:15:ec:7e:
                    3b:06:32:2f:f3:01:1b:21:1b:19:3e:19:ae:89:3d:
                    91:90:b7:b4:82:c6:d9:9b:df:75:e3:64:ab:a5:aa:
                    35:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:33:79:6C:24:35:1B:A8:D7:62:06:FB:E1:2E:A9:4C:E2:6B:F4:D1
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS262187.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.136.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:7f:ea:2f:1f:56:78:d7:81:df:13:a2:a2:f0:29:4c:80:15:
         57:85:21:cc:5f:33:4a:2e:6a:81:56:b7:ba:d9:34:11:41:43:
         d2:85:d3:1e:90:af:7a:65:3f:d6:88:54:12:cb:66:4b:3b:ab:
         dc:e7:96:00:38:27:71:2f:b0:44:55:71:13:65:9b:5f:3c:d7:
         9c:dc:64:be:ca:61:69:a5:81:80:29:26:c3:b6:d4:b7:5b:05:
         02:26:3b:88:61:ce:24:a6:5f:b6:07:f7:93:d0:f6:7a:bc:f6:
         59:0b:32:48:14:95:09:37:3e:07:e0:70:45:14:e5:bb:25:e9:
         af:aa:3e:a1:8c:67:4f:3c:6c:74:7a:f7:d8:e2:32:5d:c4:62:
         10:ae:4d:1b:c5:7e:bb:7e:99:81:e3:f8:b0:34:08:94:ec:39:
         4a:20:81:f1:f8:50:81:32:97:4f:dd:81:1e:c5:67:d9:3d:d0:
         7d:f7:30:5d:b2:dc:cd:0d:70:f8:b9:b0:e9:18:06:4f:fa:b2:
         64:93:ef:88:a9:6c:69:52:28:ef:6e:1f:70:56:59:8f:69:b5:
         31:78:87:e3:5e:8e:21:b9:2d:95:88:7c:51:01:88:f7:5f:1e:
         f9:a5:1e:bd:23:4d:54:96:0e:33:4b:3e:fc:3f:33:ef:56:ab:
         1d:e3:74:dc
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUNda/1AU4A8bGTIPAEsjRzh7QyIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc0RDY4RjA2QkIxRjJFRDA5NEYwM0I1MkZFRDc1NjVG
NzgyNUQ5OTAeFw0yNDA5MTAxMjUwMDBaFw0yNTA5MDkxMjU1MDBaMDMxMTAvBgNV
BAMTKDFFMzM3OTZDMjQzNTFCQThENzYyMDZGQkUxMkVBOTRDRTI2QkY0RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx5kcciVEWJ7PTos33FBbwkwtl
MznCzOfgOGTJpr0vlkqGsIQxb9moRalHeMUctGOzEp392PDXajZ0lark6R55TDyR
6lBCOcUSKJQy9fxLN9nWXnJ8PUGrtXFE9hYG0OzuYYFmmJG2qtQb0bVpuV82u06v
r5P6avqNJIr7WAa5XeFxbmieFWayba982L1nkH0GTP936Lzj1yCkedYI50Rs6yP5
Mpn5pqGl4HldX9117hm7qfimSJYsKByrEVNyJa8rGfA+/Z4woXQbAS6g+pc5DTJe
YVRTb2iB5zmd1xXsfjsGMi/zARshGxk+Ga6JPZGQt7SCxtmb33XjZKulqjWzAgMB
AAGjggKZMIIClTAdBgNVHQ4EFgQUHjN5bCQ1G6jXYgb74S6pTOJr9NEwHwYDVR0j
BBgwFoAUJ01o8Gux8u0JTwO1L+11ZfeCXZkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZF
MzY3QkEwQ0M4M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvMjc0RDY4RjA2QkIxRjJF
RDA5NEYwM0I1MkZFRDc1NjVGNzgyNUQ5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNzRENjhGMDZCQjFGMkVEMDk0
RjAzQjUyRkVENzU2NUY3ODI1RDk5LmNlcjCBmAYIKwYBBQUHAQsEgYswgYgwgYUG
CCsGAQUFBzALhnlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZFMzY3QkEwQ0M4
M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvQVMyNjIxODcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK+iNAw
DQYJKoZIhvcNAQELBQADggEBACR/6i8fVnjXgd8ToqLwKUyAFVeFIcxfM0ouaoFW
t7rZNBFBQ9KF0x6Qr3plP9aIVBLLZks7q9znlgA4J3EvsERVcRNlm18815zcZL7K
YWmlgYApJsO21LdbBQImO4hhziSmX7YH95PQ9nq89lkLMkgUlQk3PgfgcEUU5bsl
6a+qPqGMZ088bHR699jiMl3EYhCuTRvFfrt+mYHj+LA0CJTsOUoggfH4UIEyl0/d
gR7FZ9k90H33MF2y3M0NcPi5sOkYBk/6smST74ipbGlSKO9uH3BWWY9ptTF4h+Ne
jiG5LZWIfFEBiPdfHvmlHr0jTVSWDjNLPvw/M+9Wqx3jdNw=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:47 2024 by rpki-client on console-fra.rpki-client.org