Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS263230.roa
File:                     AS263230.roa (raw, json)
Hash identifier:          WfZDms3QLLzOzm1dSVj2OnCqMTBeQ62uDbke8o0crPo=
Subject key identifier:   36:AA:00:7B:01:9A:34:C0:41:18:D8:B3:98:86:12:86:1F:E4:55:63
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       47B1299F238281F6F858AA0B3C98C874D4451C0A
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS263230.roa
Signing time:             Tue 05 Mar 2024 18:12:26 +0000
ROA not before:           Tue 05 Mar 2024 18:07:26 +0000
ROA not after:            Tue 04 Mar 2025 18:12:26 +0000
asID:                     263230
IP address blocks:        190.136.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b1:29:9f:23:82:81:f6:f8:58:aa:0b:3c:98:c8:74:d4:45:1c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Mar  5 18:07:26 2024 GMT
            Not After : Mar  4 18:12:26 2025 GMT
        Subject: CN=36AA007B019A34C04118D8B3988612861FE45563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dc:e9:2d:6a:d1:b7:80:61:da:1b:18:2b:06:
                    1a:a0:42:95:cb:3f:bf:24:6d:54:24:63:12:c8:86:
                    58:03:c1:11:53:20:1c:b7:64:7c:c3:96:4a:42:06:
                    3d:9f:4c:ad:a3:b5:f1:6d:d5:e2:c0:a9:8b:f8:82:
                    54:00:be:0b:e1:4d:c7:20:62:b4:1a:4a:57:4c:e8:
                    52:c8:5b:ee:11:fe:2a:d7:05:b6:eb:38:cb:e7:69:
                    70:67:94:4e:86:3e:72:cf:ae:b6:e2:fa:c6:5d:e0:
                    ff:65:ca:e5:1d:0a:60:72:b5:d5:75:fe:64:1f:72:
                    18:c0:18:74:2c:be:17:31:a4:f5:68:91:aa:64:d4:
                    ec:12:33:7a:0d:ae:b5:be:a7:a8:78:d7:fe:15:de:
                    5e:4b:b6:c9:d6:9a:5f:31:98:93:b7:44:5e:72:6a:
                    0e:68:ac:d0:1d:4f:03:12:16:5e:19:5d:59:7f:16:
                    d2:fc:12:8a:1c:4a:40:96:d5:26:05:ee:cf:3e:cb:
                    da:65:5b:bc:99:f4:33:d9:d6:26:46:d5:ff:58:c6:
                    5f:2f:24:0c:6c:1c:6e:5d:84:42:19:7a:91:37:53:
                    15:0d:da:df:69:69:31:2d:24:6c:ae:a7:3c:d7:93:
                    fe:c1:b3:f0:a1:67:38:a9:36:bc:6a:8e:94:18:85:
                    76:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:AA:00:7B:01:9A:34:C0:41:18:D8:B3:98:86:12:86:1F:E4:55:63
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS263230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.136.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:d7:54:e2:5b:f2:99:e8:ea:dc:fe:f6:f9:1d:f2:94:64:9e:
         fc:92:25:63:1b:85:df:fe:c6:80:18:f0:27:63:bc:9b:5b:b6:
         ef:44:81:bd:ac:75:a2:ad:83:2e:32:76:97:9c:78:04:8a:47:
         d2:5e:81:24:d3:6d:dd:be:6c:04:b2:82:50:97:f9:dd:dd:b5:
         89:cc:57:05:d5:82:a0:da:fc:8b:1f:26:bc:2e:f4:3b:b0:bb:
         c8:6f:9e:be:c8:f8:54:04:ba:d1:18:dc:44:48:73:89:69:a2:
         50:d9:38:ae:56:42:5a:ed:4c:97:15:15:41:79:a9:02:95:3d:
         4f:96:16:83:26:90:6f:01:84:0c:dd:ff:44:38:a8:b0:7d:0d:
         5b:f4:73:d3:de:6f:2b:48:9c:c4:00:c7:ad:f1:5e:9d:79:c7:
         e9:22:a4:35:42:b4:24:18:5c:9c:65:49:e7:c7:48:17:6b:0e:
         e2:9e:54:88:eb:95:71:9f:f9:0e:be:07:ab:ed:b6:69:f0:31:
         bd:b4:23:0d:57:9d:13:b5:3d:03:2e:78:4f:6a:8d:c2:03:d1:
         35:e0:5c:6d:ad:76:1d:67:8c:70:72:e8:46:41:27:8b:bb:1b:
         61:c8:98:55:b9:86:24:71:7f:97:76:49:b8:f7:e8:58:34:f3:
         4f:d6:cd:6b
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUR7EpnyOCgfb4WKoLPJjIdNRFHAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc0RDY4RjA2QkIxRjJFRDA5NEYwM0I1MkZFRDc1NjVG
NzgyNUQ5OTAeFw0yNDAzMDUxODA3MjZaFw0yNTAzMDQxODEyMjZaMDMxMTAvBgNV
BAMTKDM2QUEwMDdCMDE5QTM0QzA0MTE4RDhCMzk4ODYxMjg2MUZFNDU1NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO3OktatG3gGHaGxgrBhqgQpXL
P78kbVQkYxLIhlgDwRFTIBy3ZHzDlkpCBj2fTK2jtfFt1eLAqYv4glQAvgvhTccg
YrQaSldM6FLIW+4R/irXBbbrOMvnaXBnlE6GPnLPrrbi+sZd4P9lyuUdCmBytdV1
/mQfchjAGHQsvhcxpPVokapk1OwSM3oNrrW+p6h41/4V3l5LtsnWml8xmJO3RF5y
ag5orNAdTwMSFl4ZXVl/FtL8EoocSkCW1SYF7s8+y9plW7yZ9DPZ1iZG1f9Yxl8v
JAxsHG5dhEIZepE3UxUN2t9paTEtJGyupzzXk/7Bs/ChZzipNrxqjpQYhXaZAgMB
AAGjggKZMIIClTAdBgNVHQ4EFgQUNqoAewGaNMBBGNizmIYShh/kVWMwHwYDVR0j
BBgwFoAUJ01o8Gux8u0JTwO1L+11ZfeCXZkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZF
MzY3QkEwQ0M4M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvMjc0RDY4RjA2QkIxRjJF
RDA5NEYwM0I1MkZFRDc1NjVGNzgyNUQ5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNzRENjhGMDZCQjFGMkVEMDk0
RjAzQjUyRkVENzU2NUY3ODI1RDk5LmNlcjCBmAYIKwYBBQUHAQsEgYswgYgwgYUG
CCsGAQUFBzALhnlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZFMzY3QkEwQ0M4
M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvQVMyNjMyMzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+iAYw
DQYJKoZIhvcNAQELBQADggEBAH7XVOJb8pno6tz+9vkd8pRknvySJWMbhd/+xoAY
8CdjvJtbtu9Egb2sdaKtgy4ydpeceASKR9JegSTTbd2+bASyglCX+d3dtYnMVwXV
gqDa/IsfJrwu9Duwu8hvnr7I+FQEutEY3ERIc4lpolDZOK5WQlrtTJcVFUF5qQKV
PU+WFoMmkG8BhAzd/0Q4qLB9DVv0c9PebytInMQAx63xXp15x+kipDVCtCQYXJxl
SefHSBdrDuKeVIjrlXGf+Q6+B6vttmnwMb20Iw1XnRO1PQMueE9qjcID0TXgXG2t
dh1njHBy6EZBJ4u7G2HImFW5hiRxf5d2Sbj36Fg080/WzWs=
-----END CERTIFICATE-----
Generated at Tue Apr 30 19:14:08 2024 by rpki-client on console-ams.rpki-client.org