Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS264691.roa
File:                     AS264691.roa (raw, json)
Hash identifier:          WDj8+y8VW3t3JMdnLGcyrlmn4rn7cYbLQpnTfntcJQw=
Subject key identifier:   83:25:96:BE:C9:95:AD:BF:CE:6E:90:80:7C:1A:35:8D:39:A8:66:06
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       45DF556C87F77DBB325E1F5511C14DB1152E4568
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS264691.roa
Signing time:             Tue 04 Feb 2025 20:06:56 +0000
ROA not before:           Tue 04 Feb 2025 20:01:56 +0000
ROA not after:            Tue 03 Feb 2026 20:06:56 +0000
asID:                     264691
IP address blocks:        190.226.240.0/21 maxlen: 24
                          190.226.248.0/24 maxlen: 24
                          200.43.55.0/24 maxlen: 24
                          200.43.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:df:55:6c:87:f7:7d:bb:32:5e:1f:55:11:c1:4d:b1:15:2e:45:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Feb  4 20:01:56 2025 GMT
            Not After : Feb  3 20:06:56 2026 GMT
        Subject: CN=832596BEC995ADBFCE6E90807C1A358D39A86606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b8:ca:f3:92:85:5c:d3:c2:2e:06:92:1b:7b:
                    c7:35:cb:a7:90:cf:f0:fa:eb:b1:bf:b7:30:e4:67:
                    4d:14:4d:9d:d6:ea:54:e3:bc:0f:9c:91:ef:8e:b6:
                    2f:76:a7:17:a2:66:7a:a1:75:4d:10:25:e7:e7:50:
                    e9:32:fc:e7:a9:63:0b:08:8a:60:b1:73:33:7a:00:
                    4f:8d:fe:df:62:ed:60:fc:3b:84:64:6a:92:5a:cb:
                    d3:19:0a:d7:4b:84:94:ae:05:83:a7:eb:d8:d0:a8:
                    cb:f1:f1:3a:ff:7f:b7:35:59:e5:18:06:55:87:75:
                    34:d4:98:61:80:46:13:54:17:37:c7:db:e4:6c:08:
                    74:92:29:98:08:1a:16:a1:e2:f2:1f:2c:88:56:97:
                    62:5c:a3:25:f1:cd:34:47:df:67:c9:61:61:bd:1a:
                    62:c3:fd:97:b2:08:11:3d:83:b5:10:35:a9:c3:99:
                    5f:b1:93:28:99:03:e8:c5:91:fe:7b:e1:86:6d:f7:
                    f0:a1:d4:a3:8c:f9:d5:1c:a1:c5:68:24:5a:0f:d2:
                    11:fd:5f:c0:3c:47:f0:c6:07:ea:21:bd:c2:1d:27:
                    9d:0d:a9:aa:6d:a5:b0:a5:91:79:e8:58:08:0f:ff:
                    27:a7:74:15:4d:5a:cd:da:d9:a6:70:bb:94:62:60:
                    ce:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:25:96:BE:C9:95:AD:BF:CE:6E:90:80:7C:1A:35:8D:39:A8:66:06
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS264691.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.226.240.0-190.226.248.255
                  200.43.55.0/24
                  200.43.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:3e:6e:3e:82:a7:68:7f:0b:0a:11:27:b3:09:e4:f5:fc:4a:
         0d:93:78:08:f2:ea:d8:09:49:98:f7:f3:38:d5:b4:36:71:61:
         78:d7:36:ed:68:6c:c2:e7:06:52:8a:e9:f3:b6:7a:0c:e0:20:
         fd:a7:dc:b1:81:0f:71:21:12:c3:8b:64:bc:35:c2:ce:28:c8:
         fd:b5:d0:84:25:1c:4d:2a:7a:90:0b:b7:fc:80:e7:65:ab:75:
         04:c4:5e:d0:e8:55:84:82:12:f7:65:8b:05:f4:b6:37:2d:c2:
         18:1d:25:1e:32:4e:9e:69:97:07:bd:37:b8:d1:97:71:3e:94:
         58:98:43:9f:63:c1:60:17:e6:3f:0a:12:d7:ae:9b:6d:ee:74:
         5d:70:52:e7:31:20:5d:a9:a1:b4:78:39:4d:5a:fb:1e:61:2c:
         03:fd:bc:fb:17:9d:8c:88:69:a4:53:6a:31:83:27:ca:98:94:
         0f:ab:38:4a:82:1a:e7:f3:ba:4a:0e:1f:ac:23:96:9d:79:52:
         3a:0d:38:1b:6a:89:30:00:21:85:aa:e1:fd:eb:6c:f6:00:06:
         19:8b:bb:4b:c1:95:15:a2:e7:6a:69:9f:7c:46:da:a6:2a:66:
         b7:22:e7:9a:fa:2a:ca:f6:f5:4e:ce:04:5a:e1:03:fe:3c:35:
         15:23:55:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:10:37 2025 by rpki-client