Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265663.roa
File:                     AS265663.roa (raw, json)
Hash identifier:          M5K6jxlfn08iRwJXNKSEa9WJGaaVdMycuAV3uzi5bjI=
Subject key identifier:   4E:E2:BF:A3:2C:80:2D:74:03:A6:76:5E:C2:CE:31:84:C0:30:1F:BC
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       6CDAA7A9EC2D657FED5737A7DAAE1CB19F63E2FC
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265663.roa
Signing time:             Tue 05 Mar 2024 18:12:35 +0000
ROA not before:           Tue 05 Mar 2024 18:07:35 +0000
ROA not after:            Tue 04 Mar 2025 18:12:35 +0000
asID:                     265663
IP address blocks:        181.14.239.0/24 maxlen: 24
                          190.227.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:da:a7:a9:ec:2d:65:7f:ed:57:37:a7:da:ae:1c:b1:9f:63:e2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Mar  5 18:07:35 2024 GMT
            Not After : Mar  4 18:12:35 2025 GMT
        Subject: CN=4EE2BFA32C802D7403A6765EC2CE3184C0301FBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2f:87:ff:3b:44:98:cd:2a:f0:1a:20:2f:8f:
                    a8:e0:54:49:06:a2:13:fc:c9:a8:fa:46:16:c0:35:
                    e8:83:be:73:59:55:89:e2:95:8b:f2:c3:6d:04:8b:
                    d8:c5:42:dd:f8:32:5a:fa:9f:bd:e9:15:1f:36:2f:
                    2f:9d:43:e5:b4:a9:97:4b:f9:98:29:cb:cf:90:cd:
                    db:34:3f:18:f2:b3:a3:84:3e:09:87:e6:41:21:f2:
                    7c:3e:f4:c6:1f:c2:c7:b5:47:43:fe:db:20:5a:98:
                    33:19:8c:3f:d1:53:3e:c5:4a:c9:43:f6:96:59:e8:
                    79:23:cc:4d:75:09:21:a5:ae:3a:4c:25:cb:da:17:
                    42:2e:13:cb:e7:e0:bb:c4:b4:5a:54:95:28:a3:82:
                    39:42:20:72:40:55:58:f3:90:1a:75:ff:59:73:b4:
                    85:89:09:a6:58:5f:51:08:f8:4f:24:d0:db:6f:27:
                    ac:0a:34:f3:45:af:a6:e1:a3:8a:94:ae:95:9a:60:
                    ca:02:f4:75:46:d4:51:aa:43:c3:e4:74:c7:e1:48:
                    c6:39:3f:e3:32:e5:94:9a:47:75:cd:e0:69:d1:86:
                    73:56:4e:4f:25:70:68:c7:f1:33:11:17:c2:da:28:
                    c3:32:80:89:0b:ad:1d:c8:c4:47:8a:19:22:43:56:
                    d5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E2:BF:A3:2C:80:2D:74:03:A6:76:5E:C2:CE:31:84:C0:30:1F:BC
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265663.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.14.239.0/24
                  190.227.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:cd:c3:d2:5f:40:4d:70:8e:91:74:b7:60:f1:b3:1b:31:32:
         04:8f:ce:5c:73:d4:1d:b5:83:b8:a1:40:6e:f7:0c:39:ce:bf:
         ec:e2:71:3d:56:6c:47:60:f8:e6:60:ec:7e:be:23:5d:ef:2c:
         80:5a:21:c0:c0:4b:47:9c:30:81:ec:1e:2f:80:e4:16:e9:44:
         86:15:fb:31:5e:06:6d:01:07:f6:12:00:e3:a8:88:eb:9b:40:
         1a:96:22:79:2f:70:f3:49:ad:75:64:b1:e0:c9:fc:da:dd:37:
         8a:07:b2:cc:87:8f:d8:21:11:84:8a:33:c8:af:86:3b:f2:c9:
         9a:ef:12:93:3c:48:ce:69:99:4d:51:92:e3:38:3f:80:11:e9:
         95:c1:d9:05:95:8b:e0:b8:5c:17:ba:a9:40:3d:92:6c:8b:e8:
         70:6c:16:d2:2e:9a:b6:9e:78:bf:bd:0f:be:eb:74:e9:e2:07:
         b5:a8:24:fa:90:56:bc:56:66:f5:91:15:b4:d3:c5:12:09:5e:
         6f:4e:71:36:e1:cf:8f:be:29:01:97:2f:3e:fe:bd:8f:f6:58:
         67:76:a9:a9:e5:2b:20:3b:44:55:5f:8d:10:dd:fc:a0:34:a3:
         19:90:d1:4c:13:56:ab:3a:e5:6f:36:58:19:f9:4b:98:da:c1:
         55:04:b1:46
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIUbNqnqewtZX/tVzen2q4csZ9j4vwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc0RDY4RjA2QkIxRjJFRDA5NEYwM0I1MkZFRDc1NjVG
NzgyNUQ5OTAeFw0yNDAzMDUxODA3MzVaFw0yNTAzMDQxODEyMzVaMDMxMTAvBgNV
BAMTKDRFRTJCRkEzMkM4MDJENzQwM0E2NzY1RUMyQ0UzMTg0QzAzMDFGQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvL4f/O0SYzSrwGiAvj6jgVEkG
ohP8yaj6RhbANeiDvnNZVYnilYvyw20Ei9jFQt34Mlr6n73pFR82Ly+dQ+W0qZdL
+Zgpy8+Qzds0Pxjys6OEPgmH5kEh8nw+9MYfwse1R0P+2yBamDMZjD/RUz7FSslD
9pZZ6HkjzE11CSGlrjpMJcvaF0IuE8vn4LvEtFpUlSijgjlCIHJAVVjzkBp1/1lz
tIWJCaZYX1EI+E8k0NtvJ6wKNPNFr6bho4qUrpWaYMoC9HVG1FGqQ8PkdMfhSMY5
P+My5ZSaR3XN4GnRhnNWTk8lcGjH8TMRF8LaKMMygIkLrR3IxEeKGSJDVtXbAgMB
AAGjggKfMIICmzAdBgNVHQ4EFgQUTuK/oyyALXQDpnZews4xhMAwH7wwHwYDVR0j
BBgwFoAUJ01o8Gux8u0JTwO1L+11ZfeCXZkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZF
MzY3QkEwQ0M4M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvMjc0RDY4RjA2QkIxRjJF
RDA5NEYwM0I1MkZFRDc1NjVGNzgyNUQ5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNzRENjhGMDZCQjFGMkVEMDk0
RjAzQjUyRkVENzU2NUY3ODI1RDk5LmNlcjCBmAYIKwYBBQUHAQsEgYswgYgwgYUG
CCsGAQUFBzALhnlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZFMzY3QkEwQ0M4
M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvQVMyNjU2NjMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAC1Du8D
BAC+46AwDQYJKoZIhvcNAQELBQADggEBAJfNw9JfQE1wjpF0t2DxsxsxMgSPzlxz
1B21g7ihQG73DDnOv+zicT1WbEdg+OZg7H6+I13vLIBaIcDAS0ecMIHsHi+A5Bbp
RIYV+zFeBm0BB/YSAOOoiOubQBqWInkvcPNJrXVkseDJ/NrdN4oHssyHj9ghEYSK
M8ivhjvyyZrvEpM8SM5pmU1RkuM4P4AR6ZXB2QWVi+C4XBe6qUA9kmyL6HBsFtIu
mraeeL+9D77rdOniB7WoJPqQVrxWZvWRFbTTxRIJXm9OcTbhz4++KQGXLz7+vY/2
WGd2qanlKyA7RFVfjRDd/KA0oxmQ0UwTVqs65W82WBn5S5jawVUEsUY=
-----END CERTIFICATE-----
Generated at Tue Apr 30 19:14:08 2024 by rpki-client on console-ams.rpki-client.org