Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265809.roa
File:                     AS265809.roa (raw, json)
Hash identifier:          6QwIbEWWDSESx6UeLhCxa9U3nIRjzR9OzFIMi1nZS3E=
Subject key identifier:   60:57:7D:02:68:B1:57:01:53:4B:21:3D:7D:91:5D:7A:D8:8D:72:01
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       4DC53AD05DFB8B708043C82AC69A39A368245820
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265809.roa
Signing time:             Tue 05 Mar 2024 18:12:28 +0000
ROA not before:           Tue 05 Mar 2024 18:07:28 +0000
ROA not after:            Tue 04 Mar 2025 18:12:28 +0000
asID:                     265809
IP address blocks:        190.228.32.0/24 maxlen: 24
                          190.228.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c5:3a:d0:5d:fb:8b:70:80:43:c8:2a:c6:9a:39:a3:68:24:58:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Mar  5 18:07:28 2024 GMT
            Not After : Mar  4 18:12:28 2025 GMT
        Subject: CN=60577D0268B15701534B213D7D915D7AD88D7201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ab:15:f6:55:fb:19:0b:63:d7:7a:1d:50:5e:
                    e5:78:5b:e5:70:9f:7d:04:15:bb:3b:61:6e:99:b0:
                    0f:56:3d:c4:9e:11:72:c4:08:29:dd:22:14:47:99:
                    66:b3:f1:22:03:33:0b:49:3e:3f:de:1f:b3:c5:6d:
                    01:bb:ab:e5:b7:55:9b:96:7e:7d:f0:2e:7d:9a:86:
                    a5:ef:68:eb:21:d7:70:cb:f0:c6:3d:8e:c8:b9:fe:
                    e2:c3:7c:c6:11:9a:54:9b:08:ef:2b:27:4b:89:03:
                    0d:74:49:0e:59:c4:ec:af:16:6d:af:2b:75:05:7a:
                    4c:b2:a6:9c:11:cf:95:80:e4:39:c8:1f:18:d2:8d:
                    09:73:b8:2b:2e:c6:81:e9:08:80:6d:57:90:59:7f:
                    79:25:40:16:3b:3e:1f:c7:81:71:8f:17:82:9a:1e:
                    46:8d:92:e8:8d:63:86:ae:0b:cc:2f:fd:83:ec:64:
                    95:22:e5:34:06:8d:4c:33:96:d6:90:2f:9e:f2:f7:
                    f2:9e:73:cf:f6:cf:99:d0:09:31:8c:a4:c3:ae:87:
                    79:69:42:3a:83:5e:f9:85:33:e3:68:ec:a8:c7:4d:
                    d8:6b:04:dd:79:7a:c6:44:85:a0:8f:88:37:40:42:
                    98:83:d8:01:ee:26:7a:ae:a1:c8:fe:ca:7b:9c:4b:
                    fc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:57:7D:02:68:B1:57:01:53:4B:21:3D:7D:91:5D:7A:D8:8D:72:01
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265809.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.228.32.0/24
                  190.228.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:67:52:b2:57:03:8b:9c:b0:c1:41:d1:67:90:05:e6:91:63:
         fd:f4:60:99:15:f7:42:2c:5c:4e:d8:1e:8f:b0:1f:42:62:bd:
         a7:46:0f:84:e1:21:ef:91:0d:7f:0b:77:74:ae:d0:01:cf:f7:
         fb:3b:cc:7a:55:51:4a:7c:13:58:8c:b9:cf:76:fe:12:8e:57:
         61:3e:83:ae:35:75:17:34:d3:13:4a:3b:10:b5:85:22:ae:81:
         7c:19:05:d3:c3:71:da:57:7c:55:92:34:5c:57:9b:e5:8d:a4:
         5a:1f:db:9f:72:86:dc:f9:67:54:ae:14:9d:55:63:ff:a5:bb:
         4f:96:3c:61:4d:52:27:2d:2e:3c:f2:e1:cc:05:3f:ae:27:60:
         b3:26:00:1b:3a:bf:de:c8:bb:f4:c3:57:90:4d:70:49:e7:86:
         c2:47:f9:52:fe:33:7e:fa:82:db:df:e3:60:d4:54:68:be:8b:
         3f:13:9a:65:5d:82:11:36:27:6d:f2:d0:75:46:e5:b1:8b:99:
         00:a9:7f:28:51:c0:26:43:d8:a1:dc:4b:6e:73:db:ef:69:63:
         f7:76:91:af:7f:a7:1b:e5:83:e2:8c:a0:a1:b9:9a:09:7e:70:
         36:64:95:a9:1d:4e:41:2e:6e:36:71:88:47:52:ef:c3:d5:32:
         05:c3:49:91
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIUTcU60F37i3CAQ8gqxpo5o2gkWCAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc0RDY4RjA2QkIxRjJFRDA5NEYwM0I1MkZFRDc1NjVG
NzgyNUQ5OTAeFw0yNDAzMDUxODA3MjhaFw0yNTAzMDQxODEyMjhaMDMxMTAvBgNV
BAMTKDYwNTc3RDAyNjhCMTU3MDE1MzRCMjEzRDdEOTE1RDdBRDg4RDcyMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpqxX2VfsZC2PXeh1QXuV4W+Vw
n30EFbs7YW6ZsA9WPcSeEXLECCndIhRHmWaz8SIDMwtJPj/eH7PFbQG7q+W3VZuW
fn3wLn2ahqXvaOsh13DL8MY9jsi5/uLDfMYRmlSbCO8rJ0uJAw10SQ5ZxOyvFm2v
K3UFekyyppwRz5WA5DnIHxjSjQlzuCsuxoHpCIBtV5BZf3klQBY7Ph/HgXGPF4Ka
HkaNkuiNY4auC8wv/YPsZJUi5TQGjUwzltaQL57y9/Kec8/2z5nQCTGMpMOuh3lp
QjqDXvmFM+No7KjHTdhrBN15esZEhaCPiDdAQpiD2AHuJnquocj+ynucS/yVAgMB
AAGjggKfMIICmzAdBgNVHQ4EFgQUYFd9AmixVwFTSyE9fZFdetiNcgEwHwYDVR0j
BBgwFoAUJ01o8Gux8u0JTwO1L+11ZfeCXZkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZF
MzY3QkEwQ0M4M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvMjc0RDY4RjA2QkIxRjJF
RDA5NEYwM0I1MkZFRDc1NjVGNzgyNUQ5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNzRENjhGMDZCQjFGMkVEMDk0
RjAzQjUyRkVENzU2NUY3ODI1RDk5LmNlcjCBmAYIKwYBBQUHAQsEgYswgYgwgYUG
CCsGAQUFBzALhnlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZFMzY3QkEwQ0M4
M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvQVMyNjU4MDkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAC+5CAD
BAC+5MgwDQYJKoZIhvcNAQELBQADggEBACFnUrJXA4ucsMFB0WeQBeaRY/30YJkV
90IsXE7YHo+wH0JivadGD4ThIe+RDX8Ld3Su0AHP9/s7zHpVUUp8E1iMuc92/hKO
V2E+g641dRc00xNKOxC1hSKugXwZBdPDcdpXfFWSNFxXm+WNpFof259yhtz5Z1Su
FJ1VY/+lu0+WPGFNUictLjzy4cwFP64nYLMmABs6v97Iu/TDV5BNcEnnhsJH+VL+
M376gtvf42DUVGi+iz8TmmVdghE2J23y0HVG5bGLmQCpfyhRwCZD2KHcS25z2+9p
Y/d2ka9/pxvlg+KMoKG5mgl+cDZklakdTkEubjZxiEdS78PVMgXDSZE=
-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:53 2024 by rpki-client on console-fra.rpki-client.org