Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265877.roa
File:                     AS265877.roa (raw, json)
Hash identifier:          zLpKH1VgYjYbCrIvxWkYPyMVxWHZ7x9dBFCNY2KVNog=
Subject key identifier:   30:35:E0:93:48:6F:2B:0E:A3:98:23:0D:0A:AE:B5:51:5D:63:38:62
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       152CF684CB18AB51ED3FBCDFD5F86EA0B23D9145
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265877.roa
Signing time:             Tue 05 Mar 2024 18:12:33 +0000
ROA not before:           Tue 05 Mar 2024 18:07:33 +0000
ROA not after:            Tue 04 Mar 2025 18:12:33 +0000
asID:                     265877
IP address blocks:        200.43.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Sep 2024 10:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:2c:f6:84:cb:18:ab:51:ed:3f:bc:df:d5:f8:6e:a0:b2:3d:91:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Mar  5 18:07:33 2024 GMT
            Not After : Mar  4 18:12:33 2025 GMT
        Subject: CN=3035E093486F2B0EA398230D0AAEB5515D633862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c8:43:f5:4b:c0:07:f7:e0:00:03:4f:cc:d5:
                    0a:4f:52:fb:d4:ad:bb:8a:59:47:24:25:28:09:a2:
                    3f:66:d2:3b:48:b4:dd:18:6f:2c:8d:f3:29:34:09:
                    ea:ac:cc:c3:31:bd:e8:a7:d7:1b:70:a4:a4:69:52:
                    29:88:26:6b:64:d1:a1:d1:11:fa:7d:e6:28:5e:1e:
                    e1:25:0d:30:63:f9:60:d5:20:5b:ce:c7:3b:8c:19:
                    c4:8e:e1:d6:a1:a2:fe:97:20:57:c9:8f:1d:fe:28:
                    99:d0:59:75:43:e5:2c:d1:73:aa:77:39:04:49:11:
                    41:e4:2d:bd:d9:8a:d2:19:54:e3:5a:c6:1f:93:f4:
                    89:90:d0:07:8d:69:25:e6:5b:a2:ba:0f:c1:71:dc:
                    de:0a:9f:8a:44:d6:9b:c8:3a:4d:18:cb:db:0e:3f:
                    7f:01:79:56:0c:f3:41:dc:b1:61:c4:52:c3:89:26:
                    1d:63:73:66:f1:ac:40:ff:ff:95:a1:4e:aa:05:ac:
                    41:37:92:46:90:33:9c:4a:86:e6:46:96:ec:4a:9e:
                    92:ce:c6:99:ef:a0:2e:8b:ac:13:a7:49:8c:01:c1:
                    d4:32:c0:d6:0c:a6:13:29:1c:cd:cb:f5:07:2d:30:
                    f6:3d:e8:62:27:b1:d8:36:53:a8:07:06:37:0f:2a:
                    14:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:35:E0:93:48:6F:2B:0E:A3:98:23:0D:0A:AE:B5:51:5D:63:38:62
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265877.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.43.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:3b:b0:1a:6d:30:62:be:b5:a7:b3:39:c8:cf:12:c7:2f:a4:
         38:15:c1:e0:f6:ab:54:fa:1a:bc:e4:43:f0:b0:a0:7e:0e:08:
         37:0c:53:f3:ac:3c:4b:be:87:d2:96:2a:ba:46:44:0a:e5:5a:
         9a:58:e4:a4:46:90:c2:33:6e:14:5e:e3:f5:24:eb:d5:76:0b:
         16:4b:b9:5a:16:6a:e9:fa:66:ac:9f:c5:a3:ed:b6:11:95:08:
         46:54:0a:39:44:8f:e2:b3:f4:35:5f:fe:8c:ac:cc:d8:44:84:
         9e:a4:08:0d:fe:34:c9:eb:aa:fa:94:6b:c6:23:ab:09:9e:18:
         de:ac:e2:43:b4:4d:35:be:6c:48:fb:8a:6f:1e:5d:4a:8e:b7:
         4b:95:72:da:4f:db:60:f3:88:2d:ec:d4:3c:fa:72:5d:67:2d:
         d0:8f:76:c3:4e:93:9f:c7:f7:0e:62:cb:8a:66:f1:ed:25:09:
         68:35:e5:de:30:c3:9e:c6:07:b6:6b:b2:33:52:13:cf:7a:24:
         97:be:d3:2e:a4:29:ea:63:81:01:91:1a:6e:9d:4c:cc:95:95:
         6a:50:3f:86:50:c9:89:6f:0c:72:c5:1a:ce:52:6f:01:ea:a4:
         bc:47:c4:90:53:19:66:ae:80:b0:d5:3e:e9:a2:59:38:5c:69:
         2e:87:62:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 14:59:02 2024 by rpki-client on console-fra.rpki-client.org