Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS26105.roa
File:                     AS26105.roa (raw, json)
Hash identifier:          O766N1UIT9Dl9BTqJXaIlFU8jekyiSXEo1+Q7zb6h08=
Subject key identifier:   1C:47:E9:37:B2:65:B7:16:6B:6F:35:21:24:3B:2F:D5:68:6E:2A:E0
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       71B6D0B1ACE26F0A07FD0B08764526507B5653F7
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS26105.roa
Signing time:             Tue 05 Mar 2024 17:54:58 +0000
ROA not before:           Tue 05 Mar 2024 17:49:58 +0000
ROA not after:            Tue 04 Mar 2025 17:54:58 +0000
asID:                     26105
IP address blocks:        190.5.241.0/24 maxlen: 24
                          2803:600::/32 maxlen: 56

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b6:d0:b1:ac:e2:6f:0a:07:fd:0b:08:76:45:26:50:7b:56:53:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Mar  5 17:49:58 2024 GMT
            Not After : Mar  4 17:54:58 2025 GMT
        Subject: CN=1C47E937B265B7166B6F3521243B2FD5686E2AE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:39:08:7b:39:d9:58:0a:92:7d:7d:e7:34:b7:
                    14:18:ca:26:58:c8:5e:db:e3:db:0a:c1:05:01:95:
                    7b:b1:2f:db:c1:47:56:5f:86:5c:af:58:1c:1e:d3:
                    eb:bb:48:6f:b4:be:07:3f:b9:f9:4a:d7:c8:70:d8:
                    d8:0b:75:cc:73:7d:f9:4f:29:b5:3f:1d:e0:a5:12:
                    0a:4c:a3:b8:7e:38:59:96:8c:40:53:ca:e9:0f:d3:
                    d7:01:cb:a1:d6:8d:c4:5e:e3:83:32:c3:e3:3e:5c:
                    68:ef:ab:51:67:ce:1d:34:e6:6a:85:6f:87:30:93:
                    6e:ce:70:3d:31:eb:8c:31:53:11:30:ff:7c:f6:d9:
                    77:7a:de:eb:cf:eb:7f:62:82:f9:0b:58:ce:52:c2:
                    04:89:e6:5d:8b:c5:85:f7:e0:e3:eb:54:49:a6:5d:
                    2a:5e:b2:ce:8f:0d:6e:2e:7a:dc:a0:98:09:58:64:
                    6a:01:98:92:a5:61:8a:67:bb:4c:d1:ce:b0:95:e3:
                    0d:b1:18:fb:b9:5b:e4:d3:6b:7a:42:54:e8:28:b3:
                    97:3e:ca:9b:56:c5:32:db:e8:d6:14:22:2b:e1:c5:
                    3b:f5:27:ca:96:4a:2c:5e:e6:ad:17:5e:7f:0c:45:
                    75:71:bb:ae:c1:fd:bf:b3:1f:c8:43:c2:6e:61:11:
                    ac:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:47:E9:37:B2:65:B7:16:6B:6F:35:21:24:3B:2F:D5:68:6E:2A:E0
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS26105.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.241.0/24
                IPv6:
                  2803:600::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:ae:63:96:7a:09:53:e9:fd:d5:09:be:2e:8f:b6:9c:3f:b3:
         26:57:1b:82:77:ea:52:af:f6:6e:ef:20:5b:65:8c:fd:fb:e0:
         d4:96:9e:01:d9:23:2e:f2:91:b9:52:0f:69:4a:af:61:1a:97:
         ab:c9:db:79:a6:a1:51:a1:b8:89:50:3d:26:e5:0c:5c:ff:a4:
         3f:90:78:3d:9e:f8:8f:49:02:22:d9:c1:95:60:1d:9b:db:44:
         e5:b2:5d:47:b8:c5:0f:7c:7c:86:4b:14:41:f9:2f:60:01:b8:
         76:5b:6f:1c:d2:4d:91:4a:d8:c5:de:b8:6a:b5:60:14:e2:20:
         26:d4:69:ab:d4:2c:5b:95:10:57:3c:d6:dd:50:ff:c9:aa:79:
         10:f0:96:eb:69:90:49:95:ba:c9:15:e7:96:55:a0:ca:23:26:
         b6:8f:56:b1:40:4f:2e:19:52:d9:8c:af:23:2e:a4:30:40:5b:
         13:c4:b1:dc:96:25:fa:bd:cc:b8:99:dc:b1:af:ce:be:e1:05:
         f1:55:13:94:e4:a6:ef:7b:7e:94:1e:08:cf:f7:6d:7e:18:69:
         bd:a5:de:ab:bb:95:32:1d:ce:cb:c3:5a:14:9e:e8:33:d7:7c:
         2f:1b:a3:47:21:e8:d4:19:02:33:d9:f2:65:c8:4f:3c:c7:9c:
         c6:e4:df:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org