Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS262198.roa
File:                     AS262198.roa (raw, json)
Hash identifier:          ATX2NlNpmhOV2XHC6A7rT5Plco6PcPcP/zFUmju/7uA=
Subject key identifier:   73:AB:A3:49:7E:F5:49:C4:51:D0:A1:5C:26:EC:DD:DB:53:21:98:FD
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       7F81FBFAE24165C4386398381999EBA40859F678
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS262198.roa
Signing time:             Tue 05 Mar 2024 17:55:01 +0000
ROA not before:           Tue 05 Mar 2024 17:50:01 +0000
ROA not after:            Tue 04 Mar 2025 17:55:01 +0000
asID:                     262198
IP address blocks:        201.218.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:81:fb:fa:e2:41:65:c4:38:63:98:38:19:99:eb:a4:08:59:f6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Mar  5 17:50:01 2024 GMT
            Not After : Mar  4 17:55:01 2025 GMT
        Subject: CN=73ABA3497EF549C451D0A15C26ECDDDB532198FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:02:82:92:bf:f7:34:8d:36:db:8c:51:e9:6c:
                    ff:9a:fa:99:98:f0:90:51:24:c3:13:ae:78:94:8f:
                    e3:1a:e1:e5:5d:9c:3b:ec:b7:78:84:6c:40:81:8c:
                    e0:45:ef:a3:7a:f0:66:d5:3c:29:e4:81:b5:de:38:
                    9e:88:6b:f3:fe:a2:0a:44:f6:43:d5:3f:a8:80:ef:
                    05:5f:8c:ed:8d:11:9a:48:29:63:d7:71:ae:90:ec:
                    f2:2a:a5:b7:7f:fb:dd:c3:f9:c4:8d:0e:e6:5e:9d:
                    37:2b:59:d8:0d:1c:2f:99:85:f1:10:d7:a4:7d:25:
                    c9:09:5c:69:a3:1a:59:80:ae:17:e9:7d:33:68:24:
                    45:15:68:63:18:65:3e:86:78:19:a5:5d:02:cb:bd:
                    c2:c9:e1:a3:cc:b0:4c:d1:0b:23:3a:4c:98:8a:9f:
                    d8:a7:b3:9e:8e:0f:b5:a0:fc:80:4b:57:ec:68:7a:
                    a9:d0:6e:d7:6d:6f:64:b5:fa:e3:f4:39:43:58:7a:
                    a5:cc:79:3a:c6:7e:a0:69:51:50:6d:9b:86:54:6c:
                    02:4d:b1:be:02:8e:b2:96:05:29:e3:c0:70:88:a4:
                    6c:27:83:cf:0b:18:4f:ff:9e:15:67:ef:bc:e2:64:
                    52:b4:ac:41:0c:3f:f6:97:73:31:2e:41:33:29:26:
                    ed:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AB:A3:49:7E:F5:49:C4:51:D0:A1:5C:26:EC:DD:DB:53:21:98:FD
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS262198.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:05:30:86:61:eb:36:36:9a:be:cc:8a:4d:06:f5:70:e8:13:
         1b:aa:e8:bb:63:fb:74:31:29:a9:5a:fd:26:83:ae:8b:4c:07:
         05:a0:3d:05:71:8a:5e:32:e7:46:f9:4c:0b:ea:1c:5a:b4:72:
         fb:9f:3b:84:70:dc:1e:8c:2a:b0:9c:12:94:b8:01:e0:f7:85:
         af:fc:17:59:6d:ae:6d:98:aa:af:a9:12:df:83:d3:1c:34:55:
         44:18:f5:24:36:2d:b3:c0:b5:b4:b4:d4:fc:2d:99:25:53:04:
         59:f0:da:ff:44:97:fe:fd:06:39:ad:f8:12:02:28:a5:d9:90:
         7f:95:f9:97:90:36:c4:4c:72:65:a7:33:ad:f0:a3:06:25:27:
         4c:d6:f5:73:11:10:a4:12:c2:e5:d3:79:2a:dd:46:23:dd:e9:
         8c:71:c8:bb:80:1d:ae:0a:03:51:bf:26:60:05:63:7d:d3:29:
         46:a1:ad:49:40:f1:22:50:99:ce:e8:f0:33:19:ba:05:7d:bd:
         d9:21:4a:58:9e:14:32:3f:78:0a:09:22:c1:ab:6d:ed:b3:4a:
         ef:8c:95:be:dc:3a:a8:36:d7:c8:ea:69:75:1c:fe:62:06:82:
         85:e3:28:53:4d:3f:7b:70:5b:3d:c1:0b:f7:47:c4:5b:a5:d5:
         0a:a4:d1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:54 2024 by rpki-client on console-fra.rpki-client.org