Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS263733.roa
File:                     AS263733.roa (raw, json)
Hash identifier:          CeQTrPecbvPaT7THgRvV58pcIvA+gvL9lwFnmTLX4E4=
Subject key identifier:   05:2B:29:7A:5D:8A:33:6D:CC:F2:BA:5B:2B:A1:FD:43:F4:83:B7:35
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       73DA55DA5BF19960E85DA91CBA92C82D13EB0551
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS263733.roa
Signing time:             Tue 05 Mar 2024 17:55:01 +0000
ROA not before:           Tue 05 Mar 2024 17:50:01 +0000
ROA not after:            Tue 04 Mar 2025 17:55:01 +0000
asID:                     263733
IP address blocks:        200.46.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:da:55:da:5b:f1:99:60:e8:5d:a9:1c:ba:92:c8:2d:13:eb:05:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Mar  5 17:50:01 2024 GMT
            Not After : Mar  4 17:55:01 2025 GMT
        Subject: CN=052B297A5D8A336DCCF2BA5B2BA1FD43F483B735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:61:d5:ea:72:05:78:08:81:98:fb:da:a9:95:
                    12:fe:b0:e8:4c:d8:19:1e:03:41:e7:58:57:58:ff:
                    31:3f:cc:b7:cd:21:61:cf:de:8c:f0:74:49:61:ae:
                    5b:90:9f:34:86:7f:78:e5:83:e3:e4:2d:9e:d8:23:
                    16:04:2e:3a:76:df:e1:f1:b5:81:4b:a9:63:10:6a:
                    ff:ac:6b:cd:fa:86:35:f6:1e:95:15:86:49:73:2d:
                    7d:13:d2:b3:63:3f:0f:6e:53:70:fc:f2:88:7e:22:
                    99:70:ce:d0:2f:fa:21:c9:18:9b:ef:cb:fb:20:d3:
                    1a:f7:71:cf:93:50:17:8a:37:f4:67:9f:aa:e8:bb:
                    e4:4e:29:d0:6c:3d:90:66:e3:93:a3:94:c0:33:c2:
                    0b:f2:7f:46:83:f2:8f:20:48:b0:06:49:9e:45:c9:
                    4d:96:90:7a:e8:fd:d2:ff:68:ee:94:a2:c9:8c:43:
                    2f:8a:f5:78:9e:17:00:53:4b:fd:8c:1d:de:3f:1a:
                    4e:e8:5e:7b:72:64:d7:86:71:a7:e5:d0:20:cb:ba:
                    fb:e5:13:7c:a3:ee:07:d7:08:15:77:78:e1:c5:a8:
                    56:69:09:90:ac:19:e4:fd:e7:3d:b0:72:4f:b7:77:
                    f7:9c:d1:50:be:a4:95:ae:73:a2:fd:57:b1:ad:5d:
                    66:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2B:29:7A:5D:8A:33:6D:CC:F2:BA:5B:2B:A1:FD:43:F4:83:B7:35
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS263733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:7a:dc:c8:29:94:25:33:63:b6:3f:e5:f6:2f:c4:e0:0e:22:
         48:28:56:03:4f:16:43:c5:47:40:67:ee:40:0a:84:5d:ac:d1:
         4c:60:87:25:01:cd:12:95:c7:0c:c9:ca:13:f3:96:4b:a3:22:
         d2:de:a6:84:3b:62:54:4c:58:44:5d:2a:f5:9c:2b:98:b5:46:
         08:f4:81:2f:fc:f6:28:98:38:5a:cf:2e:95:ff:39:70:09:9e:
         8c:b9:3b:c1:23:c1:78:a1:c5:f1:f4:9d:a0:47:00:ab:26:0e:
         d7:59:ff:ff:90:e7:7e:0c:8c:da:6c:ae:9e:d4:c9:6f:48:d8:
         e8:fb:96:c2:0e:bd:b8:18:37:aa:2d:30:79:08:26:ba:31:b7:
         ff:3f:4c:03:89:12:4b:c2:37:67:98:a7:46:e4:58:56:f6:29:
         5e:de:23:a9:d4:35:b2:7e:0d:4f:e6:22:07:d3:71:35:91:4c:
         6c:76:10:54:0b:4e:a5:36:42:31:d3:5f:af:fc:9f:61:60:dc:
         e5:61:c8:7f:64:73:ee:83:5a:e2:b1:81:d2:b5:1b:07:50:5d:
         65:2b:26:20:ab:06:cb:37:d1:2e:e6:7e:a0:7e:72:d7:c9:39:
         6e:09:d2:59:88:e5:61:16:e5:21:a0:b5:8e:84:84:60:0a:6c:
         31:be:b9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org