Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS263738.roa
File:                     AS263738.roa (raw, json)
Hash identifier:          O5FVFv2wsGsprsnvfccTlMTDcBTvW4yajmdSRR4x4HM=
Subject key identifier:   BA:D6:18:32:DF:56:34:1B:A4:1B:78:4E:E5:71:71:6A:F5:5F:F6:AE
Certificate issuer:       /CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
Certificate serial:       2B57034FEB42AC1189588BB6441156E9DC90CCA7
Authority key identifier: 72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS263738.roa
Signing time:             Tue 04 Feb 2025 18:07:29 +0000
ROA not before:           Tue 04 Feb 2025 18:02:29 +0000
ROA not after:            Tue 03 Feb 2026 18:07:29 +0000
asID:                     263738
IP address blocks:        200.7.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:57:03:4f:eb:42:ac:11:89:58:8b:b6:44:11:56:e9:dc:90:cc:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
        Validity
            Not Before: Feb  4 18:02:29 2025 GMT
            Not After : Feb  3 18:07:29 2026 GMT
        Subject: CN=BAD61832DF56341BA41B784EE571716AF55FF6AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4b:0a:82:c2:c9:ce:62:a0:d9:2b:04:d4:95:
                    62:77:a2:5d:23:23:fa:c4:e0:b6:43:d4:17:46:42:
                    ac:5c:26:71:e6:03:a6:a8:46:72:ea:da:9f:d5:1d:
                    3e:06:b3:14:50:a0:14:2d:40:5b:21:1f:03:48:12:
                    b4:9d:08:a7:19:b4:cd:9c:3e:73:33:34:4a:a4:ea:
                    24:8c:46:60:da:b3:ab:50:80:7f:d0:bd:25:35:64:
                    8e:c0:27:ea:01:bb:79:7e:1a:6a:d4:1e:cb:b9:ec:
                    8c:e1:49:2d:1d:cb:b5:54:8a:70:ca:d9:e6:76:f1:
                    62:40:fc:c7:22:c4:1f:3d:1e:8b:33:98:04:d5:89:
                    54:9d:11:70:3c:52:b3:a6:ab:58:74:e7:36:71:93:
                    5d:aa:4a:b6:8b:16:10:1e:01:57:e6:aa:2c:75:0a:
                    0d:6b:0c:cc:84:8e:0a:73:17:0b:4c:3a:cc:87:3e:
                    41:84:f9:fc:fa:0c:7b:80:64:b5:bc:99:6e:dd:a8:
                    22:5b:d0:73:31:6d:35:3a:5f:77:08:93:7e:5f:e9:
                    7f:7c:34:a0:3e:0f:77:c7:38:d7:96:ab:14:08:f7:
                    87:eb:17:45:2c:b9:d0:29:fd:ab:00:55:41:3f:6c:
                    30:9f:1f:b7:c8:19:ae:24:57:da:75:fd:a2:f5:5d:
                    87:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D6:18:32:DF:56:34:1B:A4:1B:78:4E:E5:71:71:6A:F5:5F:F6:AE
            X509v3 Authority Key Identifier:
                keyid:72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS263738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:42:f4:64:2e:af:b8:13:3e:47:5d:40:9d:09:97:27:a9:67:
         2a:a8:0c:9a:9e:f2:c6:af:99:23:49:e8:3d:75:bd:82:64:99:
         0e:23:b7:94:d0:37:b5:11:de:08:ca:41:c0:7f:13:c5:97:2b:
         f8:c7:f4:38:73:d8:bb:17:d8:dd:40:43:d7:b3:85:6a:4e:d2:
         3e:d5:76:c1:4b:4e:31:ac:e7:93:f1:07:0b:d9:9b:6e:37:ce:
         1f:7c:91:2d:a2:7b:ae:24:17:6c:13:41:42:ef:5a:e3:61:e4:
         f3:fb:85:d6:6c:1f:33:f0:b3:f8:d7:92:13:81:fc:13:48:32:
         f1:39:b5:d5:86:bf:39:dd:d3:19:6f:57:b0:6b:f4:91:a7:f2:
         68:f8:ea:03:74:67:04:cd:4c:15:3b:3c:f6:17:c8:dc:dc:9c:
         96:a9:0f:26:77:bd:89:c0:f8:0c:d0:09:08:72:02:a5:7f:ca:
         b7:86:51:b6:0a:8d:cf:0f:34:ea:7c:e0:7a:7a:a7:fa:8d:d4:
         d7:a8:22:13:64:e7:d2:dc:24:47:77:98:87:95:c2:06:6d:f6:
         c3:be:b5:1f:be:1c:98:47:24:ac:d5:f2:75:e9:98:94:53:79:
         3a:54:e4:bb:8c:b6:5c:9c:8a:89:14:db:cc:64:82:60:26:ef:
         38:6c:84:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:00 2025 by rpki-client on console.sobornost.net