Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS269823.roa
File:                     AS269823.roa (raw, json)
Hash identifier:          XInDGdNeBkno+d7fUcfUzPHqG+OcPKDBuVvW5aBiGBA=
Subject key identifier:   B5:77:4C:3F:9A:1A:DF:E1:FC:DC:63:C3:27:75:98:EB:83:11:7D:4A
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       6DEA9CA2D8DF1147ADC95B827FD32BB9BA4766D9
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS269823.roa
Signing time:             Wed 29 Oct 2025 17:05:00 +0000
ROA not before:           Wed 29 Oct 2025 17:00:00 +0000
ROA not after:            Wed 28 Oct 2026 17:05:00 +0000
asID:                     269823
IP address blocks:        201.251.7.128/26 maxlen: 26
                          201.251.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 08 Nov 2025 08:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ea:9c:a2:d8:df:11:47:ad:c9:5b:82:7f:d3:2b:b9:ba:47:66:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Oct 29 17:00:00 2025 GMT
            Not After : Oct 28 17:05:00 2026 GMT
        Subject: CN=B5774C3F9A1ADFE1FCDC63C3277598EB83117D4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f1:40:60:70:3f:d0:74:23:25:78:4a:04:c2:
                    b4:55:f8:5b:ae:ae:f6:2e:25:27:44:4b:3b:d7:f8:
                    fe:4b:bf:82:a8:01:5f:6c:99:96:31:cb:19:6b:73:
                    8b:91:7d:c2:47:83:80:99:02:9a:12:cd:6e:d7:e6:
                    a1:1a:17:a5:3b:64:bc:23:3f:5c:b2:3d:db:c9:28:
                    ea:f2:c3:ba:6c:d9:be:27:12:b6:7a:53:46:9d:71:
                    fb:ee:76:c9:18:c8:84:f6:73:02:44:8a:90:a6:45:
                    61:19:c7:d2:3f:bf:5b:86:86:18:3a:bc:58:46:be:
                    12:8c:e2:fc:df:77:ff:65:18:d9:49:87:4e:f0:a8:
                    4f:5c:9e:57:3b:59:96:f5:ed:64:16:a9:da:7f:b2:
                    a2:de:62:34:ca:ba:be:2e:de:bd:3d:16:0f:20:8e:
                    e9:a6:08:d4:d9:26:4a:e0:68:14:c5:2b:74:b0:25:
                    79:7a:43:32:c6:51:9c:54:d9:d3:4d:5c:38:eb:9d:
                    68:74:7c:1f:25:d7:cf:a9:5d:d2:3f:44:e6:ae:56:
                    90:0c:4d:1b:5f:af:1c:d2:b9:3a:38:1a:4e:12:ae:
                    01:4c:5a:b7:9c:36:76:64:f6:e6:3d:01:d9:ce:c0:
                    84:ae:53:81:d8:bb:26:c0:d4:04:a5:34:d0:87:81:
                    04:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:77:4C:3F:9A:1A:DF:E1:FC:DC:63:C3:27:75:98:EB:83:11:7D:4A
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS269823.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.251.7.128/26
                  201.251.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:b3:7c:be:2c:6e:22:47:5e:02:25:87:73:f4:3a:2e:8c:e5:
         f5:97:15:f4:c3:5d:0b:9b:8f:49:be:3a:5a:96:ca:be:40:0c:
         f7:d1:1d:b1:6f:20:8d:2d:56:ed:43:49:0a:b0:86:7c:25:fa:
         e6:9c:3b:fa:bd:d1:0b:8b:dd:75:1a:89:fe:c6:0e:c1:d5:80:
         da:ab:8c:fb:fa:7d:64:bf:0d:39:76:da:62:58:31:eb:5e:fc:
         c9:b3:6f:20:72:6b:93:74:ac:73:d0:e1:91:62:96:a4:37:95:
         8a:9b:8c:1c:86:d9:9f:cb:5b:55:67:18:e0:48:d4:40:aa:7f:
         10:85:8d:f9:88:fa:3a:6a:a7:2e:88:d9:9c:6d:5b:e4:9c:4a:
         e9:a7:5a:e9:c5:20:49:aa:a0:9b:df:07:fa:4d:41:7c:62:15:
         a7:1c:1e:0c:96:7f:e7:94:43:5c:26:07:93:e5:89:05:4c:4e:
         30:c3:bb:3e:5a:14:7a:93:a1:93:8f:6b:8a:e7:7a:00:97:63:
         9b:d8:3a:04:8b:8e:1e:88:a5:d8:4a:05:ae:51:4d:e1:72:3b:
         59:a7:91:09:89:bf:f1:b7:3e:48:6b:aa:10:55:bb:a3:af:5d:
         00:43:81:37:87:43:bc:2f:dd:11:cb:e8:78:3b:1f:c5:ba:e5:
         d1:5a:4b:09
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIUbeqcotjfEUetyVuCf9MrubpHZtkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEwODE5QzdDOUI0Qzg1Q0UwQjFEMjI3NDFCRTVFNDBB
MUYwRTdCMTAeFw0yNTEwMjkxNzAwMDBaFw0yNjEwMjgxNzA1MDBaMDMxMTAvBgNV
BAMTKEI1Nzc0QzNGOUExQURGRTFGQ0RDNjNDMzI3NzU5OEVCODMxMTdENEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg8UBgcD/QdCMleEoEwrRV+Fuu
rvYuJSdESzvX+P5Lv4KoAV9smZYxyxlrc4uRfcJHg4CZApoSzW7X5qEaF6U7ZLwj
P1yyPdvJKOryw7ps2b4nErZ6U0adcfvudskYyIT2cwJEipCmRWEZx9I/v1uGhhg6
vFhGvhKM4vzfd/9lGNlJh07wqE9cnlc7WZb17WQWqdp/sqLeYjTKur4u3r09Fg8g
jummCNTZJkrgaBTFK3SwJXl6QzLGUZxU2dNNXDjrnWh0fB8l18+pXdI/ROauVpAM
TRtfrxzSuTo4Gk4SrgFMWrecNnZk9uY9AdnOwISuU4HYuybA1ASlNNCHgQTJAgMB
AAGjggKgMIICnDAdBgNVHQ4EFgQUtXdMP5oa3+H83GPDJ3WY64MRfUowHwYDVR0j
BBgwFoAUQQgZx8m0yFzgsdInQb5eQKHw57EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RDFBNUU2NUFDQjQxNzMzOTg1NUFEQTVBNkM1NDE2REMw
NDFDQ0YwNjQwODAzODQzODk4QkU1NkM0REY2QzMyLzAvNDEwODE5QzdDOUI0Qzg1
Q0UwQjFEMjI3NDFCRTVFNDBBMUYwRTdCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MTA4MTlDN0M5QjRDODVDRTBC
MUQyMjc0MUJFNUU0MEExRjBFN0IxLmNlcjCBmAYIKwYBBQUHAQsEgYswgYgwgYUG
CCsGAQUFBzALhnlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy81RDFBNUU2NUFDQjQxNzMzOTg1NUFEQTVBNkM1NDE2REMwNDFDQ0YwNjQw
ODAzODQzODk4QkU1NkM0REY2QzMyLzAvQVMyNjk4MjMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJgYIKwYBBQUHAQcBAf8EFzAVMBMEAgABMA0DBQbJ+weA
AwQAyfvvMA0GCSqGSIb3DQEBCwUAA4IBAQBHs3y+LG4iR14CJYdz9DoujOX1lxX0
w10Lm49Jvjpalsq+QAz30R2xbyCNLVbtQ0kKsIZ8JfrmnDv6vdELi911Gon+xg7B
1YDaq4z7+n1kvw05dtpiWDHrXvzJs28gcmuTdKxz0OGRYpakN5WKm4wchtmfy1tV
ZxjgSNRAqn8QhY35iPo6aqcuiNmcbVvknErpp1rpxSBJqqCb3wf6TUF8YhWnHB4M
ln/nlENcJgeT5YkFTE4ww7s+WhR6k6GTj2uK53oAl2Ob2DoEi44eiKXYSgWuUU3h
cjtZp5EJib/xtz5Ia6oQVbujr10AQ4E3h0O8L90Ry+h4Ox/FuuXRWksJ
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:27:49 2025 by rpki-client