Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS265844.roa
File:                     AS265844.roa (raw, json)
Hash identifier:          RxAET3dtUfmQ0Lw+Qu9EXlEsG08izBVZVqy6E05HOOU=
Subject key identifier:   5B:04:8C:42:C2:E2:E0:ED:1A:E8:18:82:2E:27:26:9E:FB:A1:F7:FB
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       650ABA784D3991F487E4417A4D8A4863834B9CD9
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS265844.roa
Signing time:             Wed 29 Oct 2025 17:05:00 +0000
ROA not before:           Wed 29 Oct 2025 17:00:00 +0000
ROA not after:            Wed 28 Oct 2026 17:05:00 +0000
asID:                     265844
IP address blocks:        200.51.231.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0a:ba:78:4d:39:91:f4:87:e4:41:7a:4d:8a:48:63:83:4b:9c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Oct 29 17:00:00 2025 GMT
            Not After : Oct 28 17:05:00 2026 GMT
        Subject: CN=5B048C42C2E2E0ED1AE818822E27269EFBA1F7FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:29:db:3c:ed:8a:fb:4b:a3:e8:0e:4e:59:0a:
                    d0:13:7f:69:a0:ee:58:b4:03:94:90:53:25:68:ff:
                    78:9d:0f:ef:e3:2b:7f:9b:d1:da:99:33:5b:0b:35:
                    e8:ad:cd:ee:1d:a3:d1:41:4e:85:3c:90:df:eb:be:
                    34:34:a1:59:57:94:d5:da:9e:ba:5c:af:e3:e0:e8:
                    59:56:46:3f:aa:6e:1e:4e:58:42:42:1d:bb:cc:3e:
                    4a:10:fe:46:f3:1b:bb:39:8e:51:f3:e8:9a:a1:4e:
                    53:39:4b:a7:84:c8:13:8e:03:64:1b:c6:49:28:a4:
                    b1:82:65:14:11:ec:c0:3d:69:95:cf:2a:cd:54:00:
                    62:dd:cf:68:3f:fd:62:02:b6:76:b2:98:96:d9:f3:
                    f1:4d:40:97:15:41:67:9e:51:e6:4e:c7:0e:71:10:
                    11:4c:44:d2:e9:e5:84:6d:ec:ea:42:95:75:c8:55:
                    b0:34:f1:ad:1c:e4:c8:53:50:91:c0:89:b2:bd:5a:
                    a0:4e:46:56:bc:b3:f7:86:a3:f7:69:55:7e:c0:30:
                    b7:38:f5:58:76:b3:d3:ed:01:b7:6c:f2:34:ab:db:
                    7c:2f:a8:b8:54:13:03:99:90:6e:75:85:3e:5f:96:
                    b5:46:39:7e:36:4e:d3:4e:3b:90:e6:35:e0:d2:fc:
                    23:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:04:8C:42:C2:E2:E0:ED:1A:E8:18:82:2E:27:26:9E:FB:A1:F7:FB
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS265844.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.51.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:4f:28:f8:9c:97:7e:53:41:cf:72:5b:d8:a6:37:bc:08:59:
         04:16:47:a3:1a:2a:52:6d:6d:41:37:97:ce:40:dd:16:26:89:
         1a:08:cb:0f:48:18:9c:37:9b:41:b1:c9:3b:db:ec:82:bd:a0:
         03:35:c4:76:3f:f6:37:28:e1:ec:1e:8d:44:67:84:7c:8b:d2:
         98:b1:29:98:b3:11:40:00:93:82:7d:d5:81:d1:95:88:ce:97:
         88:39:ca:8a:53:47:d3:ee:75:98:a2:37:e3:5b:f4:16:b0:9d:
         64:ab:31:1b:da:33:10:9b:6a:83:48:54:b7:9a:64:f9:22:f5:
         8b:dc:45:0f:68:6d:ae:41:c0:2d:4a:d6:ff:41:95:21:ef:81:
         49:41:54:2a:64:e4:5d:87:7a:db:7b:a1:20:33:93:4c:9d:87:
         6f:0e:58:11:b0:f6:cf:67:5a:0f:e9:61:46:9e:62:39:2a:90:
         1f:9d:e6:ea:d1:c9:29:72:dc:7e:d8:78:e5:78:f0:87:b6:ca:
         7a:c6:40:d0:39:1a:82:eb:05:7b:de:57:6d:cf:8a:36:28:63:
         eb:a2:fc:84:0d:eb:f7:1b:1a:2e:4c:a6:b3:3a:3a:fa:88:6c:
         81:96:64:b9:92:a8:60:dd:c2:11:29:d3:57:70:25:f4:a6:d0:
         62:d4:f5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 19:48:55 2025 by rpki-client