Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS265720.roa
File:                     AS265720.roa (raw, json)
Hash identifier:          wWPYCNYRXl3VTuBqX12haHDuvjJjGLmBTj7cC4TrcAM=
Subject key identifier:   E1:82:11:FC:88:1E:3E:D1:0D:0F:5E:E9:48:64:FF:96:FD:53:48:46
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       6DD285ABB9ECA3DF2BCF26720176A50985188BE8
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS265720.roa
Signing time:             Tue 04 Feb 2025 18:13:41 +0000
ROA not before:           Tue 04 Feb 2025 18:08:41 +0000
ROA not after:            Tue 03 Feb 2026 18:13:41 +0000
asID:                     265720
IP address blocks:        186.38.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d2:85:ab:b9:ec:a3:df:2b:cf:26:72:01:76:a5:09:85:18:8b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Feb  4 18:08:41 2025 GMT
            Not After : Feb  3 18:13:41 2026 GMT
        Subject: CN=E18211FC881E3ED10D0F5EE94864FF96FD534846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:38:d6:54:58:c1:4a:56:d9:cd:ae:fc:0c:59:
                    a5:34:db:82:aa:b9:cb:b4:13:ac:8d:c9:57:4d:99:
                    a7:f3:6a:52:5c:a1:43:78:61:b4:a4:50:f4:db:38:
                    94:33:c9:dd:66:64:af:e8:49:15:60:55:51:39:0f:
                    b7:90:3e:57:1d:a3:a6:b1:0d:54:f8:c1:a1:f1:03:
                    3f:a2:7f:4a:c4:5a:ae:60:5e:43:b7:51:e4:89:9c:
                    c6:ba:3d:85:f6:b3:b1:91:1d:fd:16:df:63:e7:d7:
                    05:1f:4e:cd:4f:e5:15:3b:0e:85:a0:99:24:34:a1:
                    9a:93:51:46:d6:d8:73:11:0f:36:98:11:68:3b:43:
                    53:c8:af:08:5c:b6:38:14:fe:09:55:8f:6b:ef:89:
                    64:ec:ae:16:4b:85:0f:3a:4b:89:a9:33:c1:04:a1:
                    7e:4d:33:a8:c1:a2:e7:6d:ba:71:11:4d:fa:aa:0f:
                    f1:d3:34:74:2b:c0:6a:d1:71:92:66:4e:5b:b0:e3:
                    1d:ed:19:7b:f6:70:78:2e:4d:02:66:59:cd:ee:ae:
                    2f:50:59:e4:60:6b:50:fb:d6:0f:99:83:ea:20:30:
                    d4:f8:0b:63:82:d4:38:3e:c1:8e:90:0e:80:2d:93:
                    77:a9:3f:37:00:08:24:44:c3:e0:17:67:f5:39:40:
                    66:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:82:11:FC:88:1E:3E:D1:0D:0F:5E:E9:48:64:FF:96:FD:53:48:46
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS265720.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.38.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:bb:02:11:1d:a7:58:7b:5b:43:04:61:8d:76:9c:25:00:a2:
         59:eb:17:52:bd:70:f4:b8:fd:ff:4b:31:e7:ea:33:51:2c:eb:
         15:57:f5:95:59:c7:0b:33:e3:13:bb:60:50:e7:9c:cd:b4:7c:
         fe:15:03:76:5f:a3:80:e5:80:35:33:4d:9e:18:48:3d:d2:cb:
         a8:a6:d3:6b:18:6e:3d:43:6b:b8:79:26:c4:db:71:11:67:1b:
         a7:13:4f:89:76:ba:a4:6b:db:3b:00:af:73:60:41:2b:07:da:
         86:57:9d:e7:81:ea:b3:01:30:66:e8:aa:aa:bd:42:57:b9:ca:
         73:5f:6f:02:ca:5b:c9:64:99:27:62:ca:6d:e3:ff:df:72:73:
         2d:d7:65:17:6d:eb:37:4f:60:f5:2b:3d:22:db:1e:86:ea:1d:
         94:a7:28:8a:1d:44:04:53:75:fa:16:1d:f0:47:dc:9f:10:79:
         94:57:63:2a:c5:a2:42:21:ba:6d:7d:db:9a:98:75:01:62:f6:
         13:6b:1c:cf:be:c3:21:44:2d:68:2d:b9:3d:c3:a6:dc:3e:31:
         85:27:94:62:ac:5f:38:a8:be:62:83:cb:87:87:86:22:29:95:
         f9:5d:51:22:48:5d:c2:e4:d8:47:ba:ef:39:10:f3:21:d4:26:
         01:d4:69:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:05 2025 by rpki-client