Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS265720.roa
File:                     AS265720.roa (raw, json)
Hash identifier:          Nkhzx1FdlPj9tEKaHqSY1ZMLxi+3iJfQ/5dA+Uae7xc=
Subject key identifier:   18:AE:35:65:A0:21:9B:FF:B0:D9:54:C2:24:8F:3F:F5:D4:C0:12:C6
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       6120A6A262E38DFD8C4DFBEE8DA06C6B57AAC47C
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS265720.roa
Signing time:             Tue 05 Mar 2024 18:07:57 +0000
ROA not before:           Tue 05 Mar 2024 18:02:57 +0000
ROA not after:            Tue 04 Mar 2025 18:07:57 +0000
asID:                     265720
IP address blocks:        186.38.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:20:a6:a2:62:e3:8d:fd:8c:4d:fb:ee:8d:a0:6c:6b:57:aa:c4:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Mar  5 18:02:57 2024 GMT
            Not After : Mar  4 18:07:57 2025 GMT
        Subject: CN=18AE3565A0219BFFB0D954C2248F3FF5D4C012C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1c:b0:8d:78:92:b4:f5:86:d8:68:44:d6:be:
                    63:86:8d:31:c0:2f:0f:91:d1:11:2a:a0:12:de:c6:
                    ac:48:2c:bb:55:69:0a:d1:8d:24:01:ef:f5:69:f3:
                    dd:a8:45:93:fc:3d:d4:c8:c4:fc:49:33:e0:a7:17:
                    0a:28:09:55:34:21:2d:ea:dd:ea:7b:94:c6:d8:54:
                    6d:17:c2:b5:94:a3:ca:e6:71:24:d6:cf:e6:af:a6:
                    9c:2e:8b:42:2c:fb:08:4f:12:59:2b:ae:8b:5d:e1:
                    54:b2:91:d1:41:7a:e5:a1:bf:80:61:48:5e:fe:61:
                    46:af:63:8f:ad:57:da:3a:14:f9:fa:b1:3d:8d:a6:
                    3e:e9:85:5f:9b:71:fb:c4:1b:e5:b1:67:c3:23:d5:
                    db:37:65:7f:0f:bb:e4:fe:53:da:04:97:d2:fa:65:
                    aa:5d:3e:71:13:37:2c:b7:08:39:54:f3:85:73:db:
                    f9:6d:92:79:66:fa:bb:3f:de:40:5f:62:b2:e3:84:
                    fd:d3:7d:cb:49:94:c2:1c:89:82:c4:94:de:62:83:
                    13:2e:54:aa:ce:25:7d:6c:dc:f7:81:7e:ee:05:58:
                    6a:99:a6:4e:21:68:b4:24:35:63:97:11:4b:0e:7c:
                    67:e6:f3:81:87:6a:00:82:36:99:0c:92:e0:47:64:
                    4a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AE:35:65:A0:21:9B:FF:B0:D9:54:C2:24:8F:3F:F5:D4:C0:12:C6
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS265720.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.38.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:a8:31:07:44:c0:27:d5:a6:27:5b:50:fb:8d:69:d5:35:a3:
         d1:20:ec:28:dc:7f:ec:57:42:3b:69:e5:58:ad:45:e0:0d:b0:
         75:52:89:a7:e0:59:9a:22:93:4e:44:d1:fb:a9:3a:8b:5c:fe:
         f3:31:ce:5d:f5:ac:12:40:9b:be:ea:d2:79:f0:c9:b8:cd:03:
         6c:0a:5c:bf:c2:c7:f0:72:38:81:d0:93:a4:eb:fa:ba:a8:bf:
         a2:ef:31:74:dc:f4:a7:d8:53:7b:be:bc:40:11:d1:90:ee:f7:
         2a:87:b6:0d:c3:75:85:6d:91:c5:c2:cd:c7:59:fb:09:eb:b2:
         de:c5:cf:03:a3:90:03:32:3f:9a:83:6a:49:1a:02:b2:9c:fc:
         1a:8e:c1:e7:e6:2c:57:78:b0:fa:89:80:57:89:aa:96:29:7c:
         8b:3e:28:7d:e8:0b:4a:dd:52:3f:48:2b:6f:64:da:e4:4e:6d:
         4f:7e:d9:2d:14:76:1e:40:8c:d1:ea:56:3e:ab:5e:7d:83:6a:
         59:b8:9a:c3:d8:32:b4:2f:e9:69:72:72:ad:51:24:36:7c:58:
         9c:76:38:cd:c2:a1:1d:0d:fb:06:1d:2b:35:ee:8a:05:84:e3:
         ef:ad:39:5d:44:b1:55:ae:59:aa:ce:72:86:6b:9d:1d:55:64:
         ea:e5:6b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:22 2024 by rpki-client on console-fra.rpki-client.org