Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS265736.roa
File:                     AS265736.roa (raw, json)
Hash identifier:          B8+CynjN7U4Tkf0KKU9QLjLx0mweibQ6TnhNCEab5wA=
Subject key identifier:   9A:98:DF:17:62:99:94:20:6B:36:43:AA:08:B4:7A:DB:DB:60:05:63
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       3678ADE6CF30AE299A3F0025BEA99265987FAA8C
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS265736.roa
Signing time:             Mon 01 Sep 2025 14:35:00 +0000
ROA not before:           Mon 01 Sep 2025 14:30:00 +0000
ROA not after:            Mon 31 Aug 2026 14:35:00 +0000
asID:                     265736
IP address blocks:        201.250.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 23:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:78:ad:e6:cf:30:ae:29:9a:3f:00:25:be:a9:92:65:98:7f:aa:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Sep  1 14:30:00 2025 GMT
            Not After : Aug 31 14:35:00 2026 GMT
        Subject: CN=9A98DF17629994206B3643AA08B47ADBDB600563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:50:84:d3:3c:38:7f:eb:75:45:2e:1a:c7:
                    f9:c0:43:f8:df:71:f0:94:16:99:10:fe:b4:91:75:
                    6b:d7:8b:62:63:37:2b:35:5d:dd:27:ff:2f:1e:6f:
                    d0:a5:b8:ea:7c:aa:0e:b6:6d:98:4f:60:2c:f8:14:
                    ef:dc:8b:7b:0a:46:b4:ac:62:97:c6:68:b0:b2:83:
                    e4:80:14:c9:1d:be:01:d6:6f:a6:42:f8:bc:87:e1:
                    02:15:d1:77:1a:c5:12:ab:3a:39:40:c5:d4:73:6c:
                    ec:20:e4:3e:71:94:14:1b:b7:f5:ba:80:04:1a:7c:
                    3a:7d:4e:25:0c:95:d0:e1:3a:57:a5:3f:44:c2:0b:
                    bd:ba:3c:26:c8:6b:a1:06:47:2d:91:02:ca:fe:73:
                    16:70:6e:bb:78:fe:a5:46:03:c2:aa:85:e4:4f:60:
                    04:d7:99:a9:d7:0e:f3:0b:7f:92:04:b4:3e:73:b0:
                    37:65:73:42:a5:98:d5:ab:ac:c8:1d:55:f3:3c:e0:
                    e7:99:24:2e:92:66:6b:b0:c1:c4:db:a4:5c:65:23:
                    e9:ef:ee:de:79:e6:54:6e:ec:b8:2f:d7:8a:2b:a2:
                    ec:3a:33:d5:7b:66:c4:20:ea:c2:d8:da:6d:de:dc:
                    cb:01:21:27:28:a4:b9:a4:e2:be:96:73:63:a4:80:
                    67:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:98:DF:17:62:99:94:20:6B:36:43:AA:08:B4:7A:DB:DB:60:05:63
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS265736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.250.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:21:3d:0a:8e:bf:c0:85:1b:d4:b5:2a:be:8b:94:d5:6a:b3:
         7d:3a:ac:fa:6d:83:10:14:09:23:0e:5d:1c:b9:bd:3d:2d:ac:
         ae:92:ce:b8:46:01:98:48:ff:04:4c:d9:2c:29:36:bd:aa:21:
         91:06:74:da:38:b0:d6:e8:34:c1:ac:6d:f8:32:8c:d2:c4:58:
         d1:ac:46:3f:12:38:3b:26:84:47:b2:c3:f4:8e:2a:6c:0f:bd:
         e0:90:9a:e9:75:52:a6:97:e1:6a:72:72:73:13:cc:ee:81:ae:
         dc:8f:86:de:2e:5d:61:dc:ae:05:7b:7f:a9:53:c3:25:9b:a9:
         be:61:74:1d:1c:bd:a1:15:d1:e1:64:ae:80:ac:62:39:a3:26:
         43:2e:31:4e:9d:57:4a:65:5a:04:ef:cb:af:47:c2:c2:7f:0c:
         26:12:5a:ec:fa:dc:6b:7e:30:4a:bf:bf:1b:1a:b5:55:02:51:
         93:99:1c:95:fe:24:68:1a:67:c9:87:2f:ae:7c:d8:35:c2:39:
         96:e7:a2:3f:33:ed:91:a0:8d:44:2e:cb:fa:9d:ee:82:ec:a4:
         2e:57:ac:7f:33:14:a7:9e:e8:c4:c9:75:0d:6d:9c:ce:6e:f9:
         93:40:d4:2c:d5:0b:4b:cf:12:a1:e9:15:5d:01:6c:58:01:a0:
         96:ca:7e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:16:04 2025 by rpki-client