Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS264791.roa
File:                     AS264791.roa (raw, json)
Hash identifier:          KnbK+GVsQBM2lD8+BMw3YQYkDkeYLWwk/DQ5oiuNtDM=
Subject key identifier:   8B:7C:1F:12:0B:BA:DE:16:3D:BF:27:82:67:47:27:C6:03:E8:AE:2D
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       0365F4529C27FAA115D26DD6E87881B314C3DDE2
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS264791.roa
Signing time:             Tue 04 Feb 2025 20:06:53 +0000
ROA not before:           Tue 04 Feb 2025 20:01:53 +0000
ROA not after:            Tue 03 Feb 2026 20:06:53 +0000
asID:                     264791
IP address blocks:        181.80.9.0/24 maxlen: 24
                          181.80.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Mar 2025 05:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:65:f4:52:9c:27:fa:a1:15:d2:6d:d6:e8:78:81:b3:14:c3:dd:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Feb  4 20:01:53 2025 GMT
            Not After : Feb  3 20:06:53 2026 GMT
        Subject: CN=8B7C1F120BBADE163DBF2782674727C603E8AE2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ff:c1:1d:8a:8c:9d:2c:be:55:3e:58:cf:df:
                    9f:7a:8d:7d:71:91:eb:d8:73:f4:07:e8:af:8d:74:
                    1f:34:44:59:0b:ef:59:c1:28:45:79:b5:82:c6:f4:
                    f8:34:b5:10:80:06:f1:70:fc:af:98:b4:50:03:df:
                    09:34:49:11:aa:63:ba:46:fc:1b:5c:0e:15:e0:5b:
                    6f:ae:08:79:8e:fe:c3:e6:c4:1a:0e:03:ff:26:9b:
                    49:cd:85:5a:5f:c1:b9:6e:af:4c:f3:df:7b:55:27:
                    ed:87:18:de:45:d4:02:b4:1c:2a:e4:a9:72:10:d9:
                    8d:eb:00:67:31:ee:ce:c3:1d:80:98:c4:7a:71:03:
                    39:2a:ff:af:d0:71:d2:c7:a2:23:3f:ba:54:34:02:
                    9e:56:85:03:df:01:74:c3:65:7c:b5:08:9f:ff:a3:
                    0b:a3:5e:e7:d1:25:a7:e3:d3:7e:81:16:11:4f:58:
                    36:35:ff:2b:d4:25:15:a7:71:bf:7e:05:6f:81:79:
                    63:0f:c4:f6:01:da:37:45:79:0f:b1:92:b1:41:7b:
                    74:05:7e:61:55:e4:76:2b:15:d7:4d:dc:e7:72:f0:
                    dc:8e:8e:f7:cc:2d:9b:71:6a:57:2b:e7:3d:5f:33:
                    8e:d5:7e:60:85:81:3f:31:27:f2:4b:9a:be:ad:c2:
                    e1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7C:1F:12:0B:BA:DE:16:3D:BF:27:82:67:47:27:C6:03:E8:AE:2D
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS264791.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.80.9.0-181.80.10.255

    Signature Algorithm: sha256WithRSAEncryption
         64:7d:6e:49:8f:99:07:ff:76:97:5f:90:2e:d8:bc:f6:6c:6b:
         7a:a1:f5:2d:6c:89:08:a3:4e:2b:af:1f:e6:cf:ee:d1:6e:3f:
         0f:c5:43:07:65:64:e2:98:d9:80:09:8b:67:b1:1f:85:67:52:
         67:0f:43:18:6b:8e:f6:38:56:62:ec:9d:15:2a:95:f2:ce:14:
         87:f1:1d:f4:c8:22:cd:58:94:f3:c5:f1:33:30:a8:25:74:6b:
         58:07:89:54:d2:63:c1:d8:89:82:e3:c7:f0:c5:dd:fc:5f:6b:
         9f:3b:3a:57:3e:28:e9:dd:6b:86:19:8a:0d:48:c9:bb:4d:75:
         39:fc:1e:1d:5a:f6:04:88:67:60:04:2b:8a:39:c6:7d:fe:7f:
         03:00:37:33:f1:17:7e:57:5f:04:83:c1:df:d7:2b:e9:dd:af:
         55:ab:71:63:bf:3c:34:9f:fc:e7:5b:07:37:a7:9d:31:f1:c8:
         3b:a3:c8:2c:0d:35:4f:43:e3:f5:94:fe:bc:4b:45:05:25:63:
         ea:63:07:b4:7d:8d:b0:16:c0:7b:d1:ba:ba:b2:8a:d0:46:a4:
         cd:ab:de:94:cc:20:a3:bc:14:96:5b:01:8d:01:5d:07:2d:f3:
         77:a8:d4:06:43:0d:c0:09:e8:25:60:1c:c6:6f:8b:d1:17:ac:
         fc:fb:3c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 22:09:04 2025 by rpki-client