Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265663.roa
File:                     AS265663.roa (raw, json)
Hash identifier:          mATXJPSj4fVKGy6hiSGOgb9Ssqc6QxJ015mq02L+0YU=
Subject key identifier:   99:5D:3F:72:25:86:4A:5B:6E:A5:A4:85:96:D8:5A:DD:C4:E1:2C:59
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       1F01CB4F4CD5A61286192183A524BF235D04B032
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265663.roa
Signing time:             Tue 04 Feb 2025 20:06:55 +0000
ROA not before:           Tue 04 Feb 2025 20:01:55 +0000
ROA not after:            Tue 03 Feb 2026 20:06:55 +0000
asID:                     265663
IP address blocks:        181.14.239.0/24 maxlen: 24
                          190.227.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Mar 2025 05:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:01:cb:4f:4c:d5:a6:12:86:19:21:83:a5:24:bf:23:5d:04:b0:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Feb  4 20:01:55 2025 GMT
            Not After : Feb  3 20:06:55 2026 GMT
        Subject: CN=995D3F7225864A5B6EA5A48596D85ADDC4E12C59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0a:56:9c:d2:9b:52:70:9c:39:4b:9b:90:17:
                    e8:b8:c3:2c:b0:54:86:cd:2d:90:ee:f0:0d:f5:a6:
                    f0:1a:b6:5e:3b:6b:d4:74:b8:53:f9:d5:79:da:2d:
                    08:4c:78:3c:6b:39:78:ce:64:da:d4:f6:cd:2b:d2:
                    f2:2a:47:0a:9f:2a:8e:86:61:18:32:07:50:51:b5:
                    34:f6:96:e0:89:5b:e4:ac:fd:bc:1a:4b:06:2f:40:
                    75:e0:d0:eb:64:2b:b4:18:2d:14:9c:f1:a3:54:0c:
                    84:ec:ce:93:2d:48:63:28:be:35:f7:11:ba:ae:6e:
                    84:2b:22:2a:72:9d:0f:8d:be:23:de:73:08:e9:d4:
                    e9:1a:ab:e4:ba:63:79:27:ee:c3:c2:01:ce:5e:8f:
                    18:46:83:fd:33:fb:f4:30:2d:06:22:d8:6d:06:cf:
                    f8:fe:25:7f:9e:18:d4:72:6d:14:41:be:b7:c9:73:
                    7d:38:90:ad:21:60:75:38:30:de:63:ca:1b:a9:c2:
                    e4:08:6c:f9:7e:94:25:9e:76:0f:29:c5:89:d1:c3:
                    f7:12:5a:28:84:28:d6:6a:86:19:d1:22:ba:38:cc:
                    9f:df:87:d2:a0:df:78:37:0a:db:17:f8:a3:24:f9:
                    38:92:24:97:94:36:e4:5e:61:0d:4e:ec:0c:bc:c0:
                    d5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5D:3F:72:25:86:4A:5B:6E:A5:A4:85:96:D8:5A:DD:C4:E1:2C:59
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265663.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.14.239.0/24
                  190.227.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:5a:37:c2:07:77:91:62:c9:16:92:f7:e7:47:01:e4:45:ef:
         dc:38:7e:68:d2:b3:a5:18:62:b1:4b:41:a2:67:49:51:49:48:
         bf:4c:9f:ba:6b:27:64:3f:80:69:dd:16:24:a5:c8:44:7a:5f:
         5d:4a:26:ad:76:29:a4:c4:52:07:5a:5f:1c:d4:f7:e0:3d:65:
         cf:1e:95:f8:33:79:b5:ab:48:61:bb:dc:00:c6:fc:7f:93:d0:
         de:61:15:f5:86:57:fe:9b:de:f8:c8:7c:3a:ff:70:f1:05:5c:
         e2:41:b6:f6:37:44:2d:74:55:42:79:70:97:4e:38:08:89:04:
         f2:c2:97:a2:2c:02:6c:ba:b3:84:df:1e:38:d0:76:f7:73:30:
         9f:e3:24:60:03:84:c0:0b:0f:e0:f1:e2:ab:b8:7d:cd:3e:2f:
         a8:23:45:42:a0:9b:51:77:e3:40:76:a1:d2:d4:d1:d5:5a:34:
         10:e5:89:db:2c:ba:de:52:79:11:10:c1:ae:8e:6e:7a:b1:e9:
         57:3d:4d:75:0e:88:0c:09:c9:ef:ff:4c:f1:70:43:de:4b:92:
         0b:2d:80:78:21:7e:bd:56:08:ff:71:80:a2:3a:ee:32:8c:47:
         5a:58:26:71:f4:a1:d7:14:c2:7c:6b:4d:87:eb:f6:44:91:d1:
         9d:31:93:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 22:08:26 2025 by rpki-client