Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265704.roa
File:                     AS265704.roa (raw, json)
Hash identifier:          FSv1+nU9ZGFdcyyYTm9ZefJQXbwPFHrEjqareoUObmI=
Subject key identifier:   50:6A:32:01:72:1E:7B:AB:54:61:0B:A0:F0:A1:87:11:15:0E:5D:2C
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       046727794F2A148CE85DCE828CA51DF3834F5644
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265704.roa
Signing time:             Tue 04 Feb 2025 20:06:53 +0000
ROA not before:           Tue 04 Feb 2025 20:01:53 +0000
ROA not after:            Tue 03 Feb 2026 20:06:53 +0000
asID:                     265704
IP address blocks:        181.13.180.0/24 maxlen: 24
                          181.13.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:67:27:79:4f:2a:14:8c:e8:5d:ce:82:8c:a5:1d:f3:83:4f:56:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Feb  4 20:01:53 2025 GMT
            Not After : Feb  3 20:06:53 2026 GMT
        Subject: CN=506A3201721E7BAB54610BA0F0A18711150E5D2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:85:59:cc:bc:8e:ed:47:6c:84:55:0a:c6:05:
                    8e:10:31:2c:ec:1c:cd:e0:bb:ed:57:f7:52:17:15:
                    63:1e:78:af:08:20:f4:75:9d:30:d4:57:c4:b1:98:
                    d6:5a:1e:50:22:66:85:e6:4e:71:c9:fe:1e:64:d2:
                    d7:b9:5b:aa:26:93:5f:cb:49:50:6e:51:c5:b5:7a:
                    28:14:bc:84:1b:0d:5d:d3:7b:19:6c:9c:6d:65:b2:
                    72:7e:ea:f5:b2:2c:be:bd:34:7a:cf:e8:3c:41:20:
                    73:19:50:f5:5c:9f:6e:a7:4a:35:75:7f:ff:5a:20:
                    ea:5e:3a:36:02:a9:92:00:9f:20:52:0f:09:2e:6f:
                    a5:da:99:7e:17:57:09:16:5a:28:0e:7e:4c:a1:4f:
                    ee:1c:b6:69:56:21:b6:c6:00:58:31:d1:bf:44:d2:
                    d8:49:c0:78:f8:04:cf:41:5a:63:cb:56:70:44:17:
                    7f:13:e8:ee:d8:90:10:e2:d0:75:c3:50:b1:6c:b8:
                    d7:0e:54:c6:51:8f:32:55:0a:cc:e6:88:c6:53:4e:
                    99:63:7a:64:14:4a:60:d5:4b:85:41:f8:4c:4d:3f:
                    a8:d8:13:61:be:b4:cb:04:9a:d5:60:d3:ba:39:02:
                    38:a5:a0:95:5c:6d:37:9a:65:dc:be:68:40:ca:dd:
                    33:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6A:32:01:72:1E:7B:AB:54:61:0B:A0:F0:A1:87:11:15:0E:5D:2C
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265704.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.13.180.0/24
                  181.13.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:0c:e2:40:da:5d:b4:ad:2b:dc:a5:b6:19:e5:19:8e:97:11:
         67:3d:29:fb:21:8a:e8:b3:58:f0:22:55:9f:96:1c:51:13:53:
         44:b7:91:fc:e4:9a:1a:59:0c:f8:d3:6a:eb:4d:20:72:3d:3d:
         d2:75:dd:3c:5d:47:5a:f4:01:7d:55:70:7c:68:27:4d:0a:58:
         bb:94:32:4c:70:cb:19:4c:04:60:14:85:b6:9b:27:a0:ad:37:
         31:c4:af:1c:35:b2:7b:84:05:5c:33:5d:eb:ce:34:b0:a8:7a:
         b1:4d:93:77:a6:de:5a:b0:d4:47:5e:dc:23:d7:7c:ec:91:b7:
         48:64:0c:7e:9d:60:f9:35:64:c3:22:b5:cc:fa:38:88:03:14:
         4b:36:9a:b6:93:6d:6f:44:e8:de:4f:6c:58:1f:e1:b8:98:50:
         7a:ed:ef:95:8e:ff:0f:3d:02:0c:0b:f4:d8:fb:64:bb:6b:45:
         bc:b1:8d:c1:03:b2:aa:4d:7c:13:be:41:a5:0d:a4:65:74:87:
         52:cd:b9:a8:47:8d:dd:98:67:28:2d:70:e2:09:ea:8d:ff:70:
         37:2d:6d:9a:32:71:26:a5:00:a7:da:c0:7c:86:5b:ab:ad:d1:
         2c:8a:bb:10:27:81:ae:32:6c:f5:45:83:87:ff:f4:63:73:f6:
         12:43:8a:a1
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIUBGcneU8qFIzoXc6CjKUd84NPVkQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc0RDY4RjA2QkIxRjJFRDA5NEYwM0I1MkZFRDc1NjVG
NzgyNUQ5OTAeFw0yNTAyMDQyMDAxNTNaFw0yNjAyMDMyMDA2NTNaMDMxMTAvBgNV
BAMTKDUwNkEzMjAxNzIxRTdCQUI1NDYxMEJBMEYwQTE4NzExMTUwRTVEMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwhVnMvI7tR2yEVQrGBY4QMSzs
HM3gu+1X91IXFWMeeK8IIPR1nTDUV8SxmNZaHlAiZoXmTnHJ/h5k0te5W6omk1/L
SVBuUcW1eigUvIQbDV3TexlsnG1lsnJ+6vWyLL69NHrP6DxBIHMZUPVcn26nSjV1
f/9aIOpeOjYCqZIAnyBSDwkub6XamX4XVwkWWigOfkyhT+4ctmlWIbbGAFgx0b9E
0thJwHj4BM9BWmPLVnBEF38T6O7YkBDi0HXDULFsuNcOVMZRjzJVCszmiMZTTplj
emQUSmDVS4VB+ExNP6jYE2G+tMsEmtVg07o5AjiloJVcbTeaZdy+aEDK3TPNAgMB
AAGjggKfMIICmzAdBgNVHQ4EFgQUUGoyAXIee6tUYQug8KGHERUOXSwwHwYDVR0j
BBgwFoAUJ01o8Gux8u0JTwO1L+11ZfeCXZkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZF
MzY3QkEwQ0M4M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvMjc0RDY4RjA2QkIxRjJF
RDA5NEYwM0I1MkZFRDc1NjVGNzgyNUQ5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNzRENjhGMDZCQjFGMkVEMDk0
RjAzQjUyRkVENzU2NUY3ODI1RDk5LmNlcjCBmAYIKwYBBQUHAQsEgYswgYgwgYUG
CCsGAQUFBzALhnlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZFMzY3QkEwQ0M4
M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvQVMyNjU3MDQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAC1DbQD
BAC1DbYwDQYJKoZIhvcNAQELBQADggEBAHwM4kDaXbStK9ylthnlGY6XEWc9Kfsh
iuizWPAiVZ+WHFETU0S3kfzkmhpZDPjTautNIHI9PdJ13TxdR1r0AX1VcHxoJ00K
WLuUMkxwyxlMBGAUhbabJ6CtNzHErxw1snuEBVwzXevONLCoerFNk3em3lqw1Ede
3CPXfOyRt0hkDH6dYPk1ZMMitcz6OIgDFEs2mraTbW9E6N5PbFgf4biYUHrt75WO
/w89AgwL9Nj7ZLtrRbyxjcEDsqpNfBO+QaUNpGV0h1LNuahHjd2YZygtcOIJ6o3/
cDctbZoycSalAKfawHyGW6ut0SyKuxAnga4ybPVFg4f/9GNz9hJDiqE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:14:57 2025 by rpki-client