Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265749.roa
File:                     AS265749.roa (raw, json)
Hash identifier:          lq8L9vS+FN/Js2Wo/ISZvqpWNGgD54cPjfpWcmHgowE=
Subject key identifier:   68:17:98:CD:B7:BE:4A:AE:A3:07:BB:27:9A:BC:70:CE:C4:77:DF:E6
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       671A0BEF31B275B3104D43738466649B123E380A
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265749.roa
Signing time:             Tue 04 Feb 2025 20:07:02 +0000
ROA not before:           Tue 04 Feb 2025 20:02:02 +0000
ROA not after:            Tue 03 Feb 2026 20:07:02 +0000
asID:                     265749
IP address blocks:        200.45.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1a:0b:ef:31:b2:75:b3:10:4d:43:73:84:66:64:9b:12:3e:38:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Feb  4 20:02:02 2025 GMT
            Not After : Feb  3 20:07:02 2026 GMT
        Subject: CN=681798CDB7BE4AAEA307BB279ABC70CEC477DFE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ad:b7:a2:46:a8:f7:16:82:cd:d5:3d:78:58:
                    bf:1a:ce:2b:57:3d:45:39:0d:56:0f:0e:50:2b:e4:
                    96:36:03:f7:ba:e4:c8:0f:0c:d6:de:d3:21:33:b8:
                    66:cf:ae:8d:11:4e:68:58:ac:77:d5:ec:63:36:25:
                    d2:01:0c:3b:78:37:de:0d:12:42:d0:da:95:4a:d3:
                    eb:01:a2:45:b3:3c:ea:72:21:8e:e7:da:54:93:58:
                    6f:80:fa:32:8c:43:65:a0:25:dd:5e:68:d6:9e:2f:
                    05:e4:c8:3d:de:45:a7:6c:d0:9d:bd:29:97:69:cf:
                    44:dd:57:c2:41:fa:87:e2:29:15:08:d1:5b:63:31:
                    06:68:b9:dc:33:8e:b6:c0:15:19:32:91:a9:a8:80:
                    75:c0:21:37:27:da:18:dc:a5:69:0c:5b:78:85:69:
                    e2:9d:ba:06:2d:a4:ed:1c:2c:3a:7c:86:e2:84:4b:
                    72:5b:ad:e6:30:69:e4:9a:3b:53:bf:66:60:e5:49:
                    58:1a:fd:86:f8:8b:b6:d3:2b:40:60:a5:88:82:f4:
                    15:68:6d:17:57:ff:43:5d:bb:5f:d5:a7:37:a8:f8:
                    1e:3d:45:28:e4:fe:4f:30:2f:04:d6:b8:e0:a6:87:
                    95:a8:f7:bc:18:ed:c6:ad:6a:c4:68:d7:5d:ec:66:
                    3e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:17:98:CD:B7:BE:4A:AE:A3:07:BB:27:9A:BC:70:CE:C4:77:DF:E6
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265749.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.45.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:51:62:32:f3:12:25:b1:85:77:f8:57:68:7f:b4:58:16:0e:
         92:3d:fa:3b:4b:57:e7:17:e5:ce:9c:ce:57:1c:5c:62:55:73:
         8d:3c:2b:50:c1:7d:9c:b7:72:42:79:b0:bf:13:04:ce:c8:b7:
         28:6b:a2:15:5d:aa:ee:c6:cc:c4:76:e6:e9:e0:43:dc:2d:d6:
         52:9f:23:bf:ad:a1:1c:ea:da:8c:74:2b:44:b6:33:00:47:29:
         48:a9:be:7a:97:ba:cc:3d:86:a0:fa:2b:0c:33:9c:e2:39:de:
         cc:f3:16:d5:bc:f5:92:fa:d4:a1:65:66:07:72:df:98:39:ab:
         e9:2b:52:6f:b9:08:ce:d4:fe:32:d5:29:66:70:c3:81:a5:37:
         82:e9:f1:45:ae:0a:ff:75:4e:69:5d:3e:dd:10:e3:5b:ea:17:
         c0:40:7f:59:9b:a8:29:52:9c:6a:7d:35:12:a4:da:fe:23:9e:
         67:45:39:57:7c:a4:d5:47:fe:ce:1f:66:8f:f0:60:75:a4:70:
         9c:6e:6c:c3:90:09:7a:42:5b:71:1f:2f:c6:46:f0:13:13:82:
         6b:9b:76:2d:da:80:45:b2:a0:f9:e3:cc:55:b3:0a:36:66:20:
         6d:72:78:8c:0c:6e:23:da:f9:f6:f0:e6:a4:3b:cc:da:47:6a:
         07:9b:11:06
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUZxoL7zGydbMQTUNzhGZkmxI+OAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc0RDY4RjA2QkIxRjJFRDA5NEYwM0I1MkZFRDc1NjVG
NzgyNUQ5OTAeFw0yNTAyMDQyMDAyMDJaFw0yNjAyMDMyMDA3MDJaMDMxMTAvBgNV
BAMTKDY4MTc5OENEQjdCRTRBQUVBMzA3QkIyNzlBQkM3MENFQzQ3N0RGRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjrbeiRqj3FoLN1T14WL8azitX
PUU5DVYPDlAr5JY2A/e65MgPDNbe0yEzuGbPro0RTmhYrHfV7GM2JdIBDDt4N94N
EkLQ2pVK0+sBokWzPOpyIY7n2lSTWG+A+jKMQ2WgJd1eaNaeLwXkyD3eRads0J29
KZdpz0TdV8JB+ofiKRUI0VtjMQZoudwzjrbAFRkykamogHXAITcn2hjcpWkMW3iF
aeKdugYtpO0cLDp8huKES3JbreYwaeSaO1O/ZmDlSVga/Yb4i7bTK0BgpYiC9BVo
bRdX/0Ndu1/Vpzeo+B49RSjk/k8wLwTWuOCmh5Wo97wY7catasRo113sZj7rAgMB
AAGjggKZMIIClTAdBgNVHQ4EFgQUaBeYzbe+Sq6jB7snmrxwzsR33+YwHwYDVR0j
BBgwFoAUJ01o8Gux8u0JTwO1L+11ZfeCXZkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZF
MzY3QkEwQ0M4M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvMjc0RDY4RjA2QkIxRjJF
RDA5NEYwM0I1MkZFRDc1NjVGNzgyNUQ5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNzRENjhGMDZCQjFGMkVEMDk0
RjAzQjUyRkVENzU2NUY3ODI1RDk5LmNlcjCBmAYIKwYBBQUHAQsEgYswgYgwgYUG
CCsGAQUFBzALhnlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZFMzY3QkEwQ0M4
M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvQVMyNjU3NDkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADILd8w
DQYJKoZIhvcNAQELBQADggEBAH9RYjLzEiWxhXf4V2h/tFgWDpI9+jtLV+cX5c6c
zlccXGJVc408K1DBfZy3ckJ5sL8TBM7ItyhrohVdqu7GzMR25ungQ9wt1lKfI7+t
oRzq2ox0K0S2MwBHKUipvnqXusw9hqD6KwwznOI53szzFtW89ZL61KFlZgdy35g5
q+krUm+5CM7U/jLVKWZww4GlN4Lp8UWuCv91TmldPt0Q41vqF8BAf1mbqClSnGp9
NRKk2v4jnmdFOVd8pNVH/s4fZo/wYHWkcJxubMOQCXpCW3EfL8ZG8BMTgmubdi3a
gEWyoPnjzFWzCjZmIG1yeIwMbiPa+fbw5qQ7zNpHagebEQY=
-----END CERTIFICATE-----
Generated at Mon Apr 14 14:33:26 2025 by rpki-client