Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265842.roa
File:                     AS265842.roa (raw, json)
Hash identifier:          QHThI1DXcC76n+Y1YQYalMNd+i4axaRVMGiYQD5dfyM=
Subject key identifier:   EB:A8:25:D1:81:D0:ED:57:9E:69:08:67:9D:8E:9E:3D:BF:50:D7:9C
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       08D372D671129BD3EE221D09D17086A6AF053B74
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265842.roa
Signing time:             Tue 04 Feb 2025 20:06:55 +0000
ROA not before:           Tue 04 Feb 2025 20:01:55 +0000
ROA not after:            Tue 03 Feb 2026 20:06:55 +0000
asID:                     265842
IP address blocks:        181.80.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 06:05:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d3:72:d6:71:12:9b:d3:ee:22:1d:09:d1:70:86:a6:af:05:3b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Feb  4 20:01:55 2025 GMT
            Not After : Feb  3 20:06:55 2026 GMT
        Subject: CN=EBA825D181D0ED579E6908679D8E9E3DBF50D79C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:74:e1:93:6b:52:00:6a:d2:b9:7b:09:3a:fb:
                    43:9a:92:2d:42:fe:49:88:6b:3f:79:15:4a:fa:ce:
                    76:c4:b8:53:5d:19:55:57:82:86:7d:5b:1d:21:4c:
                    2d:c7:b3:0d:e9:68:2d:f9:66:d7:70:42:d2:d1:ff:
                    71:4b:d8:4c:0b:cb:4e:86:60:b6:4b:87:55:e5:fa:
                    2a:42:67:df:14:45:c7:1d:60:d0:ec:a4:01:3d:35:
                    7c:19:b0:48:30:2a:3e:a7:67:b8:3a:7c:ab:d0:03:
                    ea:d5:02:7b:38:26:b5:10:1a:5e:fa:47:d5:65:6b:
                    41:ba:f0:60:71:64:d0:63:85:ba:d3:e1:e1:3b:4e:
                    02:4f:fa:71:34:28:f8:c8:84:2d:3c:3e:32:03:fe:
                    ba:b2:94:56:22:3a:41:c3:b9:1c:f4:83:48:27:b9:
                    67:c7:3e:61:d2:a2:79:ae:23:64:99:5a:f7:0f:66:
                    84:88:28:6e:8b:1d:c0:80:11:9a:94:da:46:c7:9e:
                    0d:06:c5:5c:3e:a1:51:f3:8a:9e:0b:90:64:23:d7:
                    62:27:9b:48:b6:fb:dc:c0:12:98:28:ea:cc:ef:8d:
                    8d:fd:33:ff:0f:23:6e:3d:3c:a3:4b:9c:0d:f7:e3:
                    51:3f:82:c6:0e:63:b8:b2:e4:de:f5:4c:08:b2:e5:
                    eb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A8:25:D1:81:D0:ED:57:9E:69:08:67:9D:8E:9E:3D:BF:50:D7:9C
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265842.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.80.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:6a:0d:e5:b1:16:86:ca:89:ed:e7:8f:8e:f4:86:43:c0:99:
         44:49:c8:85:41:69:0e:ce:a0:25:e3:77:8e:cf:dc:83:75:43:
         e5:f8:89:ba:da:9f:94:3c:4a:32:43:8e:3a:c0:c8:14:2c:29:
         e6:33:f9:03:ef:37:05:a2:ea:06:9e:71:f2:ca:c1:95:00:e6:
         ef:a5:1d:1e:ce:ab:82:bb:f1:a7:be:92:a1:fa:3f:60:eb:bb:
         fe:bc:8e:a3:e7:6e:97:49:22:77:9e:2d:aa:f2:d6:57:b0:5c:
         18:32:47:4c:12:bd:c8:78:ec:61:59:b6:8e:40:20:d0:52:b1:
         54:62:b7:bb:2d:2c:51:78:00:31:b5:90:2e:cc:1b:55:9c:33:
         2d:f8:fe:0a:9d:d2:67:63:8e:99:a9:b0:19:4c:b2:e0:12:6b:
         e3:cc:ff:e6:1d:99:c9:a3:72:23:e3:9e:52:3f:9a:98:24:08:
         97:04:8e:92:2c:92:3c:bf:2c:bf:b2:e1:1c:94:4d:e6:17:ea:
         e6:d1:a1:78:f9:c0:a3:0f:80:f1:d0:c5:1c:98:5f:39:4f:48:
         dc:04:01:f4:20:ce:c2:95:1d:c4:91:d3:ee:4b:5b:90:2a:5f:
         d9:a9:4f:4f:4d:d5:09:70:34:8a:f0:70:30:f8:e7:ad:5d:c5:
         d9:36:68:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:00 2025 by rpki-client