Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/AS265679.roa
File:                     AS265679.roa (raw, json)
Hash identifier:          ia76Y/HA58A+8+MizRHK0Vv73DbK4OSyTWFo9eAtIqM=
Subject key identifier:   AE:82:16:90:30:D3:92:C7:D8:22:D2:04:57:EF:79:59:3C:BD:D5:C5
Certificate issuer:       /CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
Certificate serial:       71FE1E899D119D5F83FC3362D47CBDC8ECA8FD12
Authority key identifier: 05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/AS265679.roa
Signing time:             Tue 11 Aug 2026 14:55:00 +0000
ROA not before:           Tue 11 Aug 2026 14:50:00 +0000
ROA not after:            Tue 10 Aug 2027 14:55:00 +0000
asID:                     265679
IP address blocks:        181.209.74.208/30 maxlen: 30
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:fe:1e:89:9d:11:9d:5f:83:fc:33:62:d4:7c:bd:c8:ec:a8:fd:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
        Validity
            Not Before: Aug 11 14:50:00 2026 GMT
            Not After : Aug 10 14:55:00 2027 GMT
        Subject: CN=AE82169030D392C7D822D20457EF79593CBDD5C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:59:7a:d0:53:34:5d:b6:ab:81:34:2d:32:
                    ab:a2:ae:5b:78:e6:19:2a:29:16:a0:8d:61:08:94:
                    6c:a1:3b:6e:f8:a7:14:c7:47:d3:cb:70:5b:0b:f9:
                    fc:00:de:33:4f:0c:36:d5:15:4b:44:fc:21:03:08:
                    18:c9:c4:99:85:7a:ce:f2:98:61:58:93:4b:3a:3a:
                    00:f7:93:43:c2:86:1e:5f:3e:29:d2:02:4d:8a:5a:
                    d9:9c:b9:3a:70:5b:24:6b:e3:95:9d:b9:91:2a:f3:
                    59:29:2e:0b:09:4e:99:e3:44:28:d2:09:75:fe:de:
                    76:cd:0e:85:fe:bd:34:db:53:c8:90:fe:e0:35:4b:
                    87:64:c4:cd:0b:82:bd:08:45:60:ef:f4:92:d4:76:
                    e1:a4:7c:de:15:b9:39:ac:41:bd:d0:8b:c3:ef:7a:
                    0a:66:ee:43:08:1f:87:74:be:c5:26:96:0c:73:db:
                    e0:6a:7d:26:2e:65:88:34:7b:83:d9:73:23:b5:15:
                    64:0c:5b:f0:41:8d:1a:a6:3c:5e:3e:ad:49:1c:97:
                    60:e8:d9:2f:d6:91:1d:06:c1:f4:b5:d9:c5:4d:db:
                    09:09:2f:7e:0c:37:a3:e7:7c:70:4e:83:68:c8:9d:
                    8e:2a:e1:ad:b4:69:93:ca:17:02:58:58:9f:20:32:
                    19:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:82:16:90:30:D3:92:C7:D8:22:D2:04:57:EF:79:59:3C:BD:D5:C5
            X509v3 Authority Key Identifier:
                keyid:05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/AS265679.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.209.74.208/30

    Signature Algorithm: sha256WithRSAEncryption
         4a:9d:33:f9:64:da:a5:1f:6c:55:26:5f:c7:6b:29:16:e5:cd:
         a5:b4:a3:21:85:8b:27:f4:0e:0b:48:d7:8f:b8:10:58:47:6f:
         b7:38:27:1a:3c:c1:26:fa:bc:5e:a0:87:be:33:b3:61:af:9a:
         62:0f:71:dc:df:ec:6f:76:bc:c6:e3:ca:48:ec:83:8b:c7:4e:
         78:1b:79:07:8c:88:b0:91:87:a2:d8:1d:b7:c6:31:85:57:d6:
         9e:63:c1:70:68:40:5b:25:3f:e9:2d:d9:61:f9:5a:4a:17:2e:
         c2:cf:3a:00:1c:cb:73:ed:24:4f:d5:0f:72:b6:61:03:93:6e:
         9b:f3:35:32:6b:7a:dd:94:8b:e9:54:43:78:bb:a2:ee:26:b1:
         f4:a2:10:c9:fa:0e:e3:ce:60:e7:a8:14:90:fa:9f:f9:a7:fe:
         48:3e:9a:ee:79:7d:b6:0f:92:85:b0:d3:12:46:c7:53:ac:99:
         1b:13:7d:ff:bd:00:c1:a2:c4:7b:b7:89:eb:25:5a:26:61:e2:
         2a:81:47:51:76:8b:7b:47:1a:45:99:36:a7:72:de:71:a5:b2:
         94:6b:1b:29:ec:57:3a:94:4c:c2:73:ba:97:13:b4:f7:cb:2e:
         c5:73:0a:e2:f8:50:53:43:24:00:ff:83:77:56:0c:35:d8:33:
         1a:a7:18:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 17:57:33 2026 by rpki-client