Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/AS265705.roa
File:                     AS265705.roa (raw, json)
Hash identifier:          R273+1LQ52JXmfO+HzsOD4CkP+4yIQ3oO/Y6UinUvEk=
Subject key identifier:   12:7F:36:CA:BD:B2:C0:F2:29:03:13:05:54:BA:33:A6:20:B2:1F:E2
Certificate issuer:       /CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
Certificate serial:       6036931AA8A9F67894F03FCDE800F028747FA529
Authority key identifier: 05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/AS265705.roa
Signing time:             Tue 11 Aug 2026 14:55:00 +0000
ROA not before:           Tue 11 Aug 2026 14:50:00 +0000
ROA not after:            Tue 10 Aug 2027 14:55:00 +0000
asID:                     265705
IP address blocks:        186.33.204.0/24 maxlen: 24
                          2800:c30:ad00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:36:93:1a:a8:a9:f6:78:94:f0:3f:cd:e8:00:f0:28:74:7f:a5:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
        Validity
            Not Before: Aug 11 14:50:00 2026 GMT
            Not After : Aug 10 14:55:00 2027 GMT
        Subject: CN=127F36CABDB2C0F22903130554BA33A620B21FE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e9:af:b1:e0:77:7e:fd:f7:a4:03:c8:fc:49:
                    4b:24:1b:b2:67:6b:04:b3:c9:e9:1a:71:77:10:ef:
                    74:0f:c8:08:ec:90:df:77:34:77:bc:b9:3d:d4:30:
                    ed:75:c9:fd:16:00:a0:15:23:5a:27:f4:6f:27:1a:
                    8f:19:2e:30:36:90:89:78:18:de:40:6c:e9:8b:38:
                    9b:a0:6e:a3:04:5f:c5:b3:ca:a4:e3:a3:63:96:98:
                    1c:c3:41:e2:d5:4f:1c:f9:66:09:a8:c1:65:6f:55:
                    27:49:62:16:67:1c:3a:32:b9:f1:36:67:0c:f5:39:
                    f5:aa:43:b1:a1:19:36:cd:8f:65:5c:2c:b8:e0:a3:
                    65:31:af:ff:fe:f5:ac:24:4f:38:3e:dd:87:17:6b:
                    ca:0c:4f:6f:8a:86:b9:dc:dd:9c:d2:c2:c6:bc:a0:
                    41:72:a6:ed:2b:5e:b2:42:cd:c6:c6:47:49:37:26:
                    08:2a:d5:12:cb:08:8d:56:cd:b7:cd:22:8e:85:0f:
                    6d:b9:6e:a8:8f:f3:3c:ac:b0:08:fe:09:6d:d4:f2:
                    ca:05:51:57:9a:30:04:6e:8e:a1:59:04:72:7b:77:
                    91:1d:f3:13:56:67:03:c9:a3:15:ab:5a:d3:04:9c:
                    b4:70:6e:e2:36:c1:24:c4:7a:0e:a3:60:a1:e7:55:
                    9f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7F:36:CA:BD:B2:C0:F2:29:03:13:05:54:BA:33:A6:20:B2:1F:E2
            X509v3 Authority Key Identifier:
                keyid:05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/AS265705.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.33.204.0/24
                IPv6:
                  2800:c30:ad00::/40

    Signature Algorithm: sha256WithRSAEncryption
         53:ea:b3:a1:f0:00:b1:82:9c:bf:97:aa:bd:6f:e1:3f:b2:18:
         16:f8:7f:7b:7c:98:50:f9:e5:75:a0:9e:8e:41:5e:b3:0a:ac:
         f2:cf:d1:27:46:0a:95:08:33:10:b3:7b:f2:f7:4e:3b:17:a9:
         86:77:a0:45:f9:0d:9b:27:9b:64:2e:08:34:e6:ce:ad:b0:96:
         0e:e3:22:75:43:4d:c5:73:9c:da:0e:83:6d:bd:b6:65:b8:e5:
         48:1f:69:62:e2:06:d8:e6:8b:21:1c:d9:b5:65:3f:16:f1:f8:
         2e:1e:14:5c:33:ac:c1:9b:7c:d3:6d:b9:e7:5d:b3:96:cd:34:
         9a:7c:50:f4:f5:23:dc:45:72:ba:d0:27:91:49:de:1d:86:12:
         68:88:83:11:fb:28:66:f3:2e:26:93:0a:59:d8:3d:63:20:90:
         ee:2a:29:45:91:66:d5:fe:63:a8:e4:58:53:ca:a0:59:bc:82:
         17:ae:a9:78:aa:04:28:97:28:5c:0f:63:e2:fc:90:68:24:75:
         f7:91:81:7e:8f:ce:6d:48:5e:25:af:54:d6:d0:a7:d7:16:78:
         3c:c0:0a:f9:58:91:47:9f:b7:f0:80:2c:8a:d5:95:db:2f:3d:
         c6:e3:20:7d:78:85:17:d3:03:a8:5c:dd:23:d8:1f:75:a4:db:
         ef:8a:da:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 17:57:30 2026 by rpki-client