Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS265805.roa
File:                     AS265805.roa (raw, json)
Hash identifier:          ZqEQb0BRRalzMl9YKnC9fgZsmc7SGOQJQMfrq1TvyL4=
Subject key identifier:   AC:FD:71:1B:62:65:65:52:60:78:7A:A3:A3:A9:79:88:22:6E:7B:74
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       407F9F885001C5DC1A9B78FD8B53A58F866A5057
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS265805.roa
Signing time:             Wed 29 Oct 2025 17:05:00 +0000
ROA not before:           Wed 29 Oct 2025 17:00:00 +0000
ROA not after:            Wed 28 Oct 2026 17:05:00 +0000
asID:                     265805
IP address blocks:        201.251.43.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 08 Nov 2025 08:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:7f:9f:88:50:01:c5:dc:1a:9b:78:fd:8b:53:a5:8f:86:6a:50:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Oct 29 17:00:00 2025 GMT
            Not After : Oct 28 17:05:00 2026 GMT
        Subject: CN=ACFD711B6265655260787AA3A3A97988226E7B74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:be:9e:48:94:f9:55:95:49:ac:9f:05:c4:0a:
                    dd:08:0f:8f:64:c0:87:d3:7b:0a:b6:ab:a9:05:39:
                    0c:71:2a:f6:50:76:57:43:d8:68:aa:b8:39:0d:d9:
                    fa:78:b4:2a:22:39:63:95:c6:c6:21:74:0a:f1:40:
                    b8:e1:78:02:b7:2b:72:ba:90:0e:0c:8d:d1:39:60:
                    01:14:01:e7:06:8b:7c:87:6e:1a:db:b5:fc:c4:98:
                    f1:26:ec:86:1d:94:01:bd:2e:75:32:98:e2:e4:5f:
                    f7:0b:09:d1:bb:0f:1f:98:96:7d:e7:ab:12:79:81:
                    98:9f:66:e0:62:9f:c0:d9:41:5c:5d:5d:e4:38:c8:
                    dd:eb:0a:df:86:b4:60:b6:17:ec:f2:b4:46:e6:a4:
                    ef:e1:8e:d5:5c:7b:5d:b9:79:40:a7:64:22:bc:33:
                    31:ad:61:ac:be:cd:f0:fd:e8:9a:4a:89:a8:a4:32:
                    fa:2d:2f:c2:b6:8a:5b:6e:f1:39:68:d7:40:3a:c3:
                    fb:fd:04:d3:bf:56:72:e0:b1:79:11:52:1d:a4:0f:
                    80:b1:d7:22:bd:b1:f9:6b:e6:f5:7e:e0:8b:ae:a8:
                    e1:3f:59:ca:aa:4b:3f:ae:c6:8e:b7:6d:e6:fb:36:
                    94:ad:e7:e5:3d:46:de:29:9f:46:65:13:ec:93:1e:
                    79:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FD:71:1B:62:65:65:52:60:78:7A:A3:A3:A9:79:88:22:6E:7B:74
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS265805.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.251.43.0/25

    Signature Algorithm: sha256WithRSAEncryption
         bc:88:c3:55:96:c5:a0:e2:20:c2:ff:b3:4d:6e:28:ee:a5:89:
         30:d5:83:10:45:f8:53:7d:7d:30:cd:62:15:82:dd:26:01:1c:
         dd:47:d7:e0:24:5e:9f:ac:a2:a5:e9:23:92:53:8f:33:28:73:
         bc:06:34:fd:ea:7c:a8:cc:16:84:03:fa:dd:20:b0:d6:4f:f5:
         5f:04:1d:2e:1f:34:fe:af:34:7e:7f:ff:5e:2f:21:48:94:08:
         24:f5:5c:86:91:e5:26:0f:de:ba:c0:c2:14:16:ac:0e:e9:45:
         9e:8b:17:ee:f4:f8:b5:92:75:ee:49:52:d6:e2:bc:30:ab:2f:
         a9:1a:68:64:b9:f3:1a:c9:96:71:d0:11:40:be:82:09:22:e8:
         47:4a:cd:2b:98:08:33:d3:a1:bd:7a:c2:e3:fc:79:3e:64:3e:
         59:17:7b:25:09:38:71:8d:87:dd:7a:35:42:51:da:d2:d0:f6:
         2c:7e:78:9d:e0:f9:e9:ee:ea:2d:aa:d2:14:37:1d:3a:f5:48:
         63:e4:80:83:2d:d1:74:5a:81:50:09:d7:ce:b3:2b:5d:94:d4:
         42:4a:58:2e:03:43:45:09:c9:42:b7:38:5d:aa:1d:1e:a0:4f:
         ed:bc:4e:f2:d0:d4:dc:44:37:d8:9a:4b:a9:aa:8a:b4:1b:9b:
         a2:77:10:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:24:37 2025 by rpki-client