Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/3138312e3232342e3232312e302f32342d3234203d3e20323732393733.roa
File:                     3138312e3232342e3232312e302f32342d3234203d3e20323732393733.roa (raw, json)
Hash identifier:          q+GISiYYsCLcCwdi5FPu3ncT3f22yFGKsEHy2w2bVds=
Subject key identifier:   27:C6:96:E1:2E:CB:6F:64:67:93:94:2B:49:85:CF:42:CE:19:C8:54
Certificate issuer:       /CN=26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0
Certificate serial:       62A3955D4B2BF03DF614CB12CD4C66F7A217D734
Authority key identifier: 26:17:7C:B8:0E:40:0E:8F:6E:1A:1A:F9:6D:7E:3F:EE:34:7D:D0:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/3138312e3232342e3232312e302f32342d3234203d3e20323732393733.roa
Signing time:             Tue 06 Jan 2026 19:01:23 +0000
ROA not before:           Tue 06 Jan 2026 18:56:23 +0000
ROA not after:            Tue 05 Jan 2027 19:01:23 +0000
asID:                     272973
IP address blocks:        181.224.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 19:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a3:95:5d:4b:2b:f0:3d:f6:14:cb:12:cd:4c:66:f7:a2:17:d7:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0
        Validity
            Not Before: Jan  6 18:56:23 2026 GMT
            Not After : Jan  5 19:01:23 2027 GMT
        Subject: CN=27C696E12ECB6F646793942B4985CF42CE19C854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:76:a3:fc:55:ba:c6:ce:56:b9:1d:4a:37:62:
                    6a:97:b6:5d:52:38:53:16:3d:29:e3:3b:da:8c:22:
                    00:94:a6:1a:fb:e1:85:9b:fa:07:c6:47:cd:30:93:
                    47:6a:2f:60:c0:a9:83:ae:c0:ac:78:74:ca:6b:ba:
                    50:6f:b5:c6:8b:31:68:09:02:59:18:d5:5a:f9:3a:
                    56:f0:51:f9:69:8d:2c:0a:5e:a2:fd:d1:9f:c8:c8:
                    b4:29:5d:71:09:f4:f6:f4:da:7e:6d:f9:3d:75:3c:
                    22:5f:25:d8:d6:61:a2:bb:46:9b:d0:4d:f8:92:0a:
                    2d:73:b9:01:a9:2a:41:94:00:5a:db:d0:97:2c:0f:
                    d0:87:05:2a:d7:cd:c3:e3:3b:e5:b0:bc:db:25:49:
                    b2:02:4e:fb:b1:08:78:cf:ee:3c:3c:f2:4e:8b:e7:
                    2c:22:92:95:0d:63:cb:a1:4a:9a:0c:ca:4b:ef:53:
                    f3:07:9f:30:49:9c:b9:80:61:5b:37:ba:6f:e5:24:
                    e2:a7:c9:ca:a8:d8:43:9b:88:24:a4:3e:26:41:67:
                    cf:89:6c:18:0f:71:a7:ab:6b:14:a9:cb:55:c7:ed:
                    2d:6a:66:c7:31:49:e9:25:2a:38:47:d2:50:3c:a0:
                    48:f3:6f:5f:9b:fb:a8:cd:c9:06:3d:89:5f:4e:21:
                    35:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C6:96:E1:2E:CB:6F:64:67:93:94:2B:49:85:CF:42:CE:19:C8:54
            X509v3 Authority Key Identifier:
                keyid:26:17:7C:B8:0E:40:0E:8F:6E:1A:1A:F9:6D:7E:3F:EE:34:7D:D0:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/3138312e3232342e3232312e302f32342d3234203d3e20323732393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:72:fa:8e:2a:03:37:60:a9:17:d7:31:04:33:a7:db:8e:f0:
         87:98:fe:ce:f3:94:bd:86:f8:fc:b7:21:d3:24:6b:79:6c:57:
         b5:f3:ed:49:91:90:c0:2e:aa:11:38:b1:dd:1a:cd:c2:fd:97:
         bd:47:31:28:d5:0c:12:38:a2:4a:d9:25:ef:8d:74:ef:10:a8:
         9e:d2:2b:d7:48:9e:5f:bc:10:56:ec:0a:58:10:2f:3f:9c:9d:
         8b:be:42:79:c7:f6:95:39:54:75:ad:0a:4f:8c:e2:1c:ac:6b:
         fd:88:82:03:0f:9c:8f:3c:66:98:df:61:42:c2:5a:e8:ee:fe:
         21:fe:fc:1f:b6:4c:c9:d5:51:f3:45:7b:82:05:01:60:84:84:
         4a:e3:cf:3a:ea:1d:05:66:46:4f:de:a0:f8:67:a6:ca:c8:6a:
         54:43:14:22:a0:60:bb:21:26:f4:1d:f9:1b:76:9c:55:81:5e:
         a1:a6:18:fd:12:b4:2b:1a:2a:73:12:eb:68:c1:f2:5e:76:71:
         f6:e4:6f:c0:9f:f0:8a:a7:ca:cd:99:76:58:6c:b3:bd:a7:35:
         e2:a1:47:be:fb:cc:a4:b7:c1:1d:ef:ed:f7:a8:f8:65:5a:e5:
         8d:b1:75:4a:d3:53:f4:67:1c:bc:19:0e:ba:ab:eb:72:c8:6e:
         35:d9:d9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:34:34 2026 by rpki-client