Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/3138312e3233322e3139362e302f32322d3234203d3e20323732303533.roa
File:                     3138312e3233322e3139362e302f32322d3234203d3e20323732303533.roa (raw, json)
Hash identifier:          1ORGo9yj6xUhsWX0H6+0Gv3sX1tzPUzuTQSzqNM1gWY=
Subject key identifier:   7D:EC:D4:72:AE:F9:A6:BD:67:EF:7A:BF:1A:05:34:83:D9:5C:F4:2F
Certificate issuer:       /CN=F3C2B582A38A773B6A755BF6D6E3026584CAF2F1
Certificate serial:       2326286CF3A51B1F6DC997088CBE83FA2374E539
Authority key identifier: F3:C2:B5:82:A3:8A:77:3B:6A:75:5B:F6:D6:E3:02:65:84:CA:F2:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/3138312e3233322e3139362e302f32322d3234203d3e20323732303533.roa
Signing time:             Mon 27 Apr 2026 22:40:05 +0000
ROA not before:           Mon 27 Apr 2026 22:35:05 +0000
ROA not after:            Mon 26 Apr 2027 22:40:05 +0000
asID:                     272053
IP address blocks:        181.232.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 03:23:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:26:28:6c:f3:a5:1b:1f:6d:c9:97:08:8c:be:83:fa:23:74:e5:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C2B582A38A773B6A755BF6D6E3026584CAF2F1
        Validity
            Not Before: Apr 27 22:35:05 2026 GMT
            Not After : Apr 26 22:40:05 2027 GMT
        Subject: CN=7DECD472AEF9A6BD67EF7ABF1A053483D95CF42F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:21:ea:ca:aa:24:09:fa:8f:55:96:52:2d:90:
                    de:a5:62:7f:63:ad:58:1c:66:c6:bd:07:89:5a:c0:
                    e1:67:e0:2e:4d:c0:c0:3d:46:23:7b:0a:5b:6e:31:
                    48:e8:b4:af:24:5b:fe:79:e1:0a:33:e2:86:44:2c:
                    ee:29:12:08:17:4c:71:35:80:5e:8d:d7:8e:3d:6d:
                    b8:66:4a:64:91:8c:5b:d2:a8:ba:f3:94:ee:29:28:
                    98:32:cd:f5:df:f1:4d:44:6b:e2:24:3b:3f:8d:ff:
                    3f:33:4d:41:a2:3d:de:57:3c:ac:59:38:be:55:13:
                    a4:35:04:c5:03:c4:1d:64:80:ec:c4:38:34:85:2d:
                    fd:db:97:2e:8b:04:bf:7e:bd:a2:89:14:6a:72:17:
                    ca:86:7a:3b:5c:96:46:82:29:a9:4e:24:7b:ac:96:
                    b5:e8:6a:f7:34:99:51:c5:89:cd:15:65:26:eb:e9:
                    c5:fd:b3:c2:6b:88:3a:57:db:db:77:29:d6:8b:5e:
                    d4:9f:fd:1b:ed:88:8a:48:7a:d0:a7:73:6f:ac:db:
                    cb:90:29:b7:40:8e:45:06:40:5a:ec:a2:1b:23:9f:
                    6c:29:f2:40:17:db:cc:bf:0e:26:6b:71:eb:be:ef:
                    20:0f:4e:22:e9:4f:7d:1d:15:4a:03:eb:3d:13:e9:
                    fe:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EC:D4:72:AE:F9:A6:BD:67:EF:7A:BF:1A:05:34:83:D9:5C:F4:2F
            X509v3 Authority Key Identifier:
                keyid:F3:C2:B5:82:A3:8A:77:3B:6A:75:5B:F6:D6:E3:02:65:84:CA:F2:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3C2B582A38A773B6A755BF6D6E3026584CAF2F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08089B08E57EFC288CDCFA6CC18F751FFD6A46E07EE22B416601A44F44F710F0/0/3138312e3233322e3139362e302f32322d3234203d3e20323732303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:3d:5d:0a:97:db:05:cc:19:6b:81:9b:e3:e7:c2:1d:c0:05:
         8f:63:e2:59:a4:cd:ba:ec:02:35:9a:86:89:72:37:58:9d:0d:
         25:59:ff:78:6a:06:06:4a:a3:67:f5:07:c6:d5:04:1e:07:60:
         6b:49:02:5f:ce:9e:d5:a1:73:1c:47:e9:0f:e0:48:3b:e8:ca:
         5d:e0:e9:bc:15:d5:e0:66:40:03:8a:24:d1:43:8e:3b:b1:89:
         c4:d9:99:10:5c:b4:7e:4f:bd:af:5c:a0:b2:63:e2:ee:ae:af:
         d3:1d:4a:6c:5e:d5:40:40:19:8c:12:9b:b1:89:7c:6e:55:c4:
         cc:3b:3b:96:d8:df:f3:ef:ae:f5:68:06:c0:9b:cb:d8:79:d3:
         11:ea:fe:1f:7f:57:04:95:d7:a4:cc:f9:4f:81:b4:5d:69:43:
         5f:05:07:ba:98:7c:52:ce:3d:9d:12:fa:d5:1e:3f:ac:6a:05:
         8b:9a:b7:94:a4:95:ac:cb:9d:c5:7f:d0:2e:7c:84:1d:39:4d:
         bf:71:65:29:95:c5:8d:e9:4d:ec:85:b7:84:fb:de:89:87:8f:
         e3:3d:d3:d5:2f:dc:0d:fa:11:ff:5c:45:a8:14:9c:9c:a5:b2:
         61:34:a0:99:d2:d9:d5:54:0a:a8:a6:8e:2b:fc:39:31:70:47:
         ff:fa:3f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 07:26:54 2026 by rpki-client