Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3138312e3232352e36332e302f32342d3234203d3e20323637373031.roa
File:                     3138312e3232352e36332e302f32342d3234203d3e20323637373031.roa (raw, json)
Hash identifier:          ishMRP4DalO8c+VJXwUQplQaA+tY+8rZ3Vrg1VJsl54=
Subject key identifier:   D7:E7:24:A7:42:1F:ED:D9:33:06:25:22:0B:6B:15:B7:58:FD:34:79
Certificate issuer:       /CN=3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091
Certificate serial:       7BEA0AEB46A0D5FB5DD983AB2A1C0E12C974AA2E
Authority key identifier: 3C:48:A5:D3:7B:5C:07:1F:F1:A8:25:8C:AF:CE:4A:DC:F5:FA:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3138312e3232352e36332e302f32342d3234203d3e20323637373031.roa
Signing time:             Fri 07 Aug 2026 17:20:13 +0000
ROA not before:           Fri 07 Aug 2026 17:15:13 +0000
ROA not after:            Fri 06 Aug 2027 17:20:13 +0000
asID:                     267701
IP address blocks:        181.225.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 31 Aug 2026 08:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ea:0a:eb:46:a0:d5:fb:5d:d9:83:ab:2a:1c:0e:12:c9:74:aa:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091
        Validity
            Not Before: Aug  7 17:15:13 2026 GMT
            Not After : Aug  6 17:20:13 2027 GMT
        Subject: CN=D7E724A7421FEDD9330625220B6B15B758FD3479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ae:53:8b:eb:08:51:3c:93:c1:34:87:9f:4d:
                    78:3f:3a:55:9c:80:3f:7a:8b:44:50:29:c8:80:b3:
                    e7:8d:12:2c:1a:bd:89:85:4d:6f:25:89:78:0c:ad:
                    d5:be:82:f1:64:82:03:97:25:93:2c:0e:43:c3:b7:
                    a8:23:93:54:4f:f3:68:5e:a4:83:83:84:0e:d4:cb:
                    b4:d5:2b:d0:a5:0f:7f:a0:52:c2:ca:97:31:a0:55:
                    81:ea:82:4d:a8:39:e7:ec:75:a2:71:a1:51:82:e9:
                    01:5d:e2:5a:13:4f:21:f0:d1:a2:28:de:b3:cf:3c:
                    76:8d:7e:d6:12:30:15:23:1c:0c:8a:a3:e4:c4:88:
                    ce:d3:e6:43:63:6e:69:74:be:e6:ca:81:d0:1b:b8:
                    95:fb:ba:b6:b5:f2:c4:d2:7d:c6:6a:bb:72:e5:c4:
                    f3:2d:74:42:f7:36:61:77:42:f6:01:ec:0c:d2:1c:
                    12:e2:f0:b6:8e:2b:3f:18:7e:1c:5d:98:7a:ec:62:
                    3e:38:a7:16:09:38:84:cf:08:da:3c:06:a0:38:f4:
                    d5:19:e8:80:25:6b:d0:86:ec:96:f4:aa:3d:38:3c:
                    57:c8:7a:8d:89:a7:be:4e:6d:1f:b0:53:91:18:b1:
                    d1:55:2f:c4:2c:65:1d:90:45:84:7b:11:82:f2:9e:
                    08:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E7:24:A7:42:1F:ED:D9:33:06:25:22:0B:6B:15:B7:58:FD:34:79
            X509v3 Authority Key Identifier:
                keyid:3C:48:A5:D3:7B:5C:07:1F:F1:A8:25:8C:AF:CE:4A:DC:F5:FA:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3138312e3232352e36332e302f32342d3234203d3e20323637373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:36:8d:d7:a8:bd:e3:02:f1:2f:cc:ec:d2:60:81:d4:09:7f:
         eb:11:0d:30:6f:b0:6e:41:83:b0:0f:15:92:29:58:74:ae:eb:
         db:36:c5:11:5f:85:84:a9:89:4a:9a:9d:64:29:22:c3:d9:21:
         6c:8b:c8:fb:f5:16:73:5a:8c:69:18:df:71:94:ca:14:a2:ab:
         35:2b:e6:8a:61:db:fd:20:5e:a9:9f:4b:30:64:df:d2:9f:41:
         b3:fc:4c:fa:76:74:52:85:7b:af:e2:9a:c2:b5:0c:1e:18:52:
         a8:23:56:72:77:cc:95:5e:f7:97:1a:23:3f:45:1b:a5:d7:40:
         61:f0:ce:21:c1:ff:f5:2b:53:db:37:ae:71:91:17:c7:cc:6b:
         e4:aa:b6:ab:d3:5a:df:d2:3f:57:b5:1d:2c:48:ab:a4:d2:67:
         cc:f5:ec:f4:5c:26:b3:f1:fd:81:07:c4:e4:8f:5e:c0:e3:c6:
         ab:3b:aa:34:03:e6:9e:3e:92:f0:12:b1:ec:1e:2f:8c:9d:8e:
         47:8b:ab:77:ec:85:c0:d4:a4:c8:15:7a:e7:d2:89:20:d4:a5:
         09:3d:02:8d:44:22:55:ef:a6:5b:a6:a2:a0:2e:48:90:56:d0:
         bb:47:12:f8:80:2a:e2:8b:d5:e5:bb:d9:6d:b1:29:89:bb:27:
         cf:15:bf:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 01:42:57 2026 by rpki-client