Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/3138312e3137372e3231312e302f32342d3234203d3e20323734323839.roa
File:                     3138312e3137372e3231312e302f32342d3234203d3e20323734323839.roa (raw, json)
Hash identifier:          dm90l2BQN8cOO3pIlU23ONnhrazzAVSfeIs086iUE4M=
Subject key identifier:   C4:0C:0F:5B:85:45:CE:D6:AF:F8:AF:A4:06:73:64:8C:16:FE:35:DD
Certificate issuer:       /CN=0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5
Certificate serial:       5B82E3DC8F2AD8CB83C659273EF48C66CC6F186E
Authority key identifier: 0A:0D:46:01:A8:F3:B3:F6:CC:82:B6:D8:9F:BF:E7:8F:28:D0:DD:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/3138312e3137372e3231312e302f32342d3234203d3e20323734323839.roa
Signing time:             Thu 05 Mar 2026 13:35:00 +0000
ROA not before:           Thu 05 Mar 2026 13:30:00 +0000
ROA not after:            Thu 04 Mar 2027 13:35:00 +0000
asID:                     274289
IP address blocks:        181.177.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Mar 2026 18:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:82:e3:dc:8f:2a:d8:cb:83:c6:59:27:3e:f4:8c:66:cc:6f:18:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5
        Validity
            Not Before: Mar  5 13:30:00 2026 GMT
            Not After : Mar  4 13:35:00 2027 GMT
        Subject: CN=C40C0F5B8545CED6AFF8AFA40673648C16FE35DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c0:98:85:0f:9d:c4:79:26:1b:c4:13:0b:0f:
                    54:47:4e:25:b8:e7:c5:4f:3a:39:50:b3:05:2b:eb:
                    0d:b5:f1:66:ba:52:9a:a1:b0:c8:0b:67:bb:0a:20:
                    b6:a2:63:73:a3:f7:da:4e:92:e0:4a:01:a6:b1:be:
                    d2:00:81:24:ca:ed:e2:a3:58:97:f1:27:f1:88:7e:
                    68:05:2f:bf:85:6f:3c:56:8a:2a:8d:20:fd:4a:76:
                    76:c1:fc:3c:dc:f3:55:e5:31:c1:f3:c8:ae:98:a8:
                    16:54:78:94:a0:f7:59:f0:c0:0c:78:9d:63:4f:4b:
                    b3:60:ea:19:c0:41:7c:72:6a:62:ae:9b:3b:02:3d:
                    47:43:8b:be:ae:ea:67:69:a1:f7:5e:7b:8b:a6:87:
                    e8:f2:90:59:9e:29:aa:f9:6f:41:c1:31:1d:58:ee:
                    2f:41:1c:a6:b7:cc:d5:4c:38:f8:e0:e2:39:12:e5:
                    77:f5:24:4a:62:5a:dd:fe:7d:dd:c9:db:dd:8d:f5:
                    ba:23:e9:05:c2:cc:ea:92:06:f1:8c:ec:0b:3a:e6:
                    ba:08:19:ba:cf:73:79:a4:ef:d7:73:15:99:cf:38:
                    f5:09:69:40:48:9e:97:85:ce:04:75:4c:e2:cf:fe:
                    5b:26:1f:da:08:a6:14:1f:30:35:3e:e6:3b:15:86:
                    17:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0C:0F:5B:85:45:CE:D6:AF:F8:AF:A4:06:73:64:8C:16:FE:35:DD
            X509v3 Authority Key Identifier:
                keyid:0A:0D:46:01:A8:F3:B3:F6:CC:82:B6:D8:9F:BF:E7:8F:28:D0:DD:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A0D4601A8F3B3F6CC82B6D89FBFE78F28D0DDC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/37CFF943F3D0FB1389C93A9DA757DDADF3CB337907F05C792CF045EDB30DE20F/0/3138312e3137372e3231312e302f32342d3234203d3e20323734323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.177.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:f1:fd:23:0a:e6:c0:a8:45:34:d0:73:60:df:c0:78:76:1f:
         e8:84:7d:c4:21:45:31:2f:f9:cc:6e:8f:b5:32:a5:2b:29:2d:
         8a:e9:e2:9f:a9:14:3e:00:d7:d4:6b:53:ed:a7:c0:7a:74:f2:
         1b:f5:f5:7f:fe:4a:ec:96:ae:2b:95:a7:86:9f:ff:ef:da:42:
         3f:91:28:99:46:50:44:83:98:aa:cd:ef:e5:13:66:66:47:ab:
         0f:71:7d:75:47:dc:28:29:a8:74:a3:20:91:4c:80:08:45:f2:
         3a:25:d2:ad:ad:42:67:db:a7:a9:f7:53:f0:a2:31:1f:d6:1d:
         91:a2:48:fe:b0:c2:16:81:df:53:6c:df:19:bd:48:7e:94:6f:
         f2:af:b6:b0:66:24:f5:0c:ab:48:46:56:54:41:34:12:e7:dc:
         0e:c5:ba:f9:bc:f7:b9:09:72:fd:2c:56:98:9d:b6:71:c8:5e:
         bf:55:26:c9:c5:d6:d9:e6:80:16:7d:e1:f3:b8:4f:d2:a0:a8:
         68:f2:81:12:31:c6:57:4b:44:2b:5c:92:8d:e6:6a:5a:00:70:
         73:a1:62:f6:ab:a4:ee:f5:a6:0d:dc:5c:0e:e6:d9:26:22:ab:
         1d:bd:d0:35:ad:78:a6:aa:a8:7b:b5:d8:64:65:83:e9:d7:14:
         c6:d4:b0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 00:32:19 2026 by rpki-client