Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/3138312e3232342e36342e302f32332d3233203d3e20323732303235.roa
File:                     3138312e3232342e36342e302f32332d3233203d3e20323732303235.roa (raw, json)
Hash identifier:          yX9lwlCj8R0tATJWloCPn3fn25HeA3r6oeZ5tRzi7R8=
Subject key identifier:   23:E9:2C:16:48:69:C4:66:70:D6:88:7E:2F:E4:48:1C:E6:5E:D6:42
Certificate issuer:       /CN=FC61E7B856A2858B331CE4EC48A27D8162FA5E57
Certificate serial:       2D773603E5F38A66B7FFAFCA8CA55A0D805404BF
Authority key identifier: FC:61:E7:B8:56:A2:85:8B:33:1C:E4:EC:48:A2:7D:81:62:FA:5E:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/3138312e3232342e36342e302f32332d3233203d3e20323732303235.roa
Signing time:             Mon 29 Jun 2026 13:55:02 +0000
ROA not before:           Mon 29 Jun 2026 13:50:02 +0000
ROA not after:            Mon 28 Jun 2027 13:55:02 +0000
asID:                     272025
IP address blocks:        181.224.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 18:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:77:36:03:e5:f3:8a:66:b7:ff:af:ca:8c:a5:5a:0d:80:54:04:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC61E7B856A2858B331CE4EC48A27D8162FA5E57
        Validity
            Not Before: Jun 29 13:50:02 2026 GMT
            Not After : Jun 28 13:55:02 2027 GMT
        Subject: CN=23E92C164869C46670D6887E2FE4481CE65ED642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:01:89:27:5c:2b:85:4c:71:1a:f4:d9:2b:7b:
                    c8:cf:cd:17:d3:8c:19:69:3f:6f:75:62:b3:af:9f:
                    ab:da:47:c1:3e:0f:f0:56:e8:29:09:4f:fc:a9:14:
                    92:2a:6a:bd:20:ed:1a:bf:08:e5:4d:34:95:f2:f0:
                    e3:d6:f3:ff:a6:a9:21:cd:01:79:fd:4f:2b:f8:c9:
                    d4:d5:6f:e2:b5:70:2c:fe:56:ad:91:66:7b:c1:0d:
                    b8:81:5c:8e:dd:43:2c:39:db:0a:6b:c2:1d:8a:f6:
                    21:22:26:a4:9f:c8:f8:ac:6f:27:29:d3:a7:1d:31:
                    d8:b2:8f:f3:76:5f:dd:52:6e:04:f9:9d:20:de:86:
                    0a:be:6d:9b:ec:23:ab:e3:32:f6:3b:fb:ab:f0:45:
                    a2:e7:49:27:2f:87:99:ec:94:b1:c7:2d:4a:ed:1c:
                    2b:4e:0e:bf:15:93:d0:87:35:19:65:1e:a6:9a:36:
                    fd:0f:15:c4:86:60:fd:db:23:ac:da:dc:4f:5c:ea:
                    1e:ec:35:cc:e9:cf:94:a2:10:71:99:ed:87:4c:75:
                    d5:65:d6:12:ad:20:ac:6c:dd:ff:3d:e4:84:88:b5:
                    3d:d9:9b:3a:07:82:f5:f8:89:07:32:ed:61:35:ed:
                    68:6d:6a:ea:1c:87:09:d1:0f:f6:ea:ce:65:bd:66:
                    85:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E9:2C:16:48:69:C4:66:70:D6:88:7E:2F:E4:48:1C:E6:5E:D6:42
            X509v3 Authority Key Identifier:
                keyid:FC:61:E7:B8:56:A2:85:8B:33:1C:E4:EC:48:A2:7D:81:62:FA:5E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/3138312e3232342e36342e302f32332d3233203d3e20323732303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:25:4e:e8:09:47:cc:be:7d:28:79:89:fd:08:a1:c0:a9:70:
         7b:b4:28:87:12:69:3e:d2:da:be:9a:6c:99:24:0e:68:91:47:
         63:12:29:38:90:c6:ca:48:a6:4a:a5:96:8d:31:cc:d2:a8:3b:
         a3:a4:31:66:e9:c9:64:2f:9a:64:34:97:01:1f:dc:f4:de:61:
         75:f4:40:73:31:8b:25:d0:63:b3:2b:15:b4:65:34:1d:40:44:
         cb:07:68:0b:d0:a1:a2:8a:25:c3:04:dc:4e:6b:45:8e:33:54:
         2e:2c:81:56:20:14:b0:86:81:b6:63:2c:05:05:7e:6a:df:0b:
         c4:0f:af:ad:9a:4f:87:d5:fa:8e:32:ad:c9:13:8e:e7:0e:38:
         c6:df:b4:c6:5c:af:8c:3d:ae:a3:b2:5f:66:9c:89:5e:49:b7:
         d7:b6:20:f4:1d:3e:c3:bc:9e:b0:41:b0:8f:0d:a1:dd:42:4a:
         96:d0:13:ea:2c:7e:a6:86:eb:d1:b3:59:90:47:db:1e:86:a1:
         49:5d:a2:c4:74:4f:e3:21:b2:94:e1:c4:f1:ff:c8:1d:b1:a7:
         85:8c:e7:3a:90:36:33:e5:83:97:bc:59:ca:34:27:a3:29:94:
         37:3e:eb:73:62:d8:61:ff:66:da:23:3f:96:d6:46:07:fe:66:
         57:32:31:92
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIULXc2A+Xzima3/6/KjKVaDYBUBL8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM2MUU3Qjg1NkEyODU4QjMzMUNFNEVDNDhBMjdEODE2
MkZBNUU1NzAeFw0yNjA2MjkxMzUwMDJaFw0yNzA2MjgxMzU1MDJaMDMxMTAvBgNV
BAMTKDIzRTkyQzE2NDg2OUM0NjY3MEQ2ODg3RTJGRTQ0ODFDRTY1RUQ2NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLAYknXCuFTHEa9Nkre8jPzRfT
jBlpP291YrOvn6vaR8E+D/BW6CkJT/ypFJIqar0g7Rq/COVNNJXy8OPW8/+mqSHN
AXn9Tyv4ydTVb+K1cCz+Vq2RZnvBDbiBXI7dQyw52wprwh2K9iEiJqSfyPisbycp
06cdMdiyj/N2X91SbgT5nSDehgq+bZvsI6vjMvY7+6vwRaLnSScvh5nslLHHLUrt
HCtODr8Vk9CHNRllHqaaNv0PFcSGYP3bI6za3E9c6h7sNczpz5SiEHGZ7YdMddVl
1hKtIKxs3f895ISItT3ZmzoHgvX4iQcy7WE17WhtauochwnRD/bqzmW9ZoX9AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUI+ksFkhpxGZw1oh+L+RIHOZe1kIwHwYDVR0j
BBgwFoAU/GHnuFaihYszHOTsSKJ9gWL6XlcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQ0RERjdGOTlDMjY2MTk1RkYzOUM5NTVCQzdFMEY2MUND
RENGQjFDOTYwRUMyOTVCQUYwMjUyRkNDNjVBN0NDLzAvRkM2MUU3Qjg1NkEyODU4
QjMzMUNFNEVDNDhBMjdEODE2MkZBNUU1Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQzYxRTdCODU2QTI4NThCMzMx
Q0U0RUM0OEEyN0Q4MTYyRkE1RTU3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0NEREY3Rjk5QzI2NjE5NUZGMzlDOTU1QkM3RTBGNjFDQ0RDRkIxQzk2
MEVDMjk1QkFGMDI1MkZDQzY1QTdDQy8wLzMxMzgzMTJlMzIzMjM0MmUzNjM0MmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMyMzAzMjM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBteBA
MA0GCSqGSIb3DQEBCwUAA4IBAQBtJU7oCUfMvn0oeYn9CKHAqXB7tCiHEmk+0tq+
mmyZJA5okUdjEik4kMbKSKZKpZaNMczSqDujpDFm6clkL5pkNJcBH9z03mF19EBz
MYsl0GOzKxW0ZTQdQETLB2gL0KGiiiXDBNxOa0WOM1QuLIFWIBSwhoG2YywFBX5q
3wvED6+tmk+H1fqOMq3JE47nDjjG37TGXK+MPa6jsl9mnIleSbfXtiD0HT7DvJ6w
QbCPDaHdQkqW0BPqLH6mhuvRs1mQR9sehqFJXaLEdE/jIbKU4cTx/8gdsaeFjOc6
kDYz5YOXvFnKNCejKZQ3PutzYthh/2baIz+W1kYH/mZXMjGS
-----END CERTIFICATE-----
Generated at Mon Jul 6 09:51:01 2026 by rpki-client