Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/3138312e3137342e3136302e302f32322d3234203d3e203631353132.roa
File:                     3138312e3137342e3136302e302f32322d3234203d3e203631353132.roa (raw, json)
Hash identifier:          gx1LPJOd4v7vYzgAKloQZQtlYIqnNsVSMQhVsn/Vk2I=
Subject key identifier:   62:8E:28:C5:3C:70:33:C4:52:42:0B:0D:E2:BE:B7:12:EC:40:1F:72
Certificate issuer:       /CN=84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E
Certificate serial:       76E8E604F245B4AEDCF34E9212E4230EA9BF3E3D
Authority key identifier: 84:F2:72:5A:D6:A9:BB:A5:68:3A:F6:D0:B5:3C:99:FA:DF:53:B9:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/3138312e3137342e3136302e302f32322d3234203d3e203631353132.roa
Signing time:             Thu 05 Mar 2026 17:32:55 +0000
ROA not before:           Thu 05 Mar 2026 17:27:55 +0000
ROA not after:            Thu 04 Mar 2027 17:32:55 +0000
asID:                     61512
IP address blocks:        181.174.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e8:e6:04:f2:45:b4:ae:dc:f3:4e:92:12:e4:23:0e:a9:bf:3e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E
        Validity
            Not Before: Mar  5 17:27:55 2026 GMT
            Not After : Mar  4 17:32:55 2027 GMT
        Subject: CN=628E28C53C7033C452420B0DE2BEB712EC401F72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:40:ca:71:5d:f4:08:4a:8e:a8:98:96:f1:ba:
                    c1:98:23:19:56:3b:ff:f4:62:3b:dc:a0:a5:7d:9e:
                    0a:e6:f2:25:de:c0:e8:f3:7c:c5:42:6b:e9:57:f4:
                    53:58:dc:ae:64:1e:71:40:0a:69:3e:67:f3:c5:e7:
                    1b:54:1a:2f:ad:d0:c9:bd:f0:e6:f2:58:e0:b4:6d:
                    42:4f:5c:6f:8a:bf:50:71:e3:79:1f:2a:93:a0:20:
                    81:19:5e:5f:9f:7b:8b:3c:b8:2e:e2:47:be:ff:f6:
                    2d:ce:dc:73:f2:66:e7:ff:e6:0a:9f:ec:23:84:aa:
                    03:47:b6:ae:59:c7:5c:77:7d:c0:f2:c3:a4:61:88:
                    77:04:a9:97:ea:1a:c2:06:6d:e7:d8:5d:aa:92:38:
                    f4:95:63:a0:dd:2a:de:94:0b:2d:e0:0f:fe:1f:03:
                    a1:d9:5a:18:10:26:c9:35:1a:a8:81:38:55:9e:6f:
                    28:13:ef:be:1d:4a:6c:e1:e9:56:a9:ae:af:26:85:
                    be:3b:d9:ea:2d:67:3c:95:5c:e3:f2:24:5c:3c:32:
                    e3:de:93:e7:74:4b:f0:fd:2b:ed:c9:00:c7:3e:7b:
                    76:53:64:0c:43:39:e4:8e:be:7e:7f:51:75:62:f2:
                    2c:c9:4e:93:9f:82:31:82:af:19:a4:12:18:84:e4:
                    e1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8E:28:C5:3C:70:33:C4:52:42:0B:0D:E2:BE:B7:12:EC:40:1F:72
            X509v3 Authority Key Identifier:
                keyid:84:F2:72:5A:D6:A9:BB:A5:68:3A:F6:D0:B5:3C:99:FA:DF:53:B9:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/3138312e3137342e3136302e302f32322d3234203d3e203631353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:bc:ba:de:c2:11:4b:12:83:2b:49:6b:54:27:c9:be:c3:47:
         bf:c3:be:cd:8c:4d:00:35:bc:cf:a4:90:ca:8d:3f:b5:c4:e7:
         4d:86:2d:b6:8a:f9:d9:98:c2:c1:65:0b:af:30:ce:1c:c1:6f:
         95:c9:93:30:8e:4e:0c:d4:fc:c0:3c:7c:75:8e:99:7c:24:68:
         dc:61:76:a6:bf:4f:4f:82:05:e6:8d:83:18:34:48:f9:37:9b:
         be:c3:5f:9e:5c:17:bc:91:ed:e4:07:4d:91:ac:18:57:f2:c5:
         91:40:5c:00:f8:5e:e6:0c:94:d4:2f:4c:f4:2e:0e:71:bc:c0:
         55:80:44:c5:93:85:b3:d0:b6:6e:f5:64:8a:d0:9d:2a:ca:3b:
         da:40:75:57:7c:1d:7e:0f:5f:af:7f:15:bd:4e:71:08:8e:05:
         41:4c:e0:be:ec:1e:75:9d:ea:4b:40:c3:66:de:6a:ae:79:76:
         7c:ca:78:ff:98:da:aa:90:82:96:cd:2e:43:38:21:35:39:63:
         ac:1b:0a:c1:32:bc:c6:ea:b4:12:78:7c:58:3b:3b:6a:23:fb:
         e9:9b:23:22:03:00:b0:df:a5:d5:83:c7:1a:4f:2e:a2:61:e1:
         27:95:b5:c9:dc:f6:62:ff:ac:79:a2:6c:f8:1e:3d:c8:10:dd:
         1e:cc:fa:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:13:38 2026 by rpki-client