Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/3138312e3139312e32392e302f32342d3234203d3e20323635373833.roa
File:                     3138312e3139312e32392e302f32342d3234203d3e20323635373833.roa (raw, json)
Hash identifier:          fffwFpHBaG4xg1zPP0173g70xlhnVaIFwgXqOJEW0do=
Subject key identifier:   E8:6F:E6:BF:66:89:8E:FF:27:FB:5A:4E:4E:84:D8:0E:59:BB:6C:7E
Certificate issuer:       /CN=93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF
Certificate serial:       206105B0A5A1C3BB82C617C013CB628B797C521E
Authority key identifier: 93:FB:51:C5:AA:01:62:E9:9C:F5:DE:AE:0A:2D:AD:42:C3:75:8A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/3138312e3139312e32392e302f32342d3234203d3e20323635373833.roa
Signing time:             Mon 07 Sep 2026 16:34:10 +0000
ROA not before:           Mon 07 Sep 2026 16:29:10 +0000
ROA not after:            Mon 06 Sep 2027 16:34:10 +0000
asID:                     265783
IP address blocks:        181.191.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:61:05:b0:a5:a1:c3:bb:82:c6:17:c0:13:cb:62:8b:79:7c:52:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF
        Validity
            Not Before: Sep  7 16:29:10 2026 GMT
            Not After : Sep  6 16:34:10 2027 GMT
        Subject: CN=E86FE6BF66898EFF27FB5A4E4E84D80E59BB6C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:da:71:11:ec:ed:25:ba:2e:71:11:ef:c9:04:
                    c0:91:99:93:00:d7:4f:d2:a8:32:4d:b2:eb:33:83:
                    60:73:0e:78:d6:f5:56:4d:1b:77:47:08:7e:03:44:
                    8e:41:c9:20:01:bc:e6:78:6a:3b:75:ad:4d:26:c4:
                    e7:9b:cd:ad:c8:57:d8:85:e7:f4:16:7a:26:63:23:
                    9d:48:41:a8:17:9a:5a:9f:fa:7a:26:0c:7b:e3:9a:
                    81:7c:1e:53:18:df:84:5a:fe:57:29:3c:52:89:b3:
                    db:33:a3:66:06:bb:b4:3e:af:dd:c4:8e:58:0d:0b:
                    6c:34:5d:8a:80:f4:dc:9f:fd:d4:29:48:b7:60:d0:
                    ad:07:52:ba:95:3c:52:5a:87:56:12:f2:1d:cb:ac:
                    f7:ab:63:54:1f:cf:fc:2b:21:f7:65:42:45:76:6e:
                    ba:3d:7c:eb:99:f3:0f:51:75:06:60:16:2c:0e:e0:
                    fc:84:b3:95:9b:c5:2e:3a:32:9a:66:1a:62:66:8c:
                    23:f1:d5:2a:69:ac:42:b5:98:9a:45:03:13:78:f3:
                    c4:57:52:04:2e:e0:10:84:f1:37:39:77:d1:5d:31:
                    d1:ec:bf:8f:a0:8b:2d:ae:9c:9a:e0:fe:b8:d4:ac:
                    06:68:d6:06:4e:e1:cc:86:5f:2e:e1:03:91:ad:c1:
                    1c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6F:E6:BF:66:89:8E:FF:27:FB:5A:4E:4E:84:D8:0E:59:BB:6C:7E
            X509v3 Authority Key Identifier:
                keyid:93:FB:51:C5:AA:01:62:E9:9C:F5:DE:AE:0A:2D:AD:42:C3:75:8A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/3138312e3139312e32392e302f32342d3234203d3e20323635373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:a2:4d:5c:fb:a4:b3:ae:a2:bb:6a:c9:f4:2f:d9:3e:70:b6:
         bf:a6:8b:19:eb:2a:55:15:5e:05:df:a7:61:de:29:bf:42:98:
         72:00:d6:e0:f4:0a:c5:2f:b6:b4:d5:9c:18:1e:49:65:3e:f8:
         50:27:a4:9a:34:d8:5a:73:10:d5:1c:f5:3e:bb:17:7a:47:22:
         e9:ac:22:94:5c:1a:35:a4:a0:b7:cb:56:7a:2e:a2:67:a0:e3:
         b9:bf:6b:c6:ad:7f:48:28:5c:65:fa:dd:55:b3:99:c6:33:9e:
         17:c4:a2:b4:58:2b:64:6c:24:d7:14:b9:5f:7e:04:46:50:2e:
         84:a0:48:43:f8:61:ec:b5:08:a3:b4:cd:c2:65:c2:8c:c3:ec:
         a1:7a:34:9d:70:49:55:a9:48:6b:2f:e4:60:48:8a:91:9b:29:
         9e:ab:ae:99:bd:ff:09:40:04:47:20:7d:89:29:16:95:8c:82:
         de:37:6c:48:b8:da:56:a8:50:6f:69:35:a3:d0:ce:69:91:20:
         f0:e2:eb:7f:8a:68:75:bf:be:7c:5c:57:65:62:09:c4:9e:c9:
         51:8b:33:c5:1c:0c:2f:3a:81:e6:e5:52:2b:44:5a:9c:d6:e3:
         8e:4e:b9:ec:73:ad:cc:fa:8b:ed:16:ef:c6:62:b0:f4:34:c0:
         26:0a:f9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:36:44 2026 by rpki-client