Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/3138312e3139312e33302e302f32342d3234203d3e20323635373833.roa
File:                     3138312e3139312e33302e302f32342d3234203d3e20323635373833.roa (raw, json)
Hash identifier:          VE3JOyxyRgE7tIjPzO7h1Fcy/VuwAtDCSjn76ACt9gI=
Subject key identifier:   6F:05:E6:4B:55:31:F1:AE:20:C6:8F:8F:0A:42:EE:B5:E3:E0:F6:B2
Certificate issuer:       /CN=93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF
Certificate serial:       1EF61E10DA5C2437DCFF2EB3D3A4B86A10B0606B
Authority key identifier: 93:FB:51:C5:AA:01:62:E9:9C:F5:DE:AE:0A:2D:AD:42:C3:75:8A:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/3138312e3139312e33302e302f32342d3234203d3e20323635373833.roa
Signing time:             Mon 07 Sep 2026 16:34:09 +0000
ROA not before:           Mon 07 Sep 2026 16:29:09 +0000
ROA not after:            Mon 06 Sep 2027 16:34:09 +0000
asID:                     265783
IP address blocks:        181.191.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f6:1e:10:da:5c:24:37:dc:ff:2e:b3:d3:a4:b8:6a:10:b0:60:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF
        Validity
            Not Before: Sep  7 16:29:09 2026 GMT
            Not After : Sep  6 16:34:09 2027 GMT
        Subject: CN=6F05E64B5531F1AE20C68F8F0A42EEB5E3E0F6B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:fc:de:e5:66:ae:cf:b0:3c:6b:69:1d:e2:
                    0f:9c:e0:34:c8:28:80:f2:0c:01:25:a7:1f:bd:89:
                    0a:6f:b0:7a:3c:95:be:63:5b:a3:1d:9a:76:d0:9f:
                    c6:06:94:bc:b9:81:49:6c:89:dc:e1:d4:54:4f:e7:
                    04:8b:9c:aa:35:fc:49:c8:90:3f:27:41:e5:80:5d:
                    c9:54:7e:7b:28:b7:71:94:94:b5:6f:00:f7:a8:41:
                    23:1e:aa:20:7a:70:ed:a9:99:a3:ad:0a:f9:32:a7:
                    d6:37:a2:76:24:2d:0e:9e:0f:00:c3:75:cb:52:40:
                    d1:98:88:21:c2:db:e0:3d:7d:1a:55:38:11:21:4f:
                    22:b8:c5:78:df:e7:a5:68:76:8f:50:89:37:01:3d:
                    52:ea:4b:ba:76:4f:9b:ae:be:44:9b:4c:ab:48:67:
                    72:2d:25:bd:11:be:44:5c:8d:e8:c0:6f:e7:22:64:
                    a3:e6:43:c8:ad:c7:bf:e7:63:3b:8f:78:a1:05:c2:
                    ed:95:38:40:11:e0:e3:74:33:11:fa:d0:f1:a4:a7:
                    8a:61:a3:77:0a:97:3f:88:55:81:9f:bf:21:f6:4f:
                    6d:d3:be:93:6a:ca:5f:4a:e9:f3:c1:90:98:6f:bc:
                    2c:11:c8:4f:c8:f8:41:6c:bc:fd:47:30:12:5b:b2:
                    36:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:05:E6:4B:55:31:F1:AE:20:C6:8F:8F:0A:42:EE:B5:E3:E0:F6:B2
            X509v3 Authority Key Identifier:
                keyid:93:FB:51:C5:AA:01:62:E9:9C:F5:DE:AE:0A:2D:AD:42:C3:75:8A:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93FB51C5AA0162E99CF5DEAE0A2DAD42C3758ADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B5A37F6036BD0F6CEE8A11813E88B4D6DD8B5D5C00AB5F9A41E3A4F2498FC73/0/3138312e3139312e33302e302f32342d3234203d3e20323635373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:49:cd:26:17:71:55:99:2b:9e:ef:7b:93:12:c6:f1:df:5c:
         6d:b0:be:35:17:29:d7:e5:3d:1e:0e:40:3a:de:9d:73:86:50:
         54:54:34:76:e4:52:d1:8d:01:1f:4a:50:5e:df:a8:e0:78:27:
         a9:b1:b0:5c:f5:d1:45:59:40:b7:db:4f:b2:a1:21:5d:33:db:
         22:46:39:47:73:ec:4e:ff:d6:d5:a2:7b:e7:55:20:8a:2d:05:
         d7:45:ae:87:78:3c:82:95:62:ab:de:22:0b:b4:44:0a:fd:03:
         8f:72:b7:f0:cd:bf:dd:94:f6:a3:d0:ad:be:20:e0:5b:bf:0a:
         9b:08:ef:f2:4e:3f:b1:94:44:7e:b5:af:d3:b9:3a:09:1e:55:
         ea:4c:6c:4e:28:d6:f0:df:e0:f1:69:92:8e:79:2c:3d:b7:ac:
         d1:7d:c8:5f:4f:74:d9:dd:90:36:63:5e:47:ad:b3:96:b9:63:
         33:14:8e:69:38:8f:f1:1a:5e:07:8c:6c:1a:ac:bc:7c:8b:be:
         7f:ff:3b:37:84:68:eb:b7:2f:43:d9:ec:d5:d3:c6:9b:ed:ae:
         f4:b2:da:9a:56:d0:f1:e6:c1:39:3d:4e:ff:ab:d1:f9:d4:a1:
         ef:66:e7:3c:7d:d5:4f:cc:38:9d:52:7c:d1:62:2f:7f:15:c6:
         38:9a:24:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:42:36 2026 by rpki-client