Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/9849D7458722FB8AB7ACBB1FED73D604564BBBD9ED907AF42F845737622C7D23/0/3138312e3233332e3134372e302f32342d3234203d3e20323732303530.roa
File:                     3138312e3233332e3134372e302f32342d3234203d3e20323732303530.roa (raw, json)
Hash identifier:          uK/yP2CI4x1RF9p5jqiFEdtp9dyhMOJEO8+FEGGTmto=
Subject key identifier:   E9:BE:73:CF:FC:CC:42:92:80:95:A5:07:FE:1C:58:8B:79:DE:36:4B
Certificate issuer:       /CN=148FE8CA1AF52280373C017142B97E0BD7EF78C5
Certificate serial:       1B1147B9D027047AE4DCA234E1CEAEEC7142B1D7
Authority key identifier: 14:8F:E8:CA:1A:F5:22:80:37:3C:01:71:42:B9:7E:0B:D7:EF:78:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/148FE8CA1AF52280373C017142B97E0BD7EF78C5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9849D7458722FB8AB7ACBB1FED73D604564BBBD9ED907AF42F845737622C7D23/0/3138312e3233332e3134372e302f32342d3234203d3e20323732303530.roa
Signing time:             Wed 12 Aug 2026 22:35:00 +0000
ROA not before:           Wed 12 Aug 2026 22:30:00 +0000
ROA not after:            Wed 11 Aug 2027 22:35:00 +0000
asID:                     272050
IP address blocks:        181.233.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9849D7458722FB8AB7ACBB1FED73D604564BBBD9ED907AF42F845737622C7D23/0/148FE8CA1AF52280373C017142B97E0BD7EF78C5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9849D7458722FB8AB7ACBB1FED73D604564BBBD9ED907AF42F845737622C7D23/0/148FE8CA1AF52280373C017142B97E0BD7EF78C5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/148FE8CA1AF52280373C017142B97E0BD7EF78C5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Sep 2026 22:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:11:47:b9:d0:27:04:7a:e4:dc:a2:34:e1:ce:ae:ec:71:42:b1:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=148FE8CA1AF52280373C017142B97E0BD7EF78C5
        Validity
            Not Before: Aug 12 22:30:00 2026 GMT
            Not After : Aug 11 22:35:00 2027 GMT
        Subject: CN=E9BE73CFFCCC42928095A507FE1C588B79DE364B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ed:33:3e:0b:a0:d0:d2:d1:d3:0a:c0:56:11:
                    1f:55:a1:c5:60:a0:03:9e:31:19:51:f5:1e:79:2f:
                    ba:11:ed:13:87:b3:9e:32:5a:8b:ae:b7:04:fb:96:
                    39:c7:8d:c4:83:e5:12:ad:e0:b2:9d:46:f6:03:46:
                    91:0b:92:82:5b:16:6d:8a:67:95:20:95:45:a8:06:
                    05:b7:5e:b3:06:a9:28:49:38:e7:cc:a8:e5:9c:d9:
                    cc:4d:9a:b3:bd:ac:cc:05:fd:fe:4c:a0:32:b3:e2:
                    23:e3:8e:ea:fc:d7:46:6b:dc:3e:b0:e5:8a:27:5e:
                    cd:63:f9:92:ca:28:9f:87:c1:34:62:ff:68:60:58:
                    30:0b:4a:aa:c2:b4:c4:74:65:1e:43:bc:a1:ff:09:
                    e9:c4:3c:b7:68:1f:3b:06:ab:6c:13:66:17:3b:e4:
                    b7:4a:09:1a:1b:d9:14:3c:0a:a3:f0:66:f6:85:ac:
                    78:b9:51:13:53:6b:a7:e3:b2:65:69:ae:ea:31:ff:
                    91:b7:d7:ed:a5:a4:2a:c4:89:7e:f1:3d:e7:b6:ad:
                    a9:c8:b6:e9:e8:b1:d4:3e:93:7c:c0:32:21:8d:f2:
                    9d:0e:64:7b:0d:e3:53:fa:a2:31:b0:2f:62:ba:f6:
                    1c:67:91:24:ff:50:d2:31:f0:36:a5:df:89:68:2c:
                    f1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BE:73:CF:FC:CC:42:92:80:95:A5:07:FE:1C:58:8B:79:DE:36:4B
            X509v3 Authority Key Identifier:
                keyid:14:8F:E8:CA:1A:F5:22:80:37:3C:01:71:42:B9:7E:0B:D7:EF:78:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9849D7458722FB8AB7ACBB1FED73D604564BBBD9ED907AF42F845737622C7D23/0/148FE8CA1AF52280373C017142B97E0BD7EF78C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/148FE8CA1AF52280373C017142B97E0BD7EF78C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9849D7458722FB8AB7ACBB1FED73D604564BBBD9ED907AF42F845737622C7D23/0/3138312e3233332e3134372e302f32342d3234203d3e20323732303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:1f:f0:b8:90:f7:cd:91:cd:45:a3:ac:7f:06:8b:12:86:48:
         27:12:f5:91:73:7b:31:09:0a:1f:30:c9:0a:57:3f:ec:72:88:
         c7:68:56:f6:da:07:e7:38:64:1f:2b:8d:e2:17:5b:58:26:b6:
         ca:27:85:d7:c7:65:e5:b6:15:37:f8:42:43:0d:83:96:7e:ee:
         fd:8a:ca:e9:88:11:ff:ee:ea:d1:e8:90:1f:e5:b7:43:8e:a8:
         0a:39:c9:19:6e:22:5e:30:50:de:d1:1c:ed:88:c9:96:ae:35:
         2f:2b:71:9a:26:13:af:23:37:4d:27:66:f8:c5:99:ec:f5:91:
         ca:f1:b0:3a:c4:2f:36:30:0d:c0:74:43:e3:50:83:d8:30:1d:
         58:a2:ca:0d:6b:c0:dc:d4:9a:9d:fb:3c:8d:c9:f9:a4:d2:f0:
         30:d3:47:91:10:23:45:ba:36:a2:d6:ea:b0:ac:be:b8:86:56:
         85:af:07:8f:d7:6b:11:00:fa:85:2f:85:8c:f2:ff:23:70:b0:
         96:37:12:37:a6:d8:ae:da:f6:a7:e6:d3:50:04:0d:b0:f1:4c:
         e2:99:d4:65:98:ea:07:33:15:1c:31:f4:48:f8:51:37:cd:36:
         98:0e:75:e1:a8:68:91:b9:9c:83:c9:b0:17:76:bd:4d:38:b2:
         2a:43:e5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:31:53 2026 by rpki-client