Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e3130332e302e302f32302d3234203d3e203237383935.roa
File:                     3138312e3130332e302e302f32302d3234203d3e203237383935.roa (raw, json)
Hash identifier:          5YGQerYFGdgnyQYS5LzmHFqfbeSp3hSQB6/W0IAIaV0=
Subject key identifier:   57:75:9F:A6:BA:F3:70:94:68:A6:4D:90:AB:91:80:EC:2D:FD:F6:DC
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       24D96809D07FC456DB0103C2CAE3F8286136C7CD
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e3130332e302e302f32302d3234203d3e203237383935.roa
Signing time:             Mon 10 Aug 2026 14:24:50 +0000
ROA not before:           Mon 10 Aug 2026 14:19:50 +0000
ROA not after:            Mon 09 Aug 2027 14:24:50 +0000
asID:                     27895
IP address blocks:        181.103.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 03:18:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d9:68:09:d0:7f:c4:56:db:01:03:c2:ca:e3:f8:28:61:36:c7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Aug 10 14:19:50 2026 GMT
            Not After : Aug  9 14:24:50 2027 GMT
        Subject: CN=57759FA6BAF3709468A64D90AB9180EC2DFDF6DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:88:bf:be:33:b0:ab:b9:f8:0a:1f:c1:b2:0e:
                    41:a9:4e:b1:eb:97:68:4c:95:1f:ad:ce:89:07:90:
                    c5:f3:fd:19:cd:18:c7:92:9b:99:72:10:ed:be:4a:
                    80:b0:db:0f:63:de:7c:38:99:99:ba:61:2c:bf:c4:
                    96:70:38:61:3a:d7:e9:66:fc:96:40:0e:1c:eb:35:
                    f9:d9:a3:3d:ed:b1:b9:ec:0b:01:3e:5b:17:d9:24:
                    13:69:ed:63:62:20:27:20:b1:38:a8:75:75:0e:8e:
                    37:93:c6:ea:4d:16:e5:8f:fd:b5:db:d5:a7:e0:3e:
                    db:89:9c:f6:29:1e:3d:3d:fe:5d:91:45:42:59:7d:
                    19:3c:29:1d:09:b4:5c:2e:7d:4c:9b:be:a4:d7:ba:
                    c4:6a:db:0c:4a:74:d5:1a:12:eb:fd:55:98:5c:cd:
                    6d:34:43:59:ea:e4:3f:17:71:6b:1e:ad:4b:73:58:
                    c5:f7:77:89:ca:0c:14:8a:e1:ae:ca:eb:f5:12:69:
                    04:87:06:77:a5:da:71:1f:8a:58:e3:98:37:c4:af:
                    d1:6d:64:7b:29:35:39:e3:54:cc:f4:50:7f:51:0b:
                    ba:89:6c:8b:7f:a4:d6:52:22:15:cb:bf:98:7f:c6:
                    cb:ad:16:f4:8d:e6:36:41:d7:01:8a:c5:e4:85:1a:
                    a0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:75:9F:A6:BA:F3:70:94:68:A6:4D:90:AB:91:80:EC:2D:FD:F6:DC
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e3130332e302e302f32302d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.103.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:55:94:23:73:50:44:36:ed:48:de:a2:80:09:95:e2:dc:b4:
         cd:a8:29:7d:f6:3e:3d:14:5b:4a:96:4e:d6:bb:f5:c1:66:c9:
         89:8d:99:1e:1d:1c:ff:04:37:5c:80:c0:b4:73:fa:c3:83:2c:
         01:e5:96:74:e8:22:0b:fe:ef:1b:08:fc:3e:6b:82:91:a2:22:
         e8:b0:86:c6:ae:00:32:08:d6:f9:00:04:df:2b:d2:45:d0:ae:
         5e:30:77:29:9d:df:51:6a:8b:09:c5:98:6f:f1:2b:ab:62:4d:
         d2:36:87:8f:43:ab:8f:9e:5f:4b:06:a4:64:94:a5:27:80:c5:
         d1:d7:c2:8a:c7:b4:1c:91:83:16:83:fb:78:a4:2a:9a:58:ad:
         5d:de:80:26:cb:aa:cc:7b:d0:17:ec:36:04:4e:4e:92:bc:01:
         e0:d0:e4:c1:6c:1f:38:2b:70:95:d8:cf:11:38:fb:82:d2:d7:
         01:c3:28:76:c1:55:2f:4d:49:d8:02:98:2f:a2:fe:05:9c:21:
         66:10:ec:ec:5d:cb:2a:12:ed:8e:f1:52:51:c5:f4:c2:4c:52:
         23:87:63:6d:71:ca:26:82:b9:dd:f0:9f:47:d9:83:d1:ab:71:
         91:71:e9:28:00:ed:ff:ec:24:c3:9b:fb:89:c6:52:c3:b3:3e:
         3e:9a:23:3d
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUJNloCdB/xFbbAQPCyuP4KGE2x80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZDQkFBMDgwRTIxOUM3M0Y5QkJGNTUyRDgxQjY1QzA1
MDYzRDQyNzAeFw0yNjA4MTAxNDE5NTBaFw0yNzA4MDkxNDI0NTBaMDMxMTAvBgNV
BAMTKDU3NzU5RkE2QkFGMzcwOTQ2OEE2NEQ5MEFCOTE4MEVDMkRGREY2REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpiL++M7CrufgKH8GyDkGpTrHr
l2hMlR+tzokHkMXz/RnNGMeSm5lyEO2+SoCw2w9j3nw4mZm6YSy/xJZwOGE61+lm
/JZADhzrNfnZoz3tsbnsCwE+WxfZJBNp7WNiICcgsTiodXUOjjeTxupNFuWP/bXb
1afgPtuJnPYpHj09/l2RRUJZfRk8KR0JtFwufUybvqTXusRq2wxKdNUaEuv9VZhc
zW00Q1nq5D8XcWserUtzWMX3d4nKDBSK4a7K6/USaQSHBnel2nEfiljjmDfEr9Ft
ZHspNTnjVMz0UH9RC7qJbIt/pNZSIhXLv5h/xsutFvSN5jZB1wGKxeSFGqCjAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUV3WfprrzcJRopk2Qq5GA7C399twwHwYDVR0j
BBgwFoAUL8uqCA4hnHP5u/VS2BtlwFBj1CcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMEJCMDQwMDQ1M0I1RDE3RkM1Mzc3RDFDMTdDMzhFM0FB
NTgwMjQ2RjAwNzM4MDIyMzY5RDQ4MDA3MTYyREQyLzAvMkZDQkFBMDgwRTIxOUM3
M0Y5QkJGNTUyRDgxQjY1QzA1MDYzRDQyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRkNCQUEwODBFMjE5QzczRjlC
QkY1NTJEODFCNjVDMDUwNjNENDI3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTBCQjA0MDA0NTNCNUQxN0ZDNTM3N0QxQzE3QzM4RTNBQTU4MDI0NkYw
MDczODAyMjM2OUQ0ODAwNzE2MkREMi8wLzMxMzgzMTJlMzEzMDMzMmUzMDJlMzAy
ZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzczODM5MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS1ZwAwDQYJ
KoZIhvcNAQELBQADggEBAGlVlCNzUEQ27UjeooAJleLctM2oKX32Pj0UW0qWTta7
9cFmyYmNmR4dHP8EN1yAwLRz+sODLAHllnToIgv+7xsI/D5rgpGiIuiwhsauADII
1vkABN8r0kXQrl4wdymd31FqiwnFmG/xK6tiTdI2h49Dq4+eX0sGpGSUpSeAxdHX
worHtByRgxaD+3ikKppYrV3egCbLqsx70BfsNgROTpK8AeDQ5MFsHzgrcJXYzxE4
+4LS1wHDKHbBVS9NSdgCmC+i/gWcIWYQ7OxdyyoS7Y7xUlHF9MJMUiOHY21xyiaC
ud3wn0fZg9GrcZFx6SgA7f/sJMOb+4nGUsOzPj6aIz0=
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:03:56 2026 by rpki-client