Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e3131322e302f32302d3230203d3e203532333631.roa
File:                     3138312e3230392e3131322e302f32302d3230203d3e203532333631.roa (raw, json)
Hash identifier:          MG27Ynx3praYsskJbRgmEXB4uBdMvtMP1i5FktcmyEQ=
Subject key identifier:   C3:9B:A8:36:DC:6D:F8:D0:D9:E5:4B:E6:60:1C:72:FC:27:D1:C5:8F
Certificate issuer:       /CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
Certificate serial:       4BC2135C573A4DFC63F127BB2D98C460F410DD60
Authority key identifier: 05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e3131322e302f32302d3230203d3e203532333631.roa
Signing time:             Thu 11 Jun 2026 19:40:04 +0000
ROA not before:           Thu 11 Jun 2026 19:35:04 +0000
ROA not after:            Thu 10 Jun 2027 19:40:04 +0000
asID:                     52361
IP address blocks:        181.209.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 01:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c2:13:5c:57:3a:4d:fc:63:f1:27:bb:2d:98:c4:60:f4:10:dd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
        Validity
            Not Before: Jun 11 19:35:04 2026 GMT
            Not After : Jun 10 19:40:04 2027 GMT
        Subject: CN=C39BA836DC6DF8D0D9E54BE6601C72FC27D1C58F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ca:fe:a5:a1:d6:a7:11:90:98:f7:7f:08:ee:
                    03:8a:6b:80:3a:b3:ad:f3:75:86:df:7b:df:4d:3c:
                    c2:5d:59:e4:ff:e5:5f:d9:62:cb:52:41:6d:1c:8a:
                    a1:7e:a1:20:97:ac:39:1f:96:18:94:49:ac:9d:7d:
                    92:4a:9c:00:1d:88:4d:e8:9a:20:5b:e7:8c:f9:51:
                    29:8f:30:1e:a2:78:ab:c1:d4:e7:71:02:bc:07:d0:
                    3e:22:64:f9:4b:16:41:d9:94:8f:02:92:4a:90:da:
                    92:c8:b9:c5:81:55:a6:e7:70:d2:dd:6d:c9:67:50:
                    77:4e:71:59:6d:b6:38:f5:91:2a:44:4d:25:bc:ce:
                    a1:c3:8c:5d:ea:44:a8:9e:a6:5f:ea:e3:41:9d:87:
                    73:d0:39:8a:b7:71:bf:a8:73:f5:58:9f:de:76:35:
                    fb:d4:b4:39:a4:1d:ec:7e:6e:7e:0e:0e:97:f5:b8:
                    41:ea:09:60:4d:77:fe:e2:2a:15:52:72:51:a7:c4:
                    c3:78:88:19:24:cf:d5:46:bc:fc:a3:ab:36:ea:64:
                    09:5e:24:9a:6e:07:cd:59:c5:9c:30:47:b2:66:b1:
                    3b:d0:d6:40:1e:d4:cb:88:ff:58:72:44:37:1d:6d:
                    75:f9:aa:42:82:57:61:ee:0e:f4:5c:e3:ee:bf:cd:
                    5c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9B:A8:36:DC:6D:F8:D0:D9:E5:4B:E6:60:1C:72:FC:27:D1:C5:8F
            X509v3 Authority Key Identifier:
                keyid:05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e3131322e302f32302d3230203d3e203532333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.209.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:9c:2c:75:0c:97:4b:1d:5e:47:92:0c:ab:3d:c9:9c:d9:22:
         4b:47:53:75:c9:74:7b:29:8d:53:cd:f2:44:73:eb:cc:05:0c:
         0a:f1:f1:7b:33:b1:68:26:b7:bd:65:95:82:ee:25:a8:93:cb:
         02:fb:33:46:fe:ac:2d:67:7d:fb:b7:5b:6a:0f:5d:4c:32:f5:
         27:30:f1:85:40:ff:1b:ad:5e:93:dd:d3:b3:62:f4:4f:b8:67:
         a8:34:a6:5c:f2:5b:e7:c6:ea:fd:16:b9:22:72:d7:c0:3a:43:
         3e:f0:e7:1a:ad:e5:a5:90:a0:04:66:78:eb:2c:6b:4c:96:13:
         7f:12:9c:95:83:bc:ae:1f:6f:0b:db:64:84:c5:24:6d:0a:9d:
         78:b2:68:31:d8:c0:46:e3:ce:8c:43:45:6f:a8:38:4c:19:72:
         4a:8f:c9:6c:47:a3:4f:e7:c6:c5:09:0a:dd:2c:23:d0:e6:52:
         fc:4a:39:7b:50:6e:ad:8a:86:a7:67:0e:e4:70:b9:19:ad:85:
         69:ae:4c:3b:fe:0c:48:d0:cf:17:fc:90:61:b5:14:5e:7d:ad:
         fc:65:b5:0c:05:80:53:b2:07:e7:88:e1:2f:41:01:c0:a2:5b:
         b7:6b:cc:d2:95:55:e4:b5:d1:87:22:0e:06:20:f7:e5:f0:ad:
         97:9b:67:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:25:18 2026 by rpki-client