Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e36342e302f32302d3230203d3e203532333631.roa
File:                     3138312e3230392e36342e302f32302d3230203d3e203532333631.roa (raw, json)
Hash identifier:          CP/mL7drKhbIarXSPo2qWQb3UWEq/Oy5ljKnJvU81X4=
Subject key identifier:   62:5D:09:47:66:96:00:64:79:48:12:FB:CC:8F:5C:3D:34:5D:A8:FA
Certificate issuer:       /CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
Certificate serial:       3A8043F08340CE49DDD915645246130B141494B1
Authority key identifier: 05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e36342e302f32302d3230203d3e203532333631.roa
Signing time:             Thu 11 Jun 2026 19:40:05 +0000
ROA not before:           Thu 11 Jun 2026 19:35:05 +0000
ROA not after:            Thu 10 Jun 2027 19:40:05 +0000
asID:                     52361
IP address blocks:        181.209.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 01:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:80:43:f0:83:40:ce:49:dd:d9:15:64:52:46:13:0b:14:14:94:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
        Validity
            Not Before: Jun 11 19:35:05 2026 GMT
            Not After : Jun 10 19:40:05 2027 GMT
        Subject: CN=625D094766960064794812FBCC8F5C3D345DA8FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4c:a7:d3:92:92:a6:98:49:bf:8d:7d:77:57:
                    61:12:46:15:af:2f:22:ed:e9:c5:38:c6:6b:d2:7b:
                    66:00:5b:0a:cf:95:a2:dd:7d:b8:65:f1:01:ab:b1:
                    a4:10:73:93:62:dd:52:00:71:f9:b6:a3:bd:bb:61:
                    6c:f8:1a:bb:b3:f6:5f:18:c9:59:26:4f:fa:fd:78:
                    2b:b4:27:e6:10:ea:fa:06:e3:80:10:97:8f:8d:1c:
                    bc:8c:6a:d7:e9:86:50:c6:a5:76:04:54:b1:dc:0a:
                    46:68:e4:be:7f:dc:28:f3:d5:c2:c8:fe:b3:f2:df:
                    ce:64:8f:4b:c8:c0:0a:a8:ce:79:70:49:c9:cb:98:
                    cd:65:a1:59:82:7b:b2:90:4a:80:96:cd:ed:d2:d0:
                    25:7f:f2:75:70:d1:f5:f0:df:45:80:50:87:02:a6:
                    4a:4c:cc:95:fb:34:43:c0:1e:b9:ea:50:95:32:ba:
                    a5:6f:f0:b0:42:9c:3e:7f:01:7f:cf:37:50:ac:60:
                    88:34:54:fd:32:d6:0f:f3:1b:8e:b9:ac:6b:28:50:
                    7a:f0:0f:e3:32:97:0b:02:26:11:ae:bc:99:99:25:
                    83:39:f6:e2:c6:6f:e9:59:4f:5d:9c:80:c9:e7:f6:
                    a4:b5:9a:7b:85:27:9a:b4:70:3c:61:60:c9:9e:09:
                    da:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5D:09:47:66:96:00:64:79:48:12:FB:CC:8F:5C:3D:34:5D:A8:FA
            X509v3 Authority Key Identifier:
                keyid:05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e36342e302f32302d3230203d3e203532333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.209.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:80:ca:cc:ee:01:6e:a4:bc:06:5e:be:51:78:8a:55:f3:5e:
         40:ed:c1:d5:3a:e5:7f:6d:05:fa:3b:08:e7:3d:ca:02:d6:32:
         cf:e4:4f:56:b6:de:8a:9e:c5:60:81:27:20:b7:f3:c6:22:f7:
         79:1a:a0:11:57:bc:f1:2b:b2:21:41:fd:a9:6e:99:01:7b:6f:
         0e:24:74:24:f6:e7:30:81:2d:24:83:b0:89:90:bf:e2:d6:e6:
         bd:ac:c0:1b:18:df:96:97:8d:29:9a:92:f4:06:62:f3:8f:a2:
         93:32:5a:64:d5:13:c5:bb:92:ba:6f:79:3f:7a:7e:82:bf:9e:
         fd:ed:a8:ba:19:2f:0d:ae:42:c2:44:67:e1:dc:13:2d:59:17:
         d2:17:35:fd:9d:81:07:bc:63:93:9a:f4:69:9e:bc:f3:fe:fc:
         07:08:c5:7c:fa:ba:d0:58:78:9b:bd:78:85:c9:42:d5:2f:2c:
         d9:6d:e6:0d:49:e3:60:bd:79:cb:ee:0c:4a:a1:81:4b:48:ab:
         25:6e:bb:e6:0c:8b:2d:1c:ac:d1:13:ce:76:a6:c1:2e:f9:ae:
         93:5c:4e:6c:36:78:c2:0b:bd:1e:fb:53:b1:ce:5b:3c:23:17:
         61:14:c6:4a:4c:9e:ae:6c:67:8b:9b:67:25:2b:56:af:09:88:
         4c:22:45:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:25:19 2026 by rpki-client