Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e37322e302f32342d3234203d3e203532333631.roa
File:                     3138312e3230392e37322e302f32342d3234203d3e203532333631.roa (raw, json)
Hash identifier:          n9MaFWCIpqhl0B3l2cCTEggWv2lIQUPGtb9AcOCGui4=
Subject key identifier:   D5:8D:46:34:77:40:21:08:4B:BA:D4:D6:BF:DF:95:4C:AE:9D:FF:CD
Certificate issuer:       /CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
Certificate serial:       471AAF0434A97FB760CBDEAEA58D5B94C63C8FDA
Authority key identifier: 05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e37322e302f32342d3234203d3e203532333631.roa
Signing time:             Thu 11 Jun 2026 19:40:03 +0000
ROA not before:           Thu 11 Jun 2026 19:35:03 +0000
ROA not after:            Thu 10 Jun 2027 19:40:03 +0000
asID:                     52361
IP address blocks:        181.209.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 01:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:1a:af:04:34:a9:7f:b7:60:cb:de:ae:a5:8d:5b:94:c6:3c:8f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
        Validity
            Not Before: Jun 11 19:35:03 2026 GMT
            Not After : Jun 10 19:40:03 2027 GMT
        Subject: CN=D58D4634774021084BBAD4D6BFDF954CAE9DFFCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:11:fd:b8:cc:c6:42:a0:32:a7:34:d5:83:8c:
                    1d:d6:a6:26:2c:d5:8b:49:ba:dc:3c:d7:6d:d9:f6:
                    69:d0:98:7c:94:ed:fd:44:4f:99:64:48:37:bb:d0:
                    ec:c1:4c:f0:2d:a7:8c:c5:5f:3c:03:11:5e:22:18:
                    d3:b8:83:48:16:c2:06:bf:6d:89:19:a0:06:ae:27:
                    29:49:c0:22:72:a6:e5:9d:06:53:97:bd:ed:3a:96:
                    f0:68:63:3d:50:f0:74:dd:cc:2b:5f:56:80:26:5b:
                    ae:ef:f9:52:32:83:f8:ab:5a:4d:04:a3:96:bc:04:
                    09:f6:03:a1:8f:ca:90:87:e7:05:1b:f1:37:ef:20:
                    15:a2:f4:fa:d5:7c:d0:1d:64:55:0b:8a:83:8a:06:
                    8f:9a:ee:a6:e0:a9:7a:86:d6:ff:6e:a2:fc:d8:fe:
                    be:1b:9b:71:12:60:c2:69:cf:af:19:20:c2:06:19:
                    f3:0e:f9:dd:c8:b9:a8:05:88:0b:c7:bc:3f:00:36:
                    da:45:9d:dd:27:77:fb:83:37:72:f5:7c:72:84:49:
                    81:a7:fc:e6:99:82:f7:98:d1:b9:d2:d6:14:fd:29:
                    78:1c:b6:8c:47:a9:76:e5:1f:1f:c1:9e:3d:73:3c:
                    c0:c8:41:3e:f2:e2:43:70:08:b4:37:3e:a7:1a:7b:
                    a3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8D:46:34:77:40:21:08:4B:BA:D4:D6:BF:DF:95:4C:AE:9D:FF:CD
            X509v3 Authority Key Identifier:
                keyid:05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e37322e302f32342d3234203d3e203532333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.209.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:e1:f8:7e:a5:7c:12:f1:4b:df:0e:55:47:91:c3:33:5b:b4:
         15:ac:d6:83:87:92:e8:e2:60:5a:9d:d0:8d:2f:8f:dc:d5:42:
         79:ee:ef:0e:5e:c7:98:f6:13:c4:ba:bc:2b:96:c1:ce:05:94:
         33:97:a0:97:ef:b0:a4:64:ea:21:47:04:4d:25:92:f8:c5:eb:
         87:19:23:06:e4:39:f3:fc:73:98:1a:a8:00:dc:bc:7e:53:68:
         d3:e7:40:ca:5a:62:df:e9:38:d4:22:46:d3:84:58:ff:08:83:
         20:44:a2:a3:0b:c6:3d:a1:77:6b:bf:c1:d3:d1:c1:96:6f:a8:
         57:38:9c:33:d1:72:7c:cf:9c:f4:b9:1d:ee:8e:a9:06:6a:dc:
         9c:30:2a:c9:c4:13:1e:c4:d3:11:e0:1f:16:2a:09:68:7c:f9:
         c4:ff:a0:62:e5:f9:37:91:9f:7e:ef:52:4e:46:65:6e:f0:07:
         d1:c1:3d:e4:f9:09:b3:aa:e2:ae:93:7e:6c:9d:86:c2:71:88:
         64:30:dd:17:e9:37:f7:9d:11:8a:c4:e9:a7:bf:6d:9a:e3:52:
         71:9e:51:17:77:98:ab:65:41:72:83:6b:fc:1a:bc:c3:a0:0f:
         64:c0:9d:c9:0d:f9:c5:1e:4f:f5:1a:f8:46:d2:4c:4a:9b:6d:
         2d:da:25:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:25:17 2026 by rpki-client