Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e37332e302f32342d3234203d3e203532333631.roa
File:                     3138312e3230392e37332e302f32342d3234203d3e203532333631.roa (raw, json)
Hash identifier:          rJylXGPmj9Sww3JB4YgtcAHdj+Gih5zwsCpHybq6JPE=
Subject key identifier:   41:D2:17:4A:CC:81:D2:61:AE:0E:00:E4:27:50:5F:DF:F1:2C:7E:8A
Certificate issuer:       /CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
Certificate serial:       163517DA32A970D108E6D28AAFB17901BB2FC307
Authority key identifier: 05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e37332e302f32342d3234203d3e203532333631.roa
Signing time:             Thu 11 Jun 2026 19:40:05 +0000
ROA not before:           Thu 11 Jun 2026 19:35:05 +0000
ROA not after:            Thu 10 Jun 2027 19:40:05 +0000
asID:                     52361
IP address blocks:        181.209.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 01:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:35:17:da:32:a9:70:d1:08:e6:d2:8a:af:b1:79:01:bb:2f:c3:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
        Validity
            Not Before: Jun 11 19:35:05 2026 GMT
            Not After : Jun 10 19:40:05 2027 GMT
        Subject: CN=41D2174ACC81D261AE0E00E427505FDFF12C7E8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:95:72:bf:4f:1a:ec:52:1d:a7:59:33:ad:f4:
                    f2:d7:3d:26:53:75:9e:a1:f6:ce:03:dc:e2:97:df:
                    31:f4:61:d5:45:b8:dd:a6:7f:6f:79:f1:87:7b:40:
                    c5:d6:69:9c:91:a5:58:8f:5d:6e:a6:fc:39:6b:f9:
                    01:52:3b:b3:c9:76:a5:d7:62:db:e1:ac:59:96:4e:
                    31:7b:2c:69:f7:9a:a3:cf:6e:1a:99:5e:91:09:70:
                    e7:9a:73:e0:34:90:68:b6:ac:a1:43:79:0d:c4:57:
                    82:b7:73:7f:0f:08:bb:c8:74:52:ef:e4:47:fa:95:
                    c8:d3:54:1a:e0:ab:26:09:1e:a5:05:a7:b9:b2:8a:
                    19:c3:e6:35:24:67:9e:40:42:7e:63:23:00:a9:46:
                    e6:61:bc:e4:f0:27:15:7c:78:b9:95:85:5c:f4:09:
                    5a:c6:4d:2f:b4:a0:54:c2:82:97:76:3d:ca:0d:5f:
                    25:18:88:e8:8b:d8:ed:4b:02:2f:48:f4:6f:ae:b9:
                    9a:d8:6b:f6:ae:27:44:b6:3d:11:23:bc:df:26:db:
                    b7:6f:04:6d:92:62:31:81:62:88:e3:9a:7f:36:ee:
                    59:4d:c8:d6:4e:54:69:f1:32:a1:82:9b:06:6b:78:
                    a4:4f:e9:01:17:6a:53:88:73:6c:e6:e7:a7:2a:be:
                    d2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D2:17:4A:CC:81:D2:61:AE:0E:00:E4:27:50:5F:DF:F1:2C:7E:8A
            X509v3 Authority Key Identifier:
                keyid:05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e37332e302f32342d3234203d3e203532333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.209.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:5c:a4:1a:cd:dc:49:25:24:27:79:59:d2:ba:bd:8d:c6:cf:
         91:98:5e:25:05:2d:0d:74:27:fd:68:e7:a9:ea:ae:97:3a:4e:
         a8:9e:58:69:93:b3:2a:2c:23:0e:21:a9:83:b4:6a:1b:aa:e6:
         4b:c1:fe:ef:ba:dd:83:e8:2a:2e:6f:4c:89:df:df:4e:7d:21:
         5d:d2:b0:49:f5:99:e7:24:b5:42:3e:71:87:76:0c:0c:ef:08:
         93:dd:19:3f:2a:2f:d7:15:d4:07:1c:43:cc:f1:c3:4c:cc:28:
         03:a3:ee:05:29:a4:5c:85:e1:12:d1:ca:cb:7a:e9:2e:8b:98:
         7e:90:78:9b:00:2f:e4:73:c0:72:05:8e:35:ba:d7:88:fb:b9:
         03:25:f5:4c:64:74:d6:6b:91:12:b5:29:dd:06:02:81:1d:5b:
         53:c1:bc:eb:8c:06:13:ff:a1:7b:2a:e2:6c:27:61:a7:c8:22:
         4e:27:b4:f1:1d:54:d9:d4:ac:9f:d0:4f:88:66:ed:0c:02:aa:
         48:24:a5:21:a5:e9:39:22:36:22:cf:47:02:c0:4c:9f:fd:5d:
         ef:7b:66:18:32:da:ac:2b:71:02:9c:1e:5f:95:44:47:f5:da:
         24:c9:14:81:14:e7:c3:71:ec:cd:06:37:e4:64:26:1c:04:91:
         bd:9e:36:72
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUFjUX2jKpcNEI5tKKr7F5AbsvwwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDVDOTYzMkMyQkFGNENENDc1NERBNkI0NDYxMTZDNzBG
RUY0RDI2NzAeFw0yNjA2MTExOTM1MDVaFw0yNzA2MTAxOTQwMDVaMDMxMTAvBgNV
BAMTKDQxRDIxNzRBQ0M4MUQyNjFBRTBFMDBFNDI3NTA1RkRGRjEyQzdFOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3lXK/TxrsUh2nWTOt9PLXPSZT
dZ6h9s4D3OKX3zH0YdVFuN2mf2958Yd7QMXWaZyRpViPXW6m/Dlr+QFSO7PJdqXX
YtvhrFmWTjF7LGn3mqPPbhqZXpEJcOeac+A0kGi2rKFDeQ3EV4K3c38PCLvIdFLv
5Ef6lcjTVBrgqyYJHqUFp7myihnD5jUkZ55AQn5jIwCpRuZhvOTwJxV8eLmVhVz0
CVrGTS+0oFTCgpd2PcoNXyUYiOiL2O1LAi9I9G+uuZrYa/auJ0S2PREjvN8m27dv
BG2SYjGBYojjmn827llNyNZOVGnxMqGCmwZreKRP6QEXalOIc2zm56cqvtJVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUQdIXSsyB0mGuDgDkJ1Bf3/EsfoowHwYDVR0j
BBgwFoAUBcljLCuvTNR1Taa0RhFscP700mcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQTAwNTNEQTYwMzg1MkFGNjFDODQ0MjRGQkZGOUFDOEE2
MzI4ODcxODk5NkM2MzNCNjMyOUE4QzkzQzA2NzFFLzAvMDVDOTYzMkMyQkFGNENE
NDc1NERBNkI0NDYxMTZDNzBGRUY0RDI2Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNUM5NjMyQzJCQUY0Q0Q0NzU0
REE2QjQ0NjExNkM3MEZFRjREMjY3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkEwMDUzREE2MDM4NTJBRjYxQzg0NDI0RkJGRjlBQzhBNjMyODg3MTg5
OTZDNjMzQjYzMjlBOEM5M0MwNjcxRS8wLzMxMzgzMTJlMzIzMDM5MmUzNzMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzYzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALXRSTAN
BgkqhkiG9w0BAQsFAAOCAQEAKlykGs3cSSUkJ3lZ0rq9jcbPkZheJQUtDXQn/Wjn
qequlzpOqJ5YaZOzKiwjDiGpg7RqG6rmS8H+77rdg+gqLm9Mid/fTn0hXdKwSfWZ
5yS1Qj5xh3YMDO8Ik90ZPyov1xXUBxxDzPHDTMwoA6PuBSmkXIXhEtHKy3rpLouY
fpB4mwAv5HPAcgWONbrXiPu5AyX1TGR01muRErUp3QYCgR1bU8G864wGE/+heyri
bCdhp8giTie08R1U2dSsn9BPiGbtDAKqSCSlIaXpOSI2Is9HAsBMn/1d73tmGDLa
rCtxApweX5VER/XaJMkUgRTnw3HszQY35GQmHASRvZ42cg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 03:25:18 2026 by rpki-client