Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e39322e302f32342d3234203d3e203532333631.roa
File:                     3138312e3230392e39322e302f32342d3234203d3e203532333631.roa (raw, json)
Hash identifier:          qqodJg349FaZe9F9EjBDz2Mu6k8tU8pegVcMZl1sm0E=
Subject key identifier:   AD:F2:65:80:01:48:DC:45:54:8E:DA:46:17:BF:7A:96:04:2F:A7:8F
Certificate issuer:       /CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
Certificate serial:       37FCE15A409E87FCB5CE59CDB23CDA61CA29A6FA
Authority key identifier: 05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e39322e302f32342d3234203d3e203532333631.roa
Signing time:             Thu 11 Jun 2026 19:40:05 +0000
ROA not before:           Thu 11 Jun 2026 19:35:05 +0000
ROA not after:            Thu 10 Jun 2027 19:40:05 +0000
asID:                     52361
IP address blocks:        181.209.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 01:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:fc:e1:5a:40:9e:87:fc:b5:ce:59:cd:b2:3c:da:61:ca:29:a6:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
        Validity
            Not Before: Jun 11 19:35:05 2026 GMT
            Not After : Jun 10 19:40:05 2027 GMT
        Subject: CN=ADF265800148DC45548EDA4617BF7A96042FA78F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:49:77:76:2f:2e:68:a9:73:06:61:82:42:c9:
                    68:e7:35:cb:73:c1:e9:ef:78:19:98:33:2b:68:c4:
                    87:f8:14:e9:00:96:cd:5a:00:3f:a0:cb:2a:7d:e7:
                    0b:cb:3a:7b:45:59:9f:b2:f5:d5:39:cf:5a:de:1c:
                    fc:48:50:24:05:50:f9:f3:96:97:4e:45:f6:0b:a4:
                    1c:dc:8b:92:32:4a:18:ae:43:2b:24:32:22:ef:25:
                    c5:ed:8e:6c:a9:ed:b5:52:a2:17:85:3c:e6:f2:ba:
                    c1:b4:20:0d:a6:32:f9:54:92:cb:84:20:59:ba:71:
                    2f:d3:85:93:ff:06:15:57:a3:7d:7f:d6:ba:88:a1:
                    f3:88:50:53:95:b8:c9:57:f1:78:61:4a:cc:a5:f2:
                    00:ab:05:fc:ae:21:28:b3:67:e6:90:43:87:b0:33:
                    2a:d0:92:34:32:70:74:49:07:81:7c:2b:14:01:af:
                    9e:ef:8a:20:85:a9:34:75:e7:67:70:98:bf:53:e8:
                    7c:f4:0e:b6:6a:53:a4:53:1e:e1:2d:82:e3:50:be:
                    56:5e:3f:c8:f6:5d:79:25:d1:11:8b:f6:2e:59:5a:
                    ec:d4:1e:f8:04:61:85:7a:db:0d:d1:2e:42:42:96:
                    40:7e:95:98:6c:c8:e4:74:70:c9:fe:4d:bb:b1:0f:
                    23:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F2:65:80:01:48:DC:45:54:8E:DA:46:17:BF:7A:96:04:2F:A7:8F
            X509v3 Authority Key Identifier:
                keyid:05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e39322e302f32342d3234203d3e203532333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.209.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:18:35:67:d9:5b:06:46:24:8d:6b:02:d2:56:20:24:8d:11:
         3c:ca:a1:f4:60:e3:1e:3c:19:cf:5e:a0:58:7a:68:58:75:fb:
         2b:95:48:b7:92:e6:8a:7a:9e:ee:32:1d:a7:63:26:e6:ba:64:
         b7:b6:d2:3b:7b:8e:03:11:f1:95:f3:35:09:14:69:b7:26:27:
         74:c1:0a:c3:69:38:65:62:85:7c:03:ca:e8:bd:4c:f4:7d:d7:
         74:0b:c4:81:18:44:85:7d:af:71:52:41:5b:d3:12:19:06:02:
         48:aa:b3:bc:4a:e0:d1:aa:c6:80:bd:da:ba:67:de:f2:38:88:
         05:f5:7d:3d:55:64:75:4f:07:79:5d:41:11:24:a8:8d:a9:f8:
         cf:72:97:da:0b:96:59:52:4c:75:05:ef:aa:28:9a:c2:24:30:
         67:31:b6:99:b8:87:bf:b8:dc:bf:18:00:5b:ab:7a:8c:0b:e6:
         a7:93:08:43:27:d3:74:cd:f1:4c:fb:c8:b9:1c:58:d5:3e:bc:
         7d:fb:f5:d6:ca:5b:8e:e1:67:f5:f6:ca:5c:c6:45:cc:6a:0b:
         4b:73:42:23:e9:84:19:e4:b0:7b:07:3c:14:52:0c:88:86:6c:
         58:20:da:5b:2c:dc:7c:e6:28:db:a0:e1:5b:b3:b9:8a:ed:0a:
         0d:50:5b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:25:17 2026 by rpki-client