Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/3138312e3138392e31392e302f32342d3234203d3e20323637383332.roa
File:                     3138312e3138392e31392e302f32342d3234203d3e20323637383332.roa (raw, json)
Hash identifier:          HTmVYVjedBpwqXyosXe5D5XNb1tuC6UPjSV7/q2PWfY=
Subject key identifier:   F4:32:2A:C2:C0:0E:0A:F8:6A:AC:7D:ED:97:51:57:E5:8B:A7:62:2B
Certificate issuer:       /CN=ED35A136442571FBFB23487E7FCF579A7CAE6BBB
Certificate serial:       5218250408E762D6A3E25F8B8CF45AC27868CA8D
Authority key identifier: ED:35:A1:36:44:25:71:FB:FB:23:48:7E:7F:CF:57:9A:7C:AE:6B:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/3138312e3138392e31392e302f32342d3234203d3e20323637383332.roa
Signing time:             Fri 11 Sep 2026 09:45:00 +0000
ROA not before:           Fri 11 Sep 2026 09:40:00 +0000
ROA not after:            Fri 10 Sep 2027 09:45:00 +0000
asID:                     267832
IP address blocks:        181.189.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:18:25:04:08:e7:62:d6:a3:e2:5f:8b:8c:f4:5a:c2:78:68:ca:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED35A136442571FBFB23487E7FCF579A7CAE6BBB
        Validity
            Not Before: Sep 11 09:40:00 2026 GMT
            Not After : Sep 10 09:45:00 2027 GMT
        Subject: CN=F4322AC2C00E0AF86AAC7DED975157E58BA7622B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2e:2a:68:7f:09:d5:f1:43:3e:79:80:1c:97:
                    bc:48:6d:b0:df:71:c4:38:77:e2:80:f6:57:6b:4b:
                    d7:90:33:de:df:0d:37:16:b5:a8:66:b6:fb:92:53:
                    ab:2f:b6:e6:39:dc:c0:8f:32:68:38:fe:3c:24:d0:
                    b9:af:e8:b4:fa:71:3d:60:ea:10:7f:a7:f9:46:58:
                    85:61:29:f2:f0:be:85:23:82:6e:9e:01:ed:51:63:
                    cc:56:b5:d8:fc:2d:6f:15:e0:60:f9:85:a9:2c:25:
                    28:3f:1e:04:19:10:b2:76:a4:37:23:19:aa:28:84:
                    13:11:7d:94:f2:5e:11:0b:89:14:5e:fa:1e:db:84:
                    6d:ca:19:7b:14:f8:dc:b7:6c:f1:37:72:3b:76:46:
                    19:3e:0f:e7:15:00:a9:f7:89:2c:0e:fe:80:b7:27:
                    15:11:ee:66:62:55:8b:9d:51:03:15:8d:08:fa:28:
                    fa:fc:9f:af:18:75:49:cd:6e:23:e6:87:f5:d9:ed:
                    f5:20:64:33:88:13:75:d4:b7:00:fa:89:b7:cd:46:
                    c5:ad:26:89:b2:17:99:46:4e:71:24:25:17:36:2b:
                    3d:58:04:f8:86:6f:29:b1:92:28:1b:6d:4b:5e:b7:
                    7c:2c:50:4a:11:b6:f8:d1:b2:5f:34:3d:6a:7f:de:
                    f3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:32:2A:C2:C0:0E:0A:F8:6A:AC:7D:ED:97:51:57:E5:8B:A7:62:2B
            X509v3 Authority Key Identifier:
                keyid:ED:35:A1:36:44:25:71:FB:FB:23:48:7E:7F:CF:57:9A:7C:AE:6B:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/3138312e3138392e31392e302f32342d3234203d3e20323637383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:d6:ab:1c:cf:46:98:9c:c5:ca:0f:ed:bc:4d:23:34:3c:e4:
         a4:c9:18:85:1b:e6:cd:24:e7:8b:6c:b4:d5:15:fe:53:5e:51:
         31:81:2f:53:17:70:0a:6c:3b:4f:9f:84:5d:aa:41:39:3b:a7:
         aa:14:c2:2a:74:f7:3d:4c:66:dd:11:de:4e:3a:b4:8b:98:94:
         b5:d4:71:c5:30:79:c7:3f:61:f2:27:24:f3:a7:0d:0e:89:30:
         75:b7:27:ba:bc:a8:92:81:2b:d0:e7:fc:62:b3:0b:39:ae:24:
         5c:7a:d1:58:58:1e:85:1c:31:39:eb:c7:15:53:6a:4f:2c:ac:
         92:ec:da:76:27:57:19:46:01:73:55:18:b2:82:10:d0:87:4b:
         1e:78:71:75:1c:29:f4:95:3f:8b:4a:13:28:5f:c7:44:0b:c7:
         7b:3e:f5:ad:00:d3:74:4f:38:93:af:e7:99:05:5d:53:a6:0f:
         12:36:2a:44:5b:50:12:1e:a5:e2:0d:cf:0a:f4:27:b0:6a:c9:
         a0:ed:e8:56:ed:af:80:55:f0:0b:cc:27:51:0d:78:f8:eb:7c:
         e9:56:6a:49:77:19:b6:d8:39:85:03:1d:0d:56:96:c8:f1:24:
         65:26:dd:33:65:06:20:c4:be:32:84:26:f5:dc:f6:a8:97:24:
         30:e8:7f:29
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUhglBAjnYtaj4l+LjPRawnhoyo0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQzNUExMzY0NDI1NzFGQkZCMjM0ODdFN0ZDRjU3OUE3
Q0FFNkJCQjAeFw0yNjA5MTEwOTQwMDBaFw0yNzA5MTAwOTQ1MDBaMDMxMTAvBgNV
BAMTKEY0MzIyQUMyQzAwRTBBRjg2QUFDN0RFRDk3NTE1N0U1OEJBNzYyMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLipofwnV8UM+eYAcl7xIbbDf
ccQ4d+KA9ldrS9eQM97fDTcWtahmtvuSU6svtuY53MCPMmg4/jwk0Lmv6LT6cT1g
6hB/p/lGWIVhKfLwvoUjgm6eAe1RY8xWtdj8LW8V4GD5haksJSg/HgQZELJ2pDcj
GaoohBMRfZTyXhELiRRe+h7bhG3KGXsU+Ny3bPE3cjt2Rhk+D+cVAKn3iSwO/oC3
JxUR7mZiVYudUQMVjQj6KPr8n68YdUnNbiPmh/XZ7fUgZDOIE3XUtwD6ibfNRsWt
JomyF5lGTnEkJRc2Kz1YBPiGbymxkigbbUtet3wsUEoRtvjRsl80PWp/3vOTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU9DIqwsAOCvhqrH3tl1FX5YunYiswHwYDVR0j
BBgwFoAU7TWhNkQlcfv7I0h+f89Xmnyua7swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNTBBOTkxNjdCRTFDQzM5MzcwQUI0Q0I5RTNDRTdDNTM1
QjdDNkFCQzcxOEUxMDQ3NjI5Qzk2QTQ4NkMzRkY1LzAvRUQzNUExMzY0NDI1NzFG
QkZCMjM0ODdFN0ZDRjU3OUE3Q0FFNkJCQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRDM1QTEzNjQ0MjU3MUZCRkIy
MzQ4N0U3RkNGNTc5QTdDQUU2QkJCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzUwQTk5MTY3QkUxQ0MzOTM3MEFCNENCOUUzQ0U3QzUzNUI3QzZBQkM3
MThFMTA0NzYyOUM5NkE0ODZDM0ZGNS8wLzMxMzgzMTJlMzEzODM5MmUzMTM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzgzMzMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtb0T
MA0GCSqGSIb3DQEBCwUAA4IBAQA41qscz0aYnMXKD+28TSM0POSkyRiFG+bNJOeL
bLTVFf5TXlExgS9TF3AKbDtPn4RdqkE5O6eqFMIqdPc9TGbdEd5OOrSLmJS11HHF
MHnHP2HyJyTzpw0OiTB1tye6vKiSgSvQ5/xisws5riRcetFYWB6FHDE568cVU2pP
LKyS7Np2J1cZRgFzVRiyghDQh0seeHF1HCn0lT+LShMoX8dEC8d7PvWtANN0TziT
r+eZBV1Tpg8SNipEW1ASHqXiDc8K9Cewasmg7ehW7a+AVfALzCdRDXj463zpVmpJ
dxm22DmFAx0NVpbI8SRlJt0zZQYgxL4yhCb13PaolyQw6H8p
-----END CERTIFICATE-----
Generated at Fri Sep 18 22:37:46 2026 by rpki-client