Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3138312e3232352e3133362e302f32322d3234203d3e2036393339.roa
File:                     3138312e3232352e3133362e302f32322d3234203d3e2036393339.roa (raw, json)
Hash identifier:          u5exl0J4U+lIrFqdCXvSyEMjx7JMLS5X7TxNUTdNnks=
Subject key identifier:   D5:FA:C8:A4:45:27:DF:B5:52:CD:6C:E3:5C:F9:3B:A9:38:49:AC:65
Certificate issuer:       /CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E
Certificate serial:       70D4F8E831BB8200B1BF397ABBFFFAAF9BDB571D
Authority key identifier: BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3138312e3232352e3133362e302f32322d3234203d3e2036393339.roa
Signing time:             Thu 23 Apr 2026 02:00:00 +0000
ROA not before:           Thu 23 Apr 2026 01:55:00 +0000
ROA not after:            Thu 22 Apr 2027 02:00:00 +0000
asID:                     6939
IP address blocks:        181.225.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 10:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d4:f8:e8:31:bb:82:00:b1:bf:39:7a:bb:ff:fa:af:9b:db:57:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E
        Validity
            Not Before: Apr 23 01:55:00 2026 GMT
            Not After : Apr 22 02:00:00 2027 GMT
        Subject: CN=D5FAC8A44527DFB552CD6CE35CF93BA93849AC65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:47:6e:7e:71:82:76:2d:ca:89:da:64:70:
                    ec:ab:f5:dd:ac:4a:9c:e6:c9:83:53:35:4a:0b:af:
                    e2:37:0c:f0:53:6b:e0:39:06:27:f8:f6:c0:52:1c:
                    dd:49:ee:8e:d1:87:e7:12:08:d4:d7:17:09:ff:f1:
                    ca:08:d1:3c:03:96:c7:cd:f2:f6:7c:17:72:bd:48:
                    63:44:c8:2a:0d:94:10:61:a7:2c:06:3e:a8:44:c9:
                    7b:fd:b8:2b:18:cf:c4:23:28:54:87:ac:36:d8:89:
                    01:8f:c7:61:68:14:12:0a:d1:2c:ae:e7:82:70:b6:
                    a0:81:f9:54:79:94:a3:46:bb:1c:f7:3a:2f:61:b5:
                    5c:f3:7f:d7:5b:3f:29:65:71:ff:5f:cd:ee:0f:0f:
                    54:93:04:eb:2f:b5:a2:62:ab:8d:5a:2f:ac:30:81:
                    54:b8:f6:37:75:ea:b9:e1:29:0c:90:f3:a8:d9:02:
                    af:71:d0:5c:fd:c5:4d:16:25:b2:c2:5f:95:5f:01:
                    aa:d1:00:18:8b:95:49:18:ce:df:59:e1:8d:94:af:
                    c2:b9:24:28:80:87:cc:91:b9:3a:70:41:1c:b9:d4:
                    17:e4:32:9f:ea:9c:95:a5:28:34:a7:87:95:32:8a:
                    56:bd:31:5d:f8:97:95:d9:fe:46:2c:d5:7e:6c:e1:
                    76:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:FA:C8:A4:45:27:DF:B5:52:CD:6C:E3:5C:F9:3B:A9:38:49:AC:65
            X509v3 Authority Key Identifier:
                keyid:BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3138312e3232352e3133362e302f32322d3234203d3e2036393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:47:57:f9:2e:96:d6:f2:02:9e:61:46:72:f0:c3:a5:c2:64:
         43:ee:d2:84:4c:d8:04:8a:72:6c:da:c9:7b:7a:fe:c2:cc:db:
         2a:9d:59:0b:dd:6e:e4:cd:d5:ca:84:b7:55:c8:46:9a:6a:58:
         04:93:ba:35:ae:9b:d9:cf:fa:c5:de:9c:4e:fc:59:be:04:9f:
         5f:bd:de:aa:3c:51:37:0d:23:1e:59:fc:61:7a:bf:1c:0d:ad:
         43:b7:55:9e:cd:9f:1d:0e:fc:9e:6f:ed:e8:97:71:a8:f2:85:
         96:fd:c6:58:f4:74:62:da:de:f6:da:a3:0c:ff:5f:7b:e0:09:
         58:3f:7d:9d:5f:d8:a1:45:27:a8:8e:d9:77:9c:d7:ae:b2:99:
         65:1d:b6:7a:cd:3f:16:e1:9f:8b:2e:aa:98:59:6a:9e:21:75:
         bb:f1:77:1e:4f:3b:71:61:6a:6e:fc:3b:16:dd:86:23:ee:34:
         e2:c9:3b:72:99:eb:96:a1:59:d0:b8:f9:c8:fe:3d:8f:4b:c8:
         19:1f:43:cc:54:ff:9f:05:ad:8e:c6:b2:2c:2e:e5:1f:82:ec:
         18:72:9a:78:aa:15:18:74:32:be:1c:6a:ba:53:da:43:92:17:
         da:69:9a:f2:4e:f8:64:14:fc:9a:7a:97:4b:43:ab:ae:2f:e4:
         3e:71:bd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 08:23:30 2026 by rpki-client