Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138312e3139372e302e302f31372d3234203d3e203138383039.roa
File:                     3138312e3139372e302e302f31372d3234203d3e203138383039.roa (raw, json)
Hash identifier:          5h/t0joyMJBiO8M6iky2x0O1RwrFwbaCJ5nYdYr4D7A=
Subject key identifier:   E1:9C:75:DB:04:0D:7A:FD:DE:99:9D:3E:A6:58:16:E3:82:E5:59:74
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       09F95A4537B52DF434B934D521B867CB8D19AD76
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138312e3139372e302e302f31372d3234203d3e203138383039.roa
Signing time:             Fri 25 Sep 2026 14:36:59 +0000
ROA not before:           Fri 25 Sep 2026 14:31:59 +0000
ROA not after:            Fri 24 Sep 2027 14:36:59 +0000
asID:                     18809
IP address blocks:        181.197.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 05:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f9:5a:45:37:b5:2d:f4:34:b9:34:d5:21:b8:67:cb:8d:19:ad:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:59 2026 GMT
            Not After : Sep 24 14:36:59 2027 GMT
        Subject: CN=E19C75DB040D7AFDDE999D3EA65816E382E55974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:87:bc:8c:ab:52:e8:da:68:95:ac:9c:82:c8:
                    61:0c:e9:0a:e0:3f:64:d6:f4:5c:74:b1:1f:d4:b1:
                    b2:10:f5:07:6e:44:8a:55:67:45:3f:21:a8:d5:1b:
                    6d:be:47:1b:0b:98:cb:2f:df:f5:3e:55:2f:7a:17:
                    f7:3e:c6:d7:c5:de:7f:4e:32:dc:f0:80:59:02:de:
                    5b:09:42:55:4a:58:78:16:f3:be:af:c4:0d:bd:29:
                    7e:4b:bd:70:34:39:a5:20:e9:66:bc:aa:ff:2f:94:
                    c9:ea:92:f0:0c:aa:b3:df:81:e3:a9:a0:ab:ad:95:
                    94:54:05:8e:65:48:30:92:d3:11:4c:ca:f9:a5:32:
                    cb:65:80:9f:96:55:67:6c:d3:b5:00:6e:fe:2f:6f:
                    bb:f0:77:f9:a2:0d:20:f7:28:4d:c7:d3:c2:ea:14:
                    ee:bd:d6:af:be:11:9e:1d:f0:52:a4:68:7c:b7:4e:
                    5b:b3:bc:c7:3f:83:99:83:6e:c3:31:c8:34:17:97:
                    a0:db:2e:22:a6:1d:40:58:f1:47:6b:50:32:56:7c:
                    41:04:f6:7f:c9:87:ff:26:c7:df:cf:e6:b9:8f:87:
                    bf:60:45:74:a5:32:5e:cc:88:3f:94:35:e2:98:ef:
                    0b:f7:44:2c:a2:41:d2:29:50:63:7e:c5:37:16:0f:
                    83:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:9C:75:DB:04:0D:7A:FD:DE:99:9D:3E:A6:58:16:E3:82:E5:59:74
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138312e3139372e302e302f31372d3234203d3e203138383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.197.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         65:a1:ea:63:c6:dd:80:ca:b1:14:85:0e:ef:d2:ab:0b:10:6c:
         0c:f9:43:e7:87:6f:d3:a1:73:08:60:d6:6a:61:b6:11:95:9c:
         cb:97:12:22:d5:1e:93:c9:c6:52:9d:1b:16:5a:24:bb:5c:f2:
         d1:a2:ee:44:8c:b1:dd:2d:41:b9:73:30:5d:62:61:83:fb:f0:
         a8:15:c7:19:b7:24:e2:23:a7:13:9f:2a:2d:17:42:52:ab:44:
         69:26:06:24:17:27:8c:e9:16:18:a6:ce:e3:51:a9:2c:75:e6:
         42:6d:f9:ae:14:48:48:af:3e:e1:08:13:5c:bc:36:56:6f:cd:
         b5:dd:81:d5:14:07:be:22:87:3c:5d:90:e1:82:e8:86:5b:3a:
         41:e1:a2:23:95:d6:ee:3e:f1:a1:36:3d:6a:e5:1c:24:b9:5c:
         64:70:c4:08:cc:14:e4:07:2e:a9:07:20:ad:44:b6:a3:23:94:
         fd:9a:0d:42:50:e6:e8:e6:08:50:29:1b:aa:f1:c2:ee:9b:d0:
         23:23:69:73:94:7f:ed:a8:47:c1:ab:a6:b9:39:ce:c3:d6:9d:
         a2:d9:17:d6:fd:b1:2c:25:a7:d7:42:51:f8:1e:25:1b:56:30:
         dd:6f:c2:2a:41:3f:44:3a:2a:62:62:cf:13:a0:d2:4e:45:1f:
         ea:a8:ec:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 18:38:05 2026 by rpki-client