Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138312e3139372e3132382e302f31382d3234203d3e203138383039.roa
File:                     3138312e3139372e3132382e302f31382d3234203d3e203138383039.roa (raw, json)
Hash identifier:          lvOgw2sqHbGgMGcLs/4noiRN3T+B3/m2vAbPxy0iiEY=
Subject key identifier:   46:30:1D:84:4D:E3:33:0D:79:0D:E1:85:0E:CD:59:36:28:74:F3:03
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       7B9FC849C856F9D8A5EBEFAA542F5800B41358BC
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138312e3139372e3132382e302f31382d3234203d3e203138383039.roa
Signing time:             Fri 25 Sep 2026 14:36:54 +0000
ROA not before:           Fri 25 Sep 2026 14:31:54 +0000
ROA not after:            Fri 24 Sep 2027 14:36:54 +0000
asID:                     18809
IP address blocks:        181.197.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 19:59:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:9f:c8:49:c8:56:f9:d8:a5:eb:ef:aa:54:2f:58:00:b4:13:58:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:54 2026 GMT
            Not After : Sep 24 14:36:54 2027 GMT
        Subject: CN=46301D844DE3330D790DE1850ECD59362874F303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:8a:2f:e7:e8:b6:46:aa:e9:44:77:ad:a9:
                    a5:45:c8:f7:12:e7:8f:84:58:6a:3c:23:1c:a1:9a:
                    25:e9:8a:9d:4d:57:59:b5:bb:f9:c4:f6:f9:4b:f5:
                    ad:52:4d:33:3e:36:01:b6:25:89:cb:b4:e5:5b:94:
                    15:04:e2:b9:cb:02:a4:6e:bb:8b:b3:e5:e3:65:4b:
                    cd:97:35:23:fc:32:c7:17:79:55:68:cc:40:c5:d3:
                    bc:d9:9f:21:46:16:6d:1e:bb:c9:f6:d3:e5:98:86:
                    0e:c0:71:3d:88:3d:f6:fa:00:dc:00:82:38:3f:53:
                    14:a8:1b:2c:c3:4a:25:6e:c6:37:a8:20:da:6b:a5:
                    60:75:dc:89:6b:1e:c5:7b:fc:7e:bf:a1:67:60:79:
                    f3:dc:e7:6d:ab:92:14:71:90:10:cf:fc:60:cf:72:
                    0e:c0:fc:ef:ef:5d:55:28:a7:14:00:de:f2:da:9c:
                    ec:c8:eb:2b:e9:c1:be:12:b5:62:ca:65:c3:9c:77:
                    b2:5b:fd:71:21:e0:fc:4c:d1:5c:50:42:a9:b4:9a:
                    87:cc:54:ce:b1:1e:4b:66:f3:bb:31:69:de:21:a2:
                    d0:fa:ab:86:05:36:c9:87:9a:92:7e:2c:0b:a1:84:
                    e5:ae:5e:5a:8d:37:d6:8d:19:d6:e5:dc:1f:8b:67:
                    b4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:30:1D:84:4D:E3:33:0D:79:0D:E1:85:0E:CD:59:36:28:74:F3:03
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138312e3139372e3132382e302f31382d3234203d3e203138383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.197.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         43:83:52:d8:64:ca:31:d6:67:55:ff:92:7b:ae:98:08:6f:a3:
         af:35:3a:0a:6b:a7:66:4f:76:26:ad:f8:a7:69:c4:27:e5:9f:
         18:ea:cf:4b:25:0a:9f:b0:36:2b:c4:81:8a:27:6b:db:1b:35:
         b6:0b:ac:31:02:c7:3f:c3:67:5e:24:05:58:17:fe:68:8d:c3:
         30:86:42:c3:c5:30:f4:f4:f1:95:b9:89:3b:8c:46:b5:7f:50:
         02:e8:4e:b1:05:51:fb:9f:51:31:64:6b:70:ef:5b:b3:ea:0f:
         45:9b:7b:b3:9d:29:47:99:b5:3b:3d:db:46:45:50:32:3b:90:
         93:59:e9:5f:38:ad:8a:f1:2b:11:b5:66:ec:c1:4d:d1:71:68:
         58:67:0f:22:9a:f2:d9:78:c1:75:51:2f:e4:c1:3c:1b:57:88:
         c2:15:82:de:4c:c8:b2:e5:67:92:60:4a:59:eb:16:cf:43:61:
         ac:94:43:c9:55:eb:2b:28:b8:3e:58:19:d4:e1:38:5f:9f:89:
         dd:ec:a4:7e:8e:f1:5f:1a:a1:d2:eb:02:76:c3:10:8b:43:a3:
         8b:dc:b6:e8:f5:ef:c6:83:45:9d:a3:4f:0a:9c:85:85:a6:ff:
         55:6d:55:cf:c7:24:0c:e2:d5:28:07:02:f0:e2:0d:a0:d7:86:
         77:f1:f7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 08:32:52 2026 by rpki-client