Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138312e3139372e35322e302f32322d3234203d3e203134373039.roa
File:                     3138312e3139372e35322e302f32322d3234203d3e203134373039.roa (raw, json)
Hash identifier:          J0qfRDiiANmxhTUV01oCNsmeIa+25VsjCLFNDM2sVfc=
Subject key identifier:   41:8B:29:65:08:38:F9:4C:2F:AF:62:92:E8:D6:A1:60:AE:65:8B:E0
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       72120D4BE2F6579629CC93E923A30A3EFA9C29C2
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138312e3139372e35322e302f32322d3234203d3e203134373039.roa
Signing time:             Fri 25 Sep 2026 14:36:50 +0000
ROA not before:           Fri 25 Sep 2026 14:31:50 +0000
ROA not after:            Fri 24 Sep 2027 14:36:50 +0000
asID:                     14709
IP address blocks:        181.197.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 19:59:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:12:0d:4b:e2:f6:57:96:29:cc:93:e9:23:a3:0a:3e:fa:9c:29:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Sep 25 14:31:50 2026 GMT
            Not After : Sep 24 14:36:50 2027 GMT
        Subject: CN=418B29650838F94C2FAF6292E8D6A160AE658BE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4c:b8:09:7c:17:84:7c:2e:43:be:49:13:ac:
                    aa:79:88:28:d1:7c:b9:f8:00:b7:b8:f3:3e:98:1d:
                    1f:29:85:a4:a7:c4:bc:70:b3:ef:e3:f5:dc:94:cc:
                    ce:85:26:54:50:19:6f:3f:c2:53:25:f1:9a:9a:98:
                    fe:f9:fd:0f:f8:5d:b6:81:f0:f2:31:a9:58:6b:d1:
                    75:f9:6d:55:81:2e:fe:95:92:2f:d5:af:d9:07:b1:
                    f6:30:2f:03:97:ce:a8:76:48:da:dd:66:8b:3b:07:
                    fc:04:57:f3:eb:36:d7:a5:64:98:5b:fa:17:c9:65:
                    8d:2b:51:e1:f6:ea:46:b1:fc:3f:73:d9:d8:47:09:
                    31:94:10:f2:50:41:18:3c:1a:43:67:3a:68:f8:c3:
                    b4:cb:e0:2d:79:6b:36:71:74:2c:af:f4:94:47:42:
                    26:29:9f:2b:7c:dd:29:55:25:af:13:61:c9:7d:c1:
                    d2:f0:6b:de:e6:c1:e4:a3:d1:5e:2e:23:82:a4:02:
                    f1:ce:a0:15:0d:cd:68:83:7f:e3:8b:65:2e:f5:2a:
                    1c:e7:e9:f5:b4:d7:38:19:77:d2:17:93:88:9a:83:
                    c3:e0:85:1f:15:21:69:0d:57:53:3a:c8:6b:2b:40:
                    ff:9e:ba:49:e4:32:16:8c:1f:37:54:72:7d:9f:55:
                    fd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8B:29:65:08:38:F9:4C:2F:AF:62:92:E8:D6:A1:60:AE:65:8B:E0
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/3138312e3139372e35322e302f32322d3234203d3e203134373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.197.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:92:2b:42:0f:2d:85:49:0b:34:1b:27:cd:78:78:71:2a:2e:
         96:1a:ef:a9:d8:9d:c7:a3:78:66:b2:9b:36:cc:e5:df:02:d9:
         03:58:35:59:34:fb:e9:4b:ae:e5:35:8d:66:9c:69:1f:21:76:
         76:62:31:55:13:5a:d8:37:f4:c1:48:e6:62:17:67:99:2c:df:
         aa:14:6c:ad:da:9c:f7:e1:b1:16:af:06:60:4a:8b:86:28:24:
         27:7a:77:36:30:fb:ba:2d:ee:e5:95:00:64:82:e3:6f:b0:eb:
         26:d0:95:f1:5a:c6:1a:e2:9b:c1:e6:3f:81:6b:d2:4c:f6:f7:
         87:b4:74:9d:7f:99:0b:40:ad:8e:b6:88:55:c6:97:c7:d9:3b:
         ef:12:8f:77:68:5e:3d:d1:f6:8b:e7:b5:61:cf:26:fa:02:6a:
         d0:26:59:50:d9:a2:f7:af:da:84:47:f3:d2:56:ae:79:b9:9a:
         94:ef:00:7a:5e:b9:75:a8:85:6e:3a:6d:ce:94:4c:39:48:2c:
         4a:97:04:91:5b:dd:d0:56:38:5d:81:9a:0e:14:ee:63:be:fa:
         d2:75:d4:4b:71:59:b4:ce:1f:5a:df:d6:5e:dc:d7:c7:73:12:
         68:7e:b5:5d:65:b6:68:4f:79:f4:40:9c:52:ce:44:e4:be:45:
         3f:05:27:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:36:50 2026 by rpki-client