Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3138312e3232362e302e302f31362d3234203d3e203134313137.roa
File:                     3138312e3232362e302e302f31362d3234203d3e203134313137.roa (raw, json)
Hash identifier:          N7QyfwFPVP8TMSn+sIXjSet1rC+bXVGNaE7YwF3iPhs=
Subject key identifier:   B8:BA:E5:87:C4:12:1F:08:AF:77:9E:A3:0B:86:A0:9D:CD:79:ED:71
Certificate issuer:       /CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3
Certificate serial:       3C4321DF390FEF141083FB36784DEEB80FE4A6E2
Authority key identifier: 8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3138312e3232362e302e302f31362d3234203d3e203134313137.roa
Signing time:             Tue 01 Jul 2025 19:15:04 +0000
ROA not before:           Tue 01 Jul 2025 19:10:04 +0000
ROA not after:            Tue 30 Jun 2026 19:15:04 +0000
asID:                     14117
IP address blocks:        181.226.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 14:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:43:21:df:39:0f:ef:14:10:83:fb:36:78:4d:ee:b8:0f:e4:a6:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3
        Validity
            Not Before: Jul  1 19:10:04 2025 GMT
            Not After : Jun 30 19:15:04 2026 GMT
        Subject: CN=B8BAE587C4121F08AF779EA30B86A09DCD79ED71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e3:68:4b:66:1d:e8:1e:01:86:41:dc:36:f0:
                    03:fd:b1:da:04:57:5c:50:79:68:14:b4:a6:cc:86:
                    43:cf:b5:5f:10:bc:e4:91:3f:95:3f:b4:08:be:a5:
                    22:43:9e:0c:ae:d9:88:17:b5:04:aa:0d:25:5e:d8:
                    f9:e0:29:fb:b5:66:6d:31:ea:ca:d4:d1:f4:58:11:
                    c6:80:c0:10:07:67:a4:77:cd:c8:37:1e:5d:b4:6a:
                    57:d0:42:3c:f4:b1:85:ee:0c:ed:0f:1e:30:db:95:
                    90:99:bb:5b:b9:8a:de:27:f2:99:90:28:b4:46:62:
                    f6:51:1a:2b:13:5d:ea:fa:d1:82:79:14:54:12:59:
                    f5:c4:6e:0b:ff:77:c4:5b:19:be:1b:50:54:85:a6:
                    f4:ae:78:ac:93:91:63:be:4e:c3:9d:66:64:5b:4c:
                    a5:12:74:82:90:50:dc:fe:f5:70:10:e8:15:15:41:
                    e2:d4:7f:aa:f8:e4:1b:cb:93:c5:1f:ea:7c:84:a3:
                    5c:6a:ee:f6:2b:9e:2d:d9:27:6b:85:7e:a3:19:d5:
                    6e:79:bc:00:0c:a6:bf:65:15:72:bc:a5:20:d8:78:
                    7a:a8:18:60:a7:bf:2a:cb:62:ce:c0:b2:da:ed:f3:
                    59:fa:65:bb:14:ea:39:13:2c:19:83:e0:b3:b4:71:
                    c2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BA:E5:87:C4:12:1F:08:AF:77:9E:A3:0B:86:A0:9D:CD:79:ED:71
            X509v3 Authority Key Identifier:
                keyid:8D:B2:82:B3:47:40:BD:99:CD:F8:94:30:62:B7:DC:EC:3C:4B:1F:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DB282B34740BD99CDF8943062B7DCEC3C4B1FF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6C0CE8CFCA14141C3AE42DE6EFC6BBC7716894DF4542224014E417E2E14AB2B/0/3138312e3232362e302e302f31362d3234203d3e203134313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.226.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3b:54:25:b5:c5:95:a2:c9:45:cb:c0:ab:08:9c:0e:14:90:0a:
         fb:0a:d6:06:88:09:d7:d3:4b:0b:93:22:96:d7:68:01:5e:82:
         52:23:75:5f:a5:e0:02:6b:96:d2:88:3e:a9:80:52:38:ee:24:
         a1:75:79:37:a5:28:50:68:35:91:38:2d:4f:9d:d4:e0:0a:f0:
         73:4a:d6:b6:80:86:d3:4c:16:0a:bf:75:ac:2e:cd:fd:10:d9:
         0d:8f:67:48:cd:c8:b3:37:09:8a:24:60:6c:dd:51:f6:2e:e3:
         79:61:62:a7:fe:e3:4f:8e:5a:31:cc:c7:16:a0:67:7e:59:7a:
         85:cf:b5:72:62:38:79:38:90:fc:98:74:5e:af:e1:96:ce:bb:
         e7:9d:ef:c4:86:52:a9:20:8a:dc:1e:d9:d7:89:4c:78:9d:11:
         0c:e3:dd:0c:e9:70:67:09:6f:ca:67:5c:8a:98:b2:20:46:dd:
         70:1f:b1:3e:e6:d0:c3:52:74:64:87:23:35:60:ed:a1:e8:21:
         c4:3a:15:8b:59:76:57:33:7c:ff:7a:ba:8a:75:c4:07:80:e0:
         f7:d3:84:ab:ad:c4:94:d2:da:26:77:54:b4:7a:a4:17:d2:f3:
         91:89:92:c3:2a:c4:a0:25:b8:7d:d3:51:f8:6e:15:47:9e:62:
         75:e0:7d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:45:36 2025 by rpki-client