Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/3138312e3232342e3137322e3132382f32352d3235203d3e20323636393034.roa
File:                     3138312e3232342e3137322e3132382f32352d3235203d3e20323636393034.roa (raw, json)
Hash identifier:          Zzadgcmm+XVTN77YwPaD/btwJ1KYgmVBVk/kTcbZVb0=
Subject key identifier:   F9:CF:AB:96:3F:83:78:91:8F:A7:E1:33:23:E5:4F:54:42:D6:BE:43
Certificate issuer:       /CN=A5277502999C0778EA28B6DE57F3CF801BE9ADDA
Certificate serial:       570B13183A4EC665736A609E2423CC470D6A3A8C
Authority key identifier: A5:27:75:02:99:9C:07:78:EA:28:B6:DE:57:F3:CF:80:1B:E9:AD:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/3138312e3232342e3137322e3132382f32352d3235203d3e20323636393034.roa
Signing time:             Wed 12 Aug 2026 02:35:00 +0000
ROA not before:           Wed 12 Aug 2026 02:30:00 +0000
ROA not after:            Wed 11 Aug 2027 02:35:00 +0000
asID:                     266904
IP address blocks:        181.224.172.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Sep 2026 07:38:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:0b:13:18:3a:4e:c6:65:73:6a:60:9e:24:23:cc:47:0d:6a:3a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5277502999C0778EA28B6DE57F3CF801BE9ADDA
        Validity
            Not Before: Aug 12 02:30:00 2026 GMT
            Not After : Aug 11 02:35:00 2027 GMT
        Subject: CN=F9CFAB963F8378918FA7E13323E54F5442D6BE43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:cb:cd:56:d2:6a:cd:4d:b4:85:85:05:3f:
                    38:aa:a8:45:66:4e:81:0f:3c:46:81:3d:85:e8:9e:
                    62:42:20:8a:3a:2b:45:7b:3a:b8:42:5b:e7:c8:3b:
                    6a:69:fb:74:6a:3a:d1:fe:16:79:3b:d0:6b:b5:e8:
                    12:e7:f2:14:94:c5:3a:97:89:ac:78:84:5a:1f:90:
                    17:89:86:3d:99:0c:a3:ce:90:f3:db:34:ea:de:6a:
                    17:46:78:35:d6:00:50:d1:65:12:3b:15:99:a1:46:
                    fa:e2:d1:24:9b:5d:60:7e:04:2c:6b:e0:f1:99:d1:
                    72:f0:79:1f:44:35:74:2d:a3:e7:c1:81:8e:a5:80:
                    d1:71:33:7c:ee:30:0e:3a:5a:4a:93:3c:cc:ea:81:
                    66:aa:8b:95:e4:4f:a8:bd:7a:c5:71:78:d7:7b:33:
                    0c:7a:64:4e:a4:38:99:59:c9:63:bd:3d:d4:cc:d0:
                    01:de:10:cf:bf:98:01:59:b7:d8:bd:9d:c1:03:72:
                    b4:aa:fe:54:e4:a6:21:33:b8:c6:96:a6:d9:d2:e7:
                    47:46:7b:47:a0:94:45:aa:92:bd:b0:3b:e9:a4:30:
                    87:06:e4:17:26:b1:60:58:d8:8d:64:4a:c5:85:4e:
                    95:63:8a:81:27:88:2c:8a:68:21:8d:74:ea:5f:3b:
                    34:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CF:AB:96:3F:83:78:91:8F:A7:E1:33:23:E5:4F:54:42:D6:BE:43
            X509v3 Authority Key Identifier:
                keyid:A5:27:75:02:99:9C:07:78:EA:28:B6:DE:57:F3:CF:80:1B:E9:AD:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/3138312e3232342e3137322e3132382f32352d3235203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.172.128/25

    Signature Algorithm: sha256WithRSAEncryption
         48:43:09:6f:81:e0:a7:f6:f3:ad:17:be:7c:98:c2:3d:c8:00:
         7e:3a:5e:8a:69:60:f8:34:23:9a:ea:dc:ec:26:cb:a6:74:4c:
         3b:73:8e:cb:5f:96:04:1a:47:e0:76:f8:f1:13:df:34:4f:64:
         d1:dc:5e:ec:ff:cf:8e:09:d0:81:91:0f:a5:86:69:45:4b:71:
         ac:79:53:d0:f2:2c:94:fb:d1:c7:b2:4b:7d:5e:e7:d3:27:b8:
         a0:aa:18:80:3c:06:aa:4b:ec:24:75:82:cc:f7:d5:8a:80:7e:
         0c:de:f7:91:da:1d:87:8b:00:28:c8:0a:8f:61:f8:e1:cb:a9:
         c9:39:b9:3e:63:09:f9:7d:e2:5d:84:99:03:79:76:79:d3:02:
         72:1d:88:de:72:87:ef:6c:82:2d:aa:e7:29:c3:17:c9:b2:0c:
         77:2d:03:77:74:b5:40:9d:28:e9:62:1b:73:f0:da:99:1a:3e:
         7f:a6:e5:8c:29:ca:82:4f:85:0e:f6:8c:48:57:56:cc:56:af:
         15:28:e5:c8:9f:48:9a:f5:25:bd:99:48:cc:bb:f5:d9:ad:6a:
         ac:64:d5:a2:6a:35:97:5d:3f:49:d3:07:06:fa:25:6a:dc:96:
         c8:4f:30:77:18:70:93:c3:61:32:3b:27:4c:9f:71:de:b9:b4:
         2a:06:94:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 10:42:54 2026 by rpki-client