Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/3138312e3233322e3233372e302f32342d3234203d3e20323731393434.roa
File:                     3138312e3233322e3233372e302f32342d3234203d3e20323731393434.roa (raw, json)
Hash identifier:          xg9J1LeHs8lPGwRyudaqRjC1vHkHrV5lokUFZGmLCdk=
Subject key identifier:   BE:F4:13:64:E7:31:75:11:72:09:22:44:D7:40:92:8E:1E:6E:16:0E
Certificate issuer:       /CN=E9083A90EEA0434C3986E9FAB7BF8133F280BD9A
Certificate serial:       4D97A4EF7B0245BEC33AA8D1EEF5909508197EBE
Authority key identifier: E9:08:3A:90:EE:A0:43:4C:39:86:E9:FA:B7:BF:81:33:F2:80:BD:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/3138312e3233322e3233372e302f32342d3234203d3e20323731393434.roa
Signing time:             Mon 20 Apr 2026 15:39:24 +0000
ROA not before:           Mon 20 Apr 2026 15:34:24 +0000
ROA not after:            Mon 19 Apr 2027 15:39:24 +0000
asID:                     271944
IP address blocks:        181.232.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 May 2026 11:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:97:a4:ef:7b:02:45:be:c3:3a:a8:d1:ee:f5:90:95:08:19:7e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9083A90EEA0434C3986E9FAB7BF8133F280BD9A
        Validity
            Not Before: Apr 20 15:34:24 2026 GMT
            Not After : Apr 19 15:39:24 2027 GMT
        Subject: CN=BEF41364E731751172092244D740928E1E6E160E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0c:70:97:8d:50:9b:32:a2:fb:f6:f4:7b:b9:
                    19:6c:fb:49:a5:d1:45:03:03:41:64:7a:fc:ff:bc:
                    09:cd:9b:0a:26:23:ee:69:c0:80:b4:4f:31:a6:0f:
                    47:88:d7:d6:35:f0:5c:11:a1:1b:ec:a2:fc:c9:08:
                    7c:24:74:45:f5:7a:46:a8:d5:27:67:9b:e4:61:14:
                    fc:d8:b1:f8:60:d2:8e:5e:dd:c6:cb:30:87:1c:cc:
                    e6:c1:13:15:1c:27:1c:5b:d4:92:0c:53:50:0c:9f:
                    74:27:3a:c8:c4:2c:c1:c0:b2:31:71:5d:02:ed:ef:
                    92:28:d2:58:f9:60:05:29:bc:a6:0e:b6:fc:97:1a:
                    86:e9:f2:8a:4e:de:20:2a:af:43:a1:de:2f:9a:6a:
                    1b:9d:59:ee:22:99:8a:21:c7:75:e0:39:96:b9:8d:
                    bf:34:94:72:cd:db:02:53:55:c6:e9:b8:89:54:4c:
                    e9:75:6c:07:65:6c:36:14:c9:88:88:f3:df:bd:01:
                    dd:ba:40:c0:d7:8f:cd:32:a2:41:5d:f0:78:e8:a2:
                    65:39:f4:d7:de:34:56:e6:ec:3c:51:de:d4:6b:bc:
                    a4:c4:1f:6c:be:3c:6d:f1:2b:f5:3d:6d:65:6d:40:
                    4a:0d:4b:43:07:98:69:31:94:fd:d7:d2:f2:2b:22:
                    45:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F4:13:64:E7:31:75:11:72:09:22:44:D7:40:92:8E:1E:6E:16:0E
            X509v3 Authority Key Identifier:
                keyid:E9:08:3A:90:EE:A0:43:4C:39:86:E9:FA:B7:BF:81:33:F2:80:BD:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/3138312e3233322e3233372e302f32342d3234203d3e20323731393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:de:bb:e9:20:84:71:6e:33:83:d7:47:6d:3b:e7:e9:20:71:
         b6:1a:8d:d3:b2:ae:bb:9b:c6:bb:5d:f2:2b:ad:bc:20:26:71:
         1e:6b:c6:d8:e6:c9:62:f0:e2:35:03:9a:50:74:ec:78:1a:cd:
         6c:c6:15:1a:b7:f7:06:31:b3:42:cc:ca:d8:49:9c:47:0b:10:
         07:6e:8d:e7:1b:2e:85:49:99:b5:d4:17:00:16:98:97:26:ee:
         c9:a0:90:50:1e:16:1f:46:63:ac:c6:fa:a6:8f:54:18:91:9b:
         eb:b5:fd:e6:9a:db:e7:f8:99:f0:38:17:eb:57:30:56:59:01:
         94:60:80:5a:7d:90:5d:44:3a:c6:10:ba:8e:06:70:fa:24:d4:
         2e:63:39:eb:16:d7:21:77:fc:56:ad:0f:c7:25:94:c6:de:39:
         8d:78:4d:04:96:5a:fe:db:1c:98:19:d7:f4:6c:0d:56:6b:ca:
         f2:8c:b5:63:18:97:21:b9:57:14:02:22:94:84:2a:dd:ab:a3:
         64:83:57:91:65:aa:a7:23:e9:60:2f:50:3a:70:c8:94:d2:f5:
         3d:de:60:db:84:52:71:d8:f4:ac:e7:b0:71:7c:ea:be:5e:6a:
         b9:5b:5b:70:00:b3:8f:20:5e:c1:9b:b4:58:9f:7c:22:81:f4:
         10:56:6d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 06:37:41 2026 by rpki-client