Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3231322e302f32342d3234203d3e20323033.roa
File:                     3138312e31362e3231322e302f32342d3234203d3e20323033.roa (raw, json)
Hash identifier:          6uYGJVlLuH5i0Q7jxvIRVhjbVKn5IhhiqGXlrFn8E2E=
Subject key identifier:   4C:98:73:4A:10:B6:FC:A8:BC:2A:DE:E2:45:C0:DA:6E:0D:F9:8A:F6
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       2B89954F7C3A4F0B87FCC8047C5E74F844FC8A64
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3231322e302f32342d3234203d3e20323033.roa
Signing time:             Fri 16 Oct 2026 15:05:00 +0000
ROA not before:           Fri 16 Oct 2026 15:00:00 +0000
ROA not after:            Fri 15 Oct 2027 15:05:00 +0000
asID:                     203
IP address blocks:        181.16.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 20:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:89:95:4f:7c:3a:4f:0b:87:fc:c8:04:7c:5e:74:f8:44:fc:8a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Oct 16 15:00:00 2026 GMT
            Not After : Oct 15 15:05:00 2027 GMT
        Subject: CN=4C98734A10B6FCA8BC2ADEE245C0DA6E0DF98AF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7e:3f:56:55:39:19:82:61:6f:48:68:85:c1:
                    ce:74:e1:9b:d0:ae:65:80:ab:11:e4:76:4b:89:2c:
                    07:2a:b3:05:13:22:52:fb:66:4b:40:44:82:da:cf:
                    f4:c6:4e:96:31:a4:b7:8b:2e:3e:af:ec:bf:ee:ca:
                    1d:bb:8d:44:94:c2:9e:ef:a5:7d:42:0f:a4:3d:26:
                    d1:07:c7:14:62:bb:77:1a:88:2e:eb:d6:0a:bc:90:
                    f4:06:ef:2f:f4:6e:ca:67:14:bd:80:83:53:56:1c:
                    c5:69:8e:cd:23:58:fc:31:78:96:b1:27:7d:89:3a:
                    f2:86:c5:c8:92:79:5d:bc:d0:92:16:bc:90:8a:bf:
                    8b:0e:d6:46:d7:9e:9c:36:0d:68:62:dc:db:79:73:
                    e2:9c:8a:a3:09:f2:64:b9:5f:5c:93:44:b7:04:a9:
                    cd:63:5d:57:a4:ff:20:5a:b3:8c:e4:91:82:93:5f:
                    04:ab:bf:84:0e:e7:5e:1c:75:2c:79:24:1a:b0:59:
                    71:e1:eb:33:1c:57:a5:6d:99:5d:3f:1b:33:64:d0:
                    c1:87:00:1e:f9:e8:41:36:1d:f3:35:51:a0:59:61:
                    d2:09:a3:a2:97:8b:0f:44:7e:22:58:b1:d7:1f:3f:
                    f3:77:dc:ee:72:ef:de:cd:88:a5:d8:0f:d3:6f:1d:
                    af:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:98:73:4A:10:B6:FC:A8:BC:2A:DE:E2:45:C0:DA:6E:0D:F9:8A:F6
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3231322e302f32342d3234203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:a4:8c:c8:9a:29:43:bf:14:65:b7:10:88:d1:79:3a:0e:da:
         ec:0f:42:8e:02:e1:ec:f0:57:68:62:83:5c:23:b8:a7:db:2c:
         59:c6:56:e3:83:94:cb:26:b1:8e:8e:a3:a2:9b:73:fd:be:58:
         c5:d7:6f:b4:ea:2d:8e:e2:23:87:c7:36:67:4a:de:bd:fc:a2:
         1b:6f:3b:72:73:f1:47:70:da:86:cf:d9:38:07:24:7b:6d:13:
         cd:56:60:18:16:27:97:5a:c8:2e:c6:80:44:08:11:d9:61:15:
         73:8d:1f:66:e0:cc:8f:2b:b8:eb:09:f7:a0:98:0b:51:71:43:
         04:43:2d:a1:00:d1:fa:dc:18:ad:ae:99:bc:69:a5:40:56:62:
         24:ae:f1:0c:62:81:f8:16:b6:3f:82:f0:d7:d7:10:02:bc:54:
         70:8d:01:57:bf:4d:07:1e:e6:27:2d:6d:f8:fb:a7:d1:e7:f5:
         1f:29:18:53:f1:58:d0:65:a3:2c:7b:39:4b:88:ad:f6:e8:4e:
         7c:33:d4:ae:4a:1e:f0:f8:2f:56:51:af:44:4b:77:28:d4:61:
         c5:2e:d5:07:60:3e:73:aa:bb:c4:fa:98:56:d8:68:c7:48:1e:
         53:f2:b9:c9:72:0d:ce:36:4a:a9:47:42:a6:a0:44:74:fd:dc:
         a8:94:b6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:33:08 2026 by rpki-client