Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/EF8C60A24A41A75470C9588590A2AFCD02D22AFA87D29F39C668539AFAD21A9E/0/3138312e3137342e3231362e302f32322d3234203d3e20323731383332.roa
File:                     3138312e3137342e3231362e302f32322d3234203d3e20323731383332.roa (raw, json)
Hash identifier:          WcUlPWDKyRGX+4fu16xtSpcwsE9Ax46+a6yEb0dmk4M=
Subject key identifier:   98:69:34:EE:D1:3F:13:2B:84:15:F8:F0:45:D4:05:01:B3:B4:BA:E7
Certificate issuer:       /CN=8F9C5050A46D5190E8AD14AAF02692108F0945A7
Certificate serial:       66B9062588D971D07F1E18B5A5047D29E552B1BE
Authority key identifier: 8F:9C:50:50:A4:6D:51:90:E8:AD:14:AA:F0:26:92:10:8F:09:45:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9C5050A46D5190E8AD14AAF02692108F0945A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EF8C60A24A41A75470C9588590A2AFCD02D22AFA87D29F39C668539AFAD21A9E/0/3138312e3137342e3231362e302f32322d3234203d3e20323731383332.roa
Signing time:             Thu 20 Aug 2026 20:25:00 +0000
ROA not before:           Thu 20 Aug 2026 20:20:00 +0000
ROA not after:            Thu 19 Aug 2027 20:25:00 +0000
asID:                     271832
IP address blocks:        181.174.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EF8C60A24A41A75470C9588590A2AFCD02D22AFA87D29F39C668539AFAD21A9E/0/8F9C5050A46D5190E8AD14AAF02692108F0945A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EF8C60A24A41A75470C9588590A2AFCD02D22AFA87D29F39C668539AFAD21A9E/0/8F9C5050A46D5190E8AD14AAF02692108F0945A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9C5050A46D5190E8AD14AAF02692108F0945A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b9:06:25:88:d9:71:d0:7f:1e:18:b5:a5:04:7d:29:e5:52:b1:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F9C5050A46D5190E8AD14AAF02692108F0945A7
        Validity
            Not Before: Aug 20 20:20:00 2026 GMT
            Not After : Aug 19 20:25:00 2027 GMT
        Subject: CN=986934EED13F132B8415F8F045D40501B3B4BAE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:af:74:ec:fd:fa:93:f5:75:a5:22:dc:c3:87:
                    1e:70:fc:fb:49:2f:df:79:5a:9e:70:07:b1:e9:90:
                    e2:44:7b:eb:9f:4e:85:65:8a:7d:16:9d:6b:cb:90:
                    28:f8:9a:ac:b6:b5:76:12:a6:ef:f4:47:f1:2d:01:
                    45:8f:76:05:3f:1d:49:b1:37:c7:43:0d:a7:fe:fb:
                    ff:69:fa:bd:b9:35:5c:fd:29:ed:c8:fa:5f:1e:c9:
                    61:9c:2c:47:b3:79:d6:e0:91:e9:4f:d3:86:95:97:
                    47:f8:05:07:e3:3d:9e:77:a7:0d:91:a7:36:22:ed:
                    16:b1:42:d3:c1:f1:7a:cf:b7:6c:5f:a6:b4:c7:5d:
                    a5:62:3c:99:65:4c:aa:3c:08:3c:c0:76:b5:3e:18:
                    fb:05:e4:22:8c:51:4f:2c:bd:63:5a:40:4a:68:e6:
                    52:8a:95:a5:20:ed:71:22:3c:24:10:48:ae:35:bb:
                    0e:89:a3:1f:7d:d8:1c:d9:c2:6a:bd:3e:67:ca:31:
                    91:1a:14:84:01:09:4c:f1:21:01:98:97:4b:91:44:
                    5b:18:b7:ca:f0:86:c8:2d:57:25:25:8e:65:dd:d0:
                    1d:cd:8d:b9:c1:70:27:16:d7:bf:e4:21:4d:58:71:
                    ac:4e:42:23:2a:c4:ca:4f:3d:0b:3e:a8:6f:c5:f1:
                    bc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:69:34:EE:D1:3F:13:2B:84:15:F8:F0:45:D4:05:01:B3:B4:BA:E7
            X509v3 Authority Key Identifier:
                keyid:8F:9C:50:50:A4:6D:51:90:E8:AD:14:AA:F0:26:92:10:8F:09:45:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EF8C60A24A41A75470C9588590A2AFCD02D22AFA87D29F39C668539AFAD21A9E/0/8F9C5050A46D5190E8AD14AAF02692108F0945A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9C5050A46D5190E8AD14AAF02692108F0945A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EF8C60A24A41A75470C9588590A2AFCD02D22AFA87D29F39C668539AFAD21A9E/0/3138312e3137342e3231362e302f32322d3234203d3e20323731383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:74:98:a2:76:0f:e1:21:d9:6e:a3:d7:9a:df:39:bf:7c:76:
         6b:75:9a:18:f0:15:a3:31:de:eb:87:d8:34:82:57:f1:0c:48:
         48:2d:d0:7d:3a:58:c1:75:c1:e1:20:1d:03:4e:f6:1d:70:89:
         10:0d:92:57:47:f6:66:f4:72:6f:4d:4c:f8:b6:2c:81:b3:a9:
         e4:b3:18:7d:4e:11:33:ef:73:93:2f:fb:69:bc:2e:88:43:9a:
         f5:6a:22:8d:33:0a:b3:06:53:dc:f0:10:e9:93:61:43:40:a4:
         47:9c:b3:0e:5c:83:cc:27:81:31:25:17:38:cb:13:55:d3:63:
         31:d3:a1:67:8d:9c:1d:2e:49:24:ec:66:7d:df:7a:e0:a9:56:
         97:19:ab:e8:9c:01:b7:5e:30:9e:66:22:98:da:a2:6c:9e:70:
         a6:a5:de:ad:7e:a4:67:d6:0c:6f:8c:9c:49:c7:f7:e4:43:63:
         b7:e6:ef:06:a7:f5:0e:d0:bd:f0:ad:16:db:7d:06:cb:fa:7c:
         55:06:40:4f:cc:9c:2b:a0:d4:d1:04:1f:75:45:77:d1:5c:52:
         28:ce:bc:24:de:6d:e0:69:f3:a1:73:9b:58:75:7d:9a:03:9a:
         b6:97:9b:14:e8:6c:ce:d9:a6:72:91:d4:5b:d0:3c:07:4f:15:
         a2:48:4b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:49:51 2026 by rpki-client