Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e33362e302f32332d3233203d3e2033383136.roa
File:                     3138312e3137342e33362e302f32332d3233203d3e2033383136.roa (raw, json)
Hash identifier:          5qFT1ucbQvHPjhXGoYkMck4EwKnCaL/tabEZx4Y/TWc=
Subject key identifier:   38:A0:8A:A1:FA:4E:71:6C:54:06:BD:8B:15:59:5E:4A:B2:10:65:20
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       0DDA39DF6461B3FB9510816450DD6178B6E1B831
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e33362e302f32332d3233203d3e2033383136.roa
Signing time:             Wed 23 Jul 2025 19:50:00 +0000
ROA not before:           Wed 23 Jul 2025 19:45:00 +0000
ROA not after:            Wed 22 Jul 2026 19:50:00 +0000
asID:                     3816
IP address blocks:        181.174.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:da:39:df:64:61:b3:fb:95:10:81:64:50:dd:61:78:b6:e1:b8:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Jul 23 19:45:00 2025 GMT
            Not After : Jul 22 19:50:00 2026 GMT
        Subject: CN=38A08AA1FA4E716C5406BD8B15595E4AB2106520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a4:33:22:00:b9:ff:17:37:ae:5d:c2:95:b9:
                    ce:34:df:dd:7c:e6:85:7f:bf:1c:32:bb:cd:6d:e9:
                    c2:c7:a0:d1:4a:73:01:26:f6:60:00:48:06:00:5c:
                    d4:ed:c2:d8:7c:c3:ca:08:69:22:c8:91:5f:be:6f:
                    c1:71:50:f6:1a:db:b9:f6:1f:7b:b9:a0:dc:67:eb:
                    81:ea:fc:12:09:05:3a:0e:f8:eb:a5:4f:62:09:6c:
                    8a:48:64:20:db:e6:0e:bb:ee:62:ef:5a:3c:56:15:
                    93:67:07:a0:1c:44:5a:cd:31:76:86:4b:20:73:4a:
                    3c:1a:65:25:8b:f4:4d:53:b6:64:ee:3f:97:b1:9d:
                    c5:f1:4b:93:b3:2c:92:4f:0d:a7:be:bf:98:da:ad:
                    4d:ff:b2:a8:63:c7:29:b4:72:df:3b:c4:f1:55:67:
                    41:01:24:bf:33:9e:08:bc:94:44:7a:6c:ba:0b:c8:
                    f3:f0:82:ae:7b:5e:fe:12:dd:2c:a8:ac:d2:2f:22:
                    d0:a2:d4:3a:b0:12:4c:08:3d:a8:a7:64:21:b6:9d:
                    ca:a2:a8:dc:cf:19:be:0d:04:bc:53:aa:13:9f:f2:
                    9c:4e:33:dc:64:09:8f:e4:4f:4f:e1:6b:6f:2b:3d:
                    a9:90:de:ec:b2:85:d4:a6:57:58:e8:38:c7:36:63:
                    08:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A0:8A:A1:FA:4E:71:6C:54:06:BD:8B:15:59:5E:4A:B2:10:65:20
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e33362e302f32332d3233203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:e8:44:be:6e:eb:90:ab:ec:08:53:20:d3:27:e2:bd:26:49:
         95:d2:af:be:59:2d:5b:32:6d:40:30:e8:da:16:7e:2b:d6:09:
         c9:58:16:37:96:92:ca:eb:21:bf:f4:56:ce:ee:bf:c6:a9:bc:
         e1:b8:b5:51:b2:f6:d0:f9:57:6a:8e:29:29:04:95:e8:20:c0:
         5f:bd:f6:9b:9d:29:9b:02:09:91:5b:e7:08:a5:2d:ba:29:e6:
         92:86:af:b2:d1:c2:b6:9f:96:78:c9:a6:d3:7d:ed:02:f1:a2:
         4e:0b:2c:f6:67:2e:12:fb:f9:03:1f:c1:95:a4:f0:7b:3c:16:
         a5:94:6e:39:53:fc:d4:a4:a5:4d:a3:1e:30:77:bc:5c:b7:0d:
         6e:29:d7:0c:1f:83:93:c6:e7:0c:b1:ce:ad:2a:db:22:32:07:
         07:2c:6a:cd:85:27:c4:0d:60:1b:ef:13:c4:b4:20:21:2c:a5:
         7a:a1:39:94:4f:14:0a:f3:6b:7c:4d:79:ad:c5:3b:8c:ae:91:
         89:7f:7f:c3:74:5d:d0:74:4e:6f:df:19:ab:ee:d4:11:d0:6d:
         dd:5a:a4:01:52:95:45:7c:6b:e9:66:6d:f0:59:9b:2d:d5:93:
         5d:d8:e9:a6:8b:90:27:a2:61:5c:a5:ce:0e:aa:a8:89:23:62:
         63:18:48:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:14:02 2025 by rpki-client