Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/F83E18265E9659CF02DED6635CDD846AA73278628C6894EB10B9BE95842CD122/0/3138312e3139312e3135392e302f32342d3234203d3e20323635383032.roa
File:                     3138312e3139312e3135392e302f32342d3234203d3e20323635383032.roa (raw, json)
Hash identifier:          VJp2VhGh02KsuGgsoTFcAMxNaJvxkXnDoXVs8GyaC8Y=
Subject key identifier:   9B:F5:2D:B3:D7:6D:0D:20:E4:F3:4E:54:F1:90:B4:0D:1D:04:4F:84
Certificate issuer:       /CN=FF9B7E84E1B01E99BA7E27C6865947CAD9933BA1
Certificate serial:       3CC0A8ABBF836E16DBD0D46BECBE49BCE16F5072
Authority key identifier: FF:9B:7E:84:E1:B0:1E:99:BA:7E:27:C6:86:59:47:CA:D9:93:3B:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF9B7E84E1B01E99BA7E27C6865947CAD9933BA1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F83E18265E9659CF02DED6635CDD846AA73278628C6894EB10B9BE95842CD122/0/3138312e3139312e3135392e302f32342d3234203d3e20323635383032.roa
Signing time:             Wed 05 Aug 2026 15:15:00 +0000
ROA not before:           Wed 05 Aug 2026 15:10:00 +0000
ROA not after:            Wed 04 Aug 2027 15:15:00 +0000
asID:                     265802
IP address blocks:        181.191.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F83E18265E9659CF02DED6635CDD846AA73278628C6894EB10B9BE95842CD122/0/FF9B7E84E1B01E99BA7E27C6865947CAD9933BA1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F83E18265E9659CF02DED6635CDD846AA73278628C6894EB10B9BE95842CD122/0/FF9B7E84E1B01E99BA7E27C6865947CAD9933BA1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF9B7E84E1B01E99BA7E27C6865947CAD9933BA1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c0:a8:ab:bf:83:6e:16:db:d0:d4:6b:ec:be:49:bc:e1:6f:50:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF9B7E84E1B01E99BA7E27C6865947CAD9933BA1
        Validity
            Not Before: Aug  5 15:10:00 2026 GMT
            Not After : Aug  4 15:15:00 2027 GMT
        Subject: CN=9BF52DB3D76D0D20E4F34E54F190B40D1D044F84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a4:5b:a6:da:b9:a4:6e:4b:05:68:56:67:d0:
                    0b:c7:82:f2:e2:bf:3b:3d:09:1a:92:07:e8:ea:58:
                    2b:31:06:21:b4:b6:84:22:06:26:fa:75:58:9f:2d:
                    53:b9:3e:23:af:ae:f0:4c:10:47:af:20:11:13:ce:
                    45:2c:61:85:c6:da:45:d1:27:df:12:fb:40:5a:f9:
                    e5:34:3c:ec:14:0b:c9:8c:35:43:7b:65:66:a5:1d:
                    f9:eb:44:5b:14:c3:02:32:f4:62:78:ef:57:b1:9f:
                    fc:4a:61:39:cd:32:f7:ba:b4:f1:6e:e5:78:28:63:
                    be:75:9d:e9:39:7a:4a:25:c4:fc:1b:5f:47:6d:3e:
                    e3:f7:7e:ee:cd:84:30:aa:90:2a:1c:26:29:44:cb:
                    75:bd:ee:e0:a7:88:ac:52:ce:7b:f0:96:cb:2b:82:
                    14:e3:43:60:de:49:1d:69:c5:4b:c3:fc:8b:46:ee:
                    d2:74:d4:01:9f:5f:f1:49:55:f5:e4:fe:e6:7e:83:
                    f0:67:97:78:bc:ed:bd:b1:53:f4:ae:29:49:6c:5e:
                    99:24:a6:b5:25:86:8e:62:c0:eb:51:08:cb:fd:5c:
                    c3:fa:ba:96:bd:0d:1b:46:13:88:7d:c5:65:41:22:
                    10:3d:ae:9d:1e:49:b5:bb:6c:55:96:46:84:9e:1d:
                    6f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F5:2D:B3:D7:6D:0D:20:E4:F3:4E:54:F1:90:B4:0D:1D:04:4F:84
            X509v3 Authority Key Identifier:
                keyid:FF:9B:7E:84:E1:B0:1E:99:BA:7E:27:C6:86:59:47:CA:D9:93:3B:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F83E18265E9659CF02DED6635CDD846AA73278628C6894EB10B9BE95842CD122/0/FF9B7E84E1B01E99BA7E27C6865947CAD9933BA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF9B7E84E1B01E99BA7E27C6865947CAD9933BA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F83E18265E9659CF02DED6635CDD846AA73278628C6894EB10B9BE95842CD122/0/3138312e3139312e3135392e302f32342d3234203d3e20323635383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:89:ef:4a:1b:33:b6:ac:b0:80:11:82:28:b6:e6:10:50:25:
         7b:9a:a3:4b:ae:99:a4:23:ae:14:af:2a:1a:a7:c0:7a:c4:a9:
         2e:14:ee:09:1c:9b:6c:36:b1:20:56:44:e5:65:68:c2:7b:cf:
         84:b7:e2:05:e3:5f:db:a0:14:a4:68:cd:52:17:38:27:68:25:
         05:1d:31:6b:6b:e1:d8:ec:1e:12:6c:d8:5d:fe:05:ba:39:89:
         02:13:45:56:4a:89:93:2b:1c:60:f7:56:f8:93:5b:23:6a:bb:
         dc:1d:e4:49:3c:a3:3c:c8:b3:13:1f:6c:7e:51:a6:ab:c4:20:
         52:5f:86:bf:07:0c:04:2a:87:b0:45:a1:9b:6e:f2:c0:59:dc:
         7c:d8:db:64:af:a5:ca:66:d1:96:1e:aa:ba:f0:fb:d2:0a:15:
         db:54:87:43:a7:16:85:f0:f2:d7:14:b4:da:8d:3b:51:60:c8:
         b7:7b:a4:f8:96:ab:71:5c:6e:39:76:ed:41:de:01:9a:da:4c:
         45:77:5a:98:65:f9:8f:74:42:34:3f:80:e1:50:11:64:a3:4d:
         c9:2b:bb:8e:57:ca:92:48:8a:67:40:64:94:69:fa:be:1b:5d:
         1b:be:42:7f:64:3a:04:b1:df:e7:38:ca:e3:1f:a7:08:3c:43:
         a7:6f:47:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:05:59 2026 by rpki-client