Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3133332e302f32342d3239203d3e203634313036.roa
File:                     3230312e3138322e3133332e302f32342d3239203d3e203634313036.roa (raw, json)
Hash identifier:          /gbS34/88TIrnhhPXWao7NF9dcq+XBPxhZdSHQzrqPg=
Subject key identifier:   0C:BE:08:A8:79:7F:3B:4A:C3:2E:DE:2B:36:6A:D0:FD:2B:0C:75:C1
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       4F55D7F7B750D0CCD34D26D85652AC62255379D7
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3133332e302f32342d3239203d3e203634313036.roa
Signing time:             Tue 17 Mar 2026 13:34:14 +0000
ROA not before:           Tue 17 Mar 2026 13:29:14 +0000
ROA not after:            Tue 16 Mar 2027 13:34:14 +0000
asID:                     64106
IP address blocks:        201.182.133.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:55:d7:f7:b7:50:d0:cc:d3:4d:26:d8:56:52:ac:62:25:53:79:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar 17 13:29:14 2026 GMT
            Not After : Mar 16 13:34:14 2027 GMT
        Subject: CN=0CBE08A8797F3B4AC32EDE2B366AD0FD2B0C75C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6d:eb:9b:1f:50:bf:6a:6c:31:d8:57:13:57:
                    af:31:52:e3:f0:a6:04:56:c7:06:7a:5c:81:6b:e1:
                    17:3a:d9:22:15:06:ea:6f:91:18:cf:53:8c:90:56:
                    21:34:cd:64:59:b9:29:92:6d:5a:0d:a9:2a:f3:99:
                    07:a2:10:7d:13:6f:f8:09:25:69:bb:8b:81:64:0c:
                    1b:a6:35:3c:b9:0c:c5:f8:a9:e5:2c:b2:e1:a1:c1:
                    c3:49:57:52:ee:5a:ba:33:31:30:ca:c2:25:70:4e:
                    c3:e6:22:ed:ac:84:f4:8f:af:07:65:21:36:99:23:
                    5c:02:04:42:7c:f3:8c:d4:3f:87:8e:0d:d1:98:55:
                    58:f0:e0:24:29:04:a2:22:ff:aa:23:f3:b0:b9:79:
                    ff:90:16:46:bb:8f:bf:ef:28:97:4c:fb:f3:e8:80:
                    e0:ab:36:0f:b0:de:18:09:a3:db:85:53:80:8b:91:
                    30:b8:9f:99:91:74:05:a2:6b:34:06:a3:e0:4b:98:
                    1d:09:d1:2d:b9:4c:77:4d:93:42:68:48:79:51:65:
                    1d:42:66:a4:e6:51:67:4c:63:12:4e:8e:41:52:50:
                    66:23:56:5d:d3:6f:07:ff:f3:84:48:ce:bf:9d:44:
                    8e:b5:20:ee:8d:00:ab:0a:3e:10:a7:5d:d0:2d:c5:
                    ce:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BE:08:A8:79:7F:3B:4A:C3:2E:DE:2B:36:6A:D0:FD:2B:0C:75:C1
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3133332e302f32342d3239203d3e203634313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:5d:24:39:2f:f9:00:ed:16:7f:47:b0:33:40:29:12:18:6c:
         8f:dc:ac:3d:65:03:6b:3f:ab:fe:da:31:45:ae:7f:32:f7:44:
         26:11:9d:ea:98:8d:cb:e6:1e:d4:06:6d:bf:24:06:45:bd:18:
         f7:82:1a:fb:35:2d:33:cc:b3:3d:c2:c3:9c:b4:4c:45:86:95:
         61:6f:16:15:67:6d:a7:c8:4a:ef:80:51:19:86:8c:77:9b:3d:
         a1:8a:c1:35:18:e5:92:0d:0d:21:97:43:b5:24:af:cc:92:f6:
         bc:9c:40:d8:96:b5:31:1e:5f:1c:4f:6a:50:71:25:03:22:46:
         6e:b7:f9:fd:ea:a6:e9:91:5e:26:64:a8:93:e3:85:1b:40:11:
         3f:f4:87:fd:e3:3b:88:54:a4:c8:fd:cc:f0:82:79:ae:8e:92:
         55:1d:d7:0f:e4:9b:9d:1a:d0:c5:95:3b:90:d5:54:74:4e:9a:
         25:60:3e:91:be:b9:af:0e:de:74:04:7e:30:5d:81:ea:8b:9b:
         cc:de:7b:a0:ca:73:f3:fc:cb:81:89:7e:0d:53:49:65:ce:bd:
         05:ea:3f:54:6b:bd:67:c7:34:69:a7:fe:ef:2e:eb:5a:da:5a:
         20:5b:7c:f0:a8:e9:71:68:d8:85:93:05:28:d3:a1:39:17:d1:
         6c:03:46:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:07:22 2026 by rpki-client