Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3133382e302f32342d3239203d3e203631353533.roa
File:                     3230312e3138322e3133382e302f32342d3239203d3e203631353533.roa (raw, json)
Hash identifier:          K4XgJ/gdVPo5y7uyxw/r0LsHsfj4nQSpIsIqVHOAra4=
Subject key identifier:   92:A7:A6:0B:B7:8C:E7:41:90:A4:81:74:7C:82:1B:97:AE:68:9F:39
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       6B6A135AD24035A8946591A1BCC4DFD2970B7DAC
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3133382e302f32342d3239203d3e203631353533.roa
Signing time:             Tue 17 Mar 2026 13:34:15 +0000
ROA not before:           Tue 17 Mar 2026 13:29:15 +0000
ROA not after:            Tue 16 Mar 2027 13:34:15 +0000
asID:                     61553
IP address blocks:        201.182.138.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6a:13:5a:d2:40:35:a8:94:65:91:a1:bc:c4:df:d2:97:0b:7d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar 17 13:29:15 2026 GMT
            Not After : Mar 16 13:34:15 2027 GMT
        Subject: CN=92A7A60BB78CE74190A481747C821B97AE689F39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4a:a8:de:47:fd:58:6e:2c:ed:18:f2:55:f2:
                    a4:59:a5:93:a8:72:92:ad:4d:21:dc:fb:bf:6e:38:
                    ed:97:c8:ff:52:68:ea:b6:d1:1d:bd:ad:a1:17:f1:
                    e0:11:78:59:d1:9e:a4:11:06:18:f1:5d:3b:a8:dd:
                    05:a3:75:ba:97:c1:55:e1:85:60:13:de:58:df:cb:
                    86:80:10:55:6b:23:d3:5c:d9:96:1f:0e:0b:e2:75:
                    c4:a6:54:72:d1:36:0c:94:c4:a1:59:d3:9b:20:9d:
                    c8:fd:07:e4:48:1a:88:d6:17:50:ae:2d:7d:80:13:
                    46:b5:8f:73:40:4a:79:95:60:71:cb:2a:e5:5d:b1:
                    83:dd:76:fb:0d:fc:09:2f:0c:6c:88:2d:51:5e:ae:
                    e5:a3:6e:df:17:06:c3:fc:df:6f:25:ad:87:9d:33:
                    a1:ce:83:fc:88:a5:49:72:6b:76:18:7b:e6:48:04:
                    46:29:31:6d:17:74:ee:43:26:a4:14:3a:9c:2a:5a:
                    68:05:d4:45:0f:b7:71:a7:57:26:8f:97:ae:16:8c:
                    97:6b:b9:22:e2:b0:11:56:6c:81:d9:8b:02:54:58:
                    08:16:d2:c0:c6:ef:bb:5f:93:51:06:4d:5d:a3:01:
                    d1:48:c4:51:07:9a:8c:bd:be:fe:ca:a1:61:4a:d7:
                    fc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A7:A6:0B:B7:8C:E7:41:90:A4:81:74:7C:82:1B:97:AE:68:9F:39
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3133382e302f32342d3239203d3e203631353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:42:a5:98:fe:cd:e6:fe:96:3c:46:c7:80:70:01:02:6d:ff:
         12:02:97:b4:bd:98:93:88:41:cd:50:a4:0b:83:a9:7e:4d:53:
         2c:9b:1e:21:53:61:b5:5b:73:aa:fd:74:be:58:c4:92:f4:ba:
         d5:f5:58:9c:f9:35:0e:ac:a6:f7:79:9d:32:88:bd:3c:a0:59:
         ef:29:f9:2a:f7:db:a1:e6:76:10:60:62:b8:86:73:53:28:8c:
         ca:a8:5d:7e:46:2b:68:a0:3f:c8:84:14:68:5d:57:95:4c:82:
         7d:a9:04:07:4c:8b:31:42:9f:7d:43:3a:12:41:bd:43:e1:38:
         39:82:be:a8:a8:66:1b:75:2d:c1:2c:6b:46:87:5a:fb:6d:57:
         8b:ad:84:46:dd:2a:6b:40:23:57:61:ee:ae:e4:fb:15:9c:a5:
         60:a6:0d:b3:e0:9d:13:cf:63:02:ab:65:23:25:e0:3b:12:aa:
         1e:1c:fa:2e:e3:e5:b1:84:7e:a2:ff:3a:e4:04:17:93:09:d5:
         10:da:6e:b6:37:25:e8:aa:5c:50:a4:75:b6:eb:7f:c1:f9:77:
         76:cb:35:22:b9:9e:99:cb:3b:9e:d4:a5:c8:f5:cc:2d:39:d6:
         61:92:5d:6f:ef:c8:c9:3e:b7:b5:e1:c7:2b:d6:1b:4c:23:67:
         07:08:ce:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:21:35 2026 by rpki-client