Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C271440515A15AD244850D8D8367C1FC1AFF11F9F9531122FDF25114A5340AA/0/3138312e3233332e3136312e302f32342d3234203d3e20323732303438.roa
File:                     3138312e3233332e3136312e302f32342d3234203d3e20323732303438.roa (raw, json)
Hash identifier:          dw9l0amADH+4ZZkDHX2jOga8SuUS14Oar9P38YHM0Mw=
Subject key identifier:   D3:48:4E:44:50:93:71:67:68:5E:8E:AD:A5:7A:5B:D2:BB:9D:12:EF
Certificate issuer:       /CN=2A02D297940218773DA5F365045A1F5ABDD98251
Certificate serial:       185A61293C68DD83A0E99F39D79D77E06E082F39
Authority key identifier: 2A:02:D2:97:94:02:18:77:3D:A5:F3:65:04:5A:1F:5A:BD:D9:82:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A02D297940218773DA5F365045A1F5ABDD98251.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2C271440515A15AD244850D8D8367C1FC1AFF11F9F9531122FDF25114A5340AA/0/3138312e3233332e3136312e302f32342d3234203d3e20323732303438.roa
Signing time:             Thu 09 Jul 2026 21:20:00 +0000
ROA not before:           Thu 09 Jul 2026 21:15:00 +0000
ROA not after:            Thu 08 Jul 2027 21:20:00 +0000
asID:                     272048
IP address blocks:        181.233.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2C271440515A15AD244850D8D8367C1FC1AFF11F9F9531122FDF25114A5340AA/0/2A02D297940218773DA5F365045A1F5ABDD98251.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2C271440515A15AD244850D8D8367C1FC1AFF11F9F9531122FDF25114A5340AA/0/2A02D297940218773DA5F365045A1F5ABDD98251.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A02D297940218773DA5F365045A1F5ABDD98251.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5a:61:29:3c:68:dd:83:a0:e9:9f:39:d7:9d:77:e0:6e:08:2f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A02D297940218773DA5F365045A1F5ABDD98251
        Validity
            Not Before: Jul  9 21:15:00 2026 GMT
            Not After : Jul  8 21:20:00 2027 GMT
        Subject: CN=D3484E4450937167685E8EADA57A5BD2BB9D12EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0e:d4:91:f2:d2:a3:8a:f2:64:47:ce:92:2f:
                    36:e7:e2:4c:7a:08:0c:1e:14:9b:26:f2:cd:e5:58:
                    f9:67:94:c8:2e:11:34:38:69:3b:06:39:2b:68:8f:
                    44:99:fa:ed:81:bb:f8:dc:19:60:af:ce:27:50:a5:
                    e5:00:99:ac:5e:9c:6d:6c:fe:e1:54:6f:4c:1f:8a:
                    c8:38:cc:5c:06:1c:73:60:82:8e:d0:f6:f2:b4:58:
                    a9:1d:10:89:8f:8a:40:c9:a2:a0:ec:cd:8d:ec:92:
                    14:a3:1e:89:16:a8:ae:1b:b8:63:ad:8a:d9:0b:84:
                    e5:0c:25:a7:92:ec:86:37:2b:46:cf:c6:1c:c9:8e:
                    0c:fa:3d:40:3b:a6:66:1b:be:2b:1e:55:b8:00:fd:
                    91:bb:b0:98:02:6c:de:44:0b:87:a2:45:2e:b7:2c:
                    e5:00:80:80:5e:68:62:1c:0c:3b:11:ba:71:55:03:
                    9c:26:c8:9e:08:01:bc:ad:7f:1b:e6:e7:20:21:04:
                    68:7c:c2:05:01:03:30:07:24:47:4d:b6:a3:97:ff:
                    29:26:d5:bb:f4:f9:01:68:78:33:3f:72:78:90:57:
                    89:44:ee:6a:97:7a:de:31:0e:e8:1c:33:a6:be:74:
                    e2:ed:2d:03:03:1a:eb:c8:cc:15:7a:1c:a6:76:ca:
                    ef:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:48:4E:44:50:93:71:67:68:5E:8E:AD:A5:7A:5B:D2:BB:9D:12:EF
            X509v3 Authority Key Identifier:
                keyid:2A:02:D2:97:94:02:18:77:3D:A5:F3:65:04:5A:1F:5A:BD:D9:82:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2C271440515A15AD244850D8D8367C1FC1AFF11F9F9531122FDF25114A5340AA/0/2A02D297940218773DA5F365045A1F5ABDD98251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A02D297940218773DA5F365045A1F5ABDD98251.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C271440515A15AD244850D8D8367C1FC1AFF11F9F9531122FDF25114A5340AA/0/3138312e3233332e3136312e302f32342d3234203d3e20323732303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:da:5a:c5:ae:da:4e:b5:2d:46:05:fd:c0:6b:56:d2:55:da:
         d8:96:1e:e5:d2:63:96:cc:a4:d4:bd:e5:59:ac:e8:43:36:be:
         60:dc:76:2c:d9:97:f1:69:5d:95:98:54:92:85:35:d8:fa:4a:
         fe:ea:17:51:e0:c9:d7:33:04:a3:8a:b2:7a:8a:86:6c:26:72:
         8e:0d:00:5d:7e:43:e0:6e:61:d5:bc:e1:a5:1b:f7:e4:20:67:
         68:ea:65:30:98:ef:41:23:cb:f3:82:c6:ca:fa:5b:ae:4c:d7:
         c4:47:8d:80:f8:da:fa:fb:6b:53:ce:1e:c5:47:39:4a:ad:0c:
         9c:5a:2e:cc:cf:d1:bb:36:6a:c5:06:b7:e7:11:4f:b8:03:76:
         00:af:53:b3:79:7d:74:7e:c5:ee:ec:b1:73:7b:67:7d:d9:df:
         e0:e1:4c:c7:f3:3d:44:de:18:17:72:55:46:a9:49:93:15:9e:
         0e:be:bf:07:1c:50:c6:60:b0:f8:f1:7e:4d:4e:bb:26:61:bf:
         96:7b:f7:5d:73:95:8c:c7:8d:e9:a4:e9:e9:a7:91:3f:41:5c:
         a1:01:c0:59:a0:ce:d6:2d:e4:22:d2:c1:b3:a6:dc:c2:4d:b2:
         80:41:0b:c5:0a:5a:4b:07:30:79:1c:55:9c:5f:a3:0f:84:9a:
         f3:a0:c9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:49:57 2026 by rpki-client