Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/3138312e3137342e3136302e302f32322d3234203d3e20323639373833.roa
File:                     3138312e3137342e3136302e302f32322d3234203d3e20323639373833.roa (raw, json)
Hash identifier:          g4HtrlSglnhfCBcm6jochxOizhVHk+cdj8eVVqOiS+w=
Subject key identifier:   A5:05:10:20:FC:D7:DF:E4:A9:8C:17:BF:F3:2E:62:2C:60:82:EE:4A
Certificate issuer:       /CN=84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E
Certificate serial:       25024C5632E7014875719F3DC32B47E95A60C827
Authority key identifier: 84:F2:72:5A:D6:A9:BB:A5:68:3A:F6:D0:B5:3C:99:FA:DF:53:B9:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/3138312e3137342e3136302e302f32322d3234203d3e20323639373833.roa
Signing time:             Mon 06 Jul 2026 12:00:00 +0000
ROA not before:           Mon 06 Jul 2026 11:55:00 +0000
ROA not after:            Mon 05 Jul 2027 12:00:00 +0000
asID:                     269783
IP address blocks:        181.174.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:02:4c:56:32:e7:01:48:75:71:9f:3d:c3:2b:47:e9:5a:60:c8:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E
        Validity
            Not Before: Jul  6 11:55:00 2026 GMT
            Not After : Jul  5 12:00:00 2027 GMT
        Subject: CN=A5051020FCD7DFE4A98C17BFF32E622C6082EE4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3e:b9:96:25:1b:7a:e0:28:44:6b:55:5f:00:
                    7d:6e:67:bf:bb:0d:ff:f8:d7:ca:a0:21:40:bb:4b:
                    98:1b:86:ca:eb:ca:27:20:53:ee:4c:be:dd:5e:26:
                    84:49:cd:2a:89:15:40:62:6f:83:f5:99:db:ee:12:
                    67:0b:ef:65:ed:b9:40:2f:33:30:0b:83:69:99:f5:
                    e9:c9:15:86:5d:6f:ae:87:bb:bb:a5:01:f9:02:05:
                    92:c0:6c:86:37:5d:5a:3f:e8:75:18:26:4b:3d:cd:
                    a8:b8:c5:a7:40:2f:be:02:41:8c:53:80:67:13:b0:
                    38:f1:a1:62:ab:f6:60:b7:93:a8:82:d7:f1:73:1a:
                    5b:ed:bd:98:ef:eb:b9:0c:ac:b3:e5:6d:b1:8e:40:
                    e3:b3:a8:3f:c7:37:1e:11:69:82:c2:e3:e6:d3:cf:
                    66:77:36:ea:17:4d:3d:c2:0e:ec:a4:3b:f0:0f:91:
                    f5:54:d4:ad:22:a8:94:a8:d7:5c:61:3e:7a:43:5f:
                    00:5d:c2:9e:5a:e4:ce:84:d2:29:17:a3:6e:ee:69:
                    47:a2:bb:61:da:cb:34:29:2c:c7:14:70:ef:dc:1a:
                    f9:2e:8e:13:5e:02:39:05:14:05:a0:b6:63:db:3e:
                    75:8a:6f:01:96:c8:c2:08:68:15:fd:45:87:a9:38:
                    10:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:05:10:20:FC:D7:DF:E4:A9:8C:17:BF:F3:2E:62:2C:60:82:EE:4A
            X509v3 Authority Key Identifier:
                keyid:84:F2:72:5A:D6:A9:BB:A5:68:3A:F6:D0:B5:3C:99:FA:DF:53:B9:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/3138312e3137342e3136302e302f32322d3234203d3e20323639373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:67:93:6a:2d:1a:d1:85:de:1f:72:26:88:29:60:e3:38:01:
         33:5b:f6:9e:71:f6:80:46:11:5b:2f:f3:13:41:b6:e0:90:16:
         62:4f:19:9c:2d:99:0a:34:14:81:36:d7:0c:8a:48:55:90:61:
         78:5c:ff:ca:a3:6d:81:d8:33:44:5f:34:72:d6:78:ea:7f:6c:
         5a:bd:50:e1:3c:33:52:9c:5c:c8:49:c9:73:a9:52:e6:d7:6d:
         79:1d:b2:b8:71:20:1f:61:f9:7d:f4:cb:9a:5e:b5:bc:8c:6f:
         99:a4:84:8c:f4:e6:bd:63:54:0d:cc:ad:5e:90:c5:3c:4e:5e:
         78:40:22:b7:96:b5:dc:4e:bf:4f:0c:6f:b9:35:41:72:70:69:
         a0:e7:e3:b9:f7:4c:78:64:07:28:e7:2a:d5:1d:5c:5e:83:01:
         00:43:bb:a0:81:1e:2b:61:17:c4:13:d1:2c:18:cb:4a:ed:f5:
         93:96:2e:3d:5e:65:0b:8e:f9:45:28:50:d0:3d:70:0b:7e:5b:
         87:d8:15:e7:1f:e4:d1:8b:d1:d8:ed:0e:36:9e:d7:db:97:2e:
         41:71:7d:a8:5e:e0:08:21:ee:9a:a4:7d:2d:86:c7:18:8b:34:
         03:49:0d:d4:5b:40:16:d7:d5:e6:a9:88:89:0c:01:e2:0d:e5:
         2d:c2:75:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:20:02 2026 by rpki-client