Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS271825.roa
File:                     AS271825.roa (raw, json)
Hash identifier:          klUx+9t+4RnxwZ6AiQwdrXCxylZHxSB6a+N+aKY36so=
Subject key identifier:   F8:7D:5F:D5:7B:4C:49:D8:93:4E:EB:25:29:13:F0:2F:7D:56:E3:33
Certificate issuer:       /CN=6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2
Certificate serial:       70FD5D14415DD9FA0D12754EA69EBD958C6C9786
Authority key identifier: 6E:CA:7C:B8:91:2A:DE:FB:C9:94:84:E0:53:EB:E8:52:A3:A0:E8:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS271825.roa
Signing time:             Fri 17 Jul 2026 21:00:45 +0000
ROA not before:           Fri 17 Jul 2026 20:55:45 +0000
ROA not after:            Fri 16 Jul 2027 21:00:45 +0000
asID:                     271825
IP address blocks:        181.60.102.0/24 maxlen: 24
                          181.63.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:fd:5d:14:41:5d:d9:fa:0d:12:75:4e:a6:9e:bd:95:8c:6c:97:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2
        Validity
            Not Before: Jul 17 20:55:45 2026 GMT
            Not After : Jul 16 21:00:45 2027 GMT
        Subject: CN=F87D5FD57B4C49D8934EEB252913F02F7D56E333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c4:a6:53:58:63:e2:71:e8:1f:86:ae:c8:59:
                    56:f5:40:34:2b:c3:01:9f:2c:89:ea:43:99:6d:ac:
                    1a:b0:72:23:d4:4c:a9:a7:37:45:22:5c:c6:e0:41:
                    16:27:86:39:a8:b7:d2:a8:0d:14:59:9b:b2:9b:b8:
                    fb:38:9b:21:89:1b:b2:5a:8a:ab:f0:64:ac:ae:64:
                    72:67:d7:bd:67:51:cf:ab:ae:88:86:db:8e:3b:c5:
                    3f:7b:68:74:f5:09:95:4a:a4:31:74:24:9e:ce:d4:
                    9f:9b:56:a1:84:38:03:47:f9:eb:c4:5a:26:2f:32:
                    99:05:63:36:bc:e3:a9:58:90:9f:ec:a8:fc:cc:3c:
                    58:d4:9e:4e:0e:84:e2:00:b0:a5:c7:8c:a5:94:ee:
                    ef:c3:ad:b6:29:a5:5a:76:89:65:2c:6a:d4:15:a0:
                    ab:b4:5a:03:e8:2a:46:28:9a:08:81:5b:3c:8d:ee:
                    71:6c:04:a6:3d:da:ef:74:79:b4:79:c9:73:7e:22:
                    9f:74:95:8f:bd:78:a4:e2:99:f7:29:c7:61:b2:24:
                    7b:0a:5a:53:74:95:56:52:e0:ed:10:0e:dd:86:19:
                    8d:60:62:97:5e:7d:61:41:2a:2c:ad:b1:1e:af:25:
                    a8:d4:cd:98:1a:04:6e:83:ee:3d:0c:41:0f:32:98:
                    82:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7D:5F:D5:7B:4C:49:D8:93:4E:EB:25:29:13:F0:2F:7D:56:E3:33
            X509v3 Authority Key Identifier:
                keyid:6E:CA:7C:B8:91:2A:DE:FB:C9:94:84:E0:53:EB:E8:52:A3:A0:E8:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6ECA7CB8912ADEFBC99484E053EBE852A3A0E8C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40D8D4094F75BD5906A686CCC3F9D606251C695E3353C569059D12601809ED2D/0/AS271825.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.60.102.0/24
                  181.63.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:c3:fe:fb:f9:2a:c9:68:7f:c9:59:cf:99:2b:f4:8f:16:e8:
         01:d3:9a:f9:3b:3d:96:4f:e2:0e:d9:59:c6:f4:3d:89:55:28:
         c4:e0:d0:2f:f7:49:25:89:f8:33:e2:38:28:ec:6f:26:eb:d9:
         62:5d:28:2b:ce:66:05:c3:d5:fc:20:c6:8e:3b:e0:f6:f5:ce:
         4e:c9:34:e0:2d:3d:f3:c4:e1:00:67:48:66:8f:d2:48:0c:23:
         92:95:83:2a:50:da:b7:81:f3:69:10:5c:97:09:92:66:b1:c0:
         bb:58:91:61:f6:d2:53:fa:c8:f2:56:63:ee:5e:58:b4:dd:39:
         c4:9b:fb:45:9a:d5:d1:36:2b:2d:83:f9:cd:70:78:dd:41:b8:
         a1:2f:3c:ca:c5:86:de:b0:f8:e6:8a:ea:9d:81:65:11:b2:1c:
         d0:d4:1e:e4:33:4e:2c:6a:d7:47:2b:25:9d:cf:5c:17:af:36:
         c7:29:82:27:8e:5c:1c:f7:2c:83:0e:64:d1:a7:89:0b:ed:81:
         39:9d:b5:4c:3d:ac:40:93:bf:11:24:33:d7:af:3a:05:27:60:
         5b:a8:60:d0:55:fd:89:9b:eb:47:a2:c9:7f:bc:15:be:c6:26:
         0c:7f:b3:1d:fd:69:8b:82:49:08:62:13:1e:39:fc:6c:fb:af:
         72:37:c1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:06:40 2026 by rpki-client