Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3138352e37342e31382e302f32342d3234203d3e203336343534.roa
File:                     3138352e37342e31382e302f32342d3234203d3e203336343534.roa (raw, json)
Hash identifier:          jrSJ/7YS6P2/L6muFvL9JtCEAtAr7nffbyWc0McGcCM=
Subject key identifier:   37:50:E0:55:BB:37:E9:EB:21:2D:C4:61:5A:0F:BC:71:AD:1B:AA:BF
Certificate issuer:       /CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
Certificate serial:       607FCA83EB0A169D693AD4216E4BCA988A5DFB86
Authority key identifier: CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3138352e37342e31382e302f32342d3234203d3e203336343534.roa
Signing time:             Tue 06 Oct 2026 17:38:53 +0000
ROA not before:           Tue 06 Oct 2026 17:33:53 +0000
ROA not after:            Tue 05 Oct 2027 17:38:53 +0000
asID:                     36454
IP address blocks:        185.74.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:7f:ca:83:eb:0a:16:9d:69:3a:d4:21:6e:4b:ca:98:8a:5d:fb:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
        Validity
            Not Before: Oct  6 17:33:53 2026 GMT
            Not After : Oct  5 17:38:53 2027 GMT
        Subject: CN=3750E055BB37E9EB212DC4615A0FBC71AD1BAABF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:64:b7:99:0a:91:45:4e:2a:e5:0a:07:ae:fc:
                    6a:a2:38:a6:41:0f:16:cc:da:9b:a1:2a:b3:6a:fa:
                    55:c2:89:64:19:5e:b1:ea:78:fd:46:02:f1:e5:cf:
                    4c:3e:e2:3c:02:e5:45:d4:32:bf:da:42:69:bb:ff:
                    0a:4d:78:68:b4:b0:38:ae:6c:60:81:8b:48:8f:5f:
                    92:78:b5:62:75:96:f2:14:03:9a:e5:49:ba:01:5e:
                    ce:38:68:d6:69:00:86:b6:1d:7d:40:58:bc:57:28:
                    e4:c3:01:78:d8:1f:cb:96:45:29:0c:41:06:cc:ba:
                    2e:7b:48:93:2b:bc:4c:e3:11:c3:8e:7f:4a:2a:43:
                    10:89:cc:06:61:f3:ed:ab:06:00:c7:2b:1c:c2:3b:
                    11:e4:44:dd:92:51:21:24:d9:24:1d:15:16:73:6d:
                    13:94:ed:2d:80:52:7b:af:db:78:45:f0:e1:c1:a0:
                    5f:97:9a:b2:e8:6d:31:d4:51:55:d5:7f:01:26:25:
                    27:bb:2c:bf:0b:ce:16:1a:f3:1a:08:9c:70:46:a4:
                    e8:c0:a3:a9:a8:5f:83:ff:40:b4:7a:dd:6f:02:c2:
                    ca:25:d3:5a:49:97:82:a7:88:d1:76:67:1e:b8:5a:
                    2d:91:ee:af:b8:57:25:6e:72:f1:13:d9:11:b4:e2:
                    6f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:50:E0:55:BB:37:E9:EB:21:2D:C4:61:5A:0F:BC:71:AD:1B:AA:BF
            X509v3 Authority Key Identifier:
                keyid:CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3138352e37342e31382e302f32342d3234203d3e203336343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.74.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:6b:39:53:8b:25:bd:fe:5a:97:0c:f7:8d:85:64:32:f2:13:
         e0:8a:89:86:4e:94:e7:b0:7b:34:fd:dc:24:80:ea:14:38:04:
         f6:6f:0e:31:a8:d4:14:40:97:1f:fd:32:b1:ca:9f:79:a4:f3:
         b0:04:5a:27:6e:48:96:f5:29:c2:3c:55:23:95:3a:97:e5:fb:
         f7:44:03:69:2f:ec:6d:62:c0:50:44:c7:da:c7:f6:0e:b0:19:
         c5:5b:9d:a0:40:4d:e9:65:2f:9d:72:a9:9b:06:ec:c4:90:bc:
         15:3f:14:b4:0e:e1:15:ed:aa:93:e8:58:e7:2e:e5:d6:50:d5:
         df:06:49:d9:11:75:1b:b8:e5:3f:08:a2:ce:c6:e9:66:31:53:
         29:62:59:ee:2f:fe:23:da:b8:54:58:d6:0c:31:a3:3e:5f:a5:
         c9:3c:89:9c:37:ea:db:2d:e9:83:2d:96:b8:a8:18:05:27:83:
         99:27:81:3c:1c:a8:e5:c3:63:62:1f:f6:47:3d:d1:bf:85:63:
         ce:52:1b:83:7c:29:c4:f9:f4:c7:02:68:26:d7:54:74:81:69:
         b9:e3:9e:8a:3e:0a:e9:21:e7:60:dd:41:d4:b7:af:c3:3b:b5:
         ce:e4:28:84:33:81:64:b7:52:0d:ea:c6:9f:ae:f3:20:99:31:
         b7:e0:21:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:24:47 2026 by rpki-client