Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3130312e302f32342d3234203d3e203233323433.roa
File:                     3138312e3137342e3130312e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          94fVVCDrX3wgGP6qD+DHuH+E79gaNSHOSkltSut1KAI=
Subject key identifier:   CB:9A:FB:A2:1D:E1:C2:51:BC:B2:A9:78:8E:CD:59:7A:FF:48:02:64
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       16B906016BB7D02FAFB2AC1FF31F892F37F47D6F
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3130312e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 17 Mar 2026 22:55:00 +0000
ROA not before:           Tue 17 Mar 2026 22:50:00 +0000
ROA not after:            Tue 16 Mar 2027 22:55:00 +0000
asID:                     23243
IP address blocks:        181.174.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b9:06:01:6b:b7:d0:2f:af:b2:ac:1f:f3:1f:89:2f:37:f4:7d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Mar 17 22:50:00 2026 GMT
            Not After : Mar 16 22:55:00 2027 GMT
        Subject: CN=CB9AFBA21DE1C251BCB2A9788ECD597AFF480264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c4:01:d1:c4:cb:62:b4:4a:04:c1:a2:9e:a9:
                    d8:72:1e:23:73:b9:64:ec:aa:41:fc:1c:88:7e:f8:
                    5d:3a:af:30:1a:32:ba:7f:13:aa:ba:cc:b0:35:d2:
                    5d:0f:af:dd:b1:2b:a5:8a:c7:c7:ac:96:a1:bb:d3:
                    78:17:2f:33:28:67:69:ea:8c:c6:22:15:79:50:b8:
                    56:9d:ef:2a:38:71:91:53:4c:7e:03:7b:5f:ff:aa:
                    e5:a8:7c:93:7b:c5:e9:42:73:68:c7:7f:93:4d:b8:
                    6b:9c:c9:87:c8:3b:e6:64:52:51:fa:4d:db:b4:92:
                    5f:a9:fb:97:19:f9:20:5c:5a:42:ac:e4:fc:39:61:
                    92:b0:20:a2:77:89:c1:ba:62:86:28:6a:72:2a:22:
                    c8:aa:96:c4:e9:e3:ed:f6:45:9a:8c:2a:46:26:12:
                    9c:e2:7a:b0:a5:c8:9d:37:73:bc:ce:da:67:a4:55:
                    dc:91:01:de:ca:31:73:dc:f0:44:cf:66:d2:63:aa:
                    dc:5c:cb:17:3a:06:3e:98:a8:49:f3:9c:0a:bb:71:
                    26:0b:dc:26:83:85:4e:e4:9e:e4:a5:39:ef:47:5c:
                    30:e2:80:a4:dd:a1:f1:3b:14:e7:a5:88:4f:f9:65:
                    83:63:66:d9:1d:76:b6:bf:54:b1:12:ad:31:e6:82:
                    dc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9A:FB:A2:1D:E1:C2:51:BC:B2:A9:78:8E:CD:59:7A:FF:48:02:64
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3130312e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:42:58:8b:64:7c:6c:24:e9:8a:e0:da:26:52:b9:77:95:a1:
         f7:d9:aa:92:15:4c:7a:9d:70:ae:97:d6:60:8b:3e:a5:33:32:
         2a:9e:07:c4:9a:0b:41:64:8b:90:fe:4b:06:26:aa:3c:b8:cd:
         37:cb:d5:c5:6a:8e:e6:74:79:66:78:0b:bd:70:ab:c2:a0:1a:
         38:6b:03:67:2a:bd:aa:d8:2b:28:b4:ad:35:99:2f:36:a6:90:
         8f:92:ac:cb:2c:ce:11:09:c5:b0:04:a1:34:7d:67:2c:ab:63:
         0c:68:07:4a:63:2f:34:31:2e:fe:39:29:27:5b:87:b2:0e:9e:
         a9:79:03:41:93:be:75:4b:f3:6e:06:3d:a9:4e:c2:eb:08:1e:
         26:d5:c7:95:82:b6:90:f2:2d:55:08:b3:5a:23:2d:3b:30:a7:
         ba:e4:91:8c:cf:24:fc:6e:ed:7f:ce:d7:48:3e:65:e5:22:d4:
         ca:d4:f0:f1:df:60:a3:42:9c:96:a3:55:30:e4:1a:76:ce:51:
         bb:bc:2d:98:01:80:1c:b0:05:75:1c:af:03:48:2e:9f:92:49:
         08:f3:c0:15:ed:dd:72:5c:9a:af:85:96:ee:8e:92:c4:bd:3e:
         8e:58:de:55:80:3b:d6:f0:a3:a6:16:4b:b9:67:9e:27:06:4d:
         82:cf:ad:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:38:56 2026 by rpki-client