Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/3138312e3232342e3230342e302f32342d3330203d3e203532343132.roa
File:                     3138312e3232342e3230342e302f32342d3330203d3e203532343132.roa (raw, json)
Hash identifier:          3EKYjwXepi7AYqsloCgFwa5lCsLwcs7hHP797kMugnw=
Subject key identifier:   AD:05:A6:50:E6:8C:9F:E7:49:C6:49:FF:91:7D:86:A6:94:00:D2:E5
Certificate issuer:       /CN=6243575DF1F667D5FC35E515D93014D37B684DA3
Certificate serial:       58ADF15DDE11927546DC2F2B0EACBC82F9D489F2
Authority key identifier: 62:43:57:5D:F1:F6:67:D5:FC:35:E5:15:D9:30:14:D3:7B:68:4D:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/3138312e3232342e3230342e302f32342d3330203d3e203532343132.roa
Signing time:             Thu 09 Jul 2026 14:51:35 +0000
ROA not before:           Thu 09 Jul 2026 14:46:35 +0000
ROA not after:            Thu 08 Jul 2027 14:51:35 +0000
asID:                     52412
IP address blocks:        181.224.204.0/24 maxlen: 30
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 21:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ad:f1:5d:de:11:92:75:46:dc:2f:2b:0e:ac:bc:82:f9:d4:89:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6243575DF1F667D5FC35E515D93014D37B684DA3
        Validity
            Not Before: Jul  9 14:46:35 2026 GMT
            Not After : Jul  8 14:51:35 2027 GMT
        Subject: CN=AD05A650E68C9FE749C649FF917D86A69400D2E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:61:1c:d0:9b:b7:b3:99:91:7e:18:b1:89:19:
                    12:22:78:c6:61:27:ae:a0:7d:be:26:82:9d:df:d5:
                    8d:ac:da:04:1e:81:d8:4f:cb:5a:1e:c4:c5:3b:bf:
                    c7:b4:73:19:9c:4e:a3:46:ab:52:18:5f:8b:43:93:
                    e4:6c:a4:29:2e:c2:ab:1f:88:e8:58:59:8b:c6:5e:
                    d5:73:ff:fd:a3:75:2f:a1:63:f5:8f:40:9e:09:7e:
                    0d:17:4d:e0:37:96:6c:8d:a1:e4:ea:e0:20:b1:37:
                    ae:a2:a5:66:b0:61:74:68:16:4f:73:8d:38:09:61:
                    46:f2:3b:c6:fd:ca:11:9e:13:39:6e:19:d5:4f:10:
                    a2:61:d1:09:53:c2:b5:8a:49:f3:04:73:ee:17:63:
                    7d:14:69:fb:2c:ac:94:a4:16:f9:4e:78:24:0e:64:
                    b3:a1:fc:71:46:46:ba:ad:52:d1:1e:d3:26:71:05:
                    79:b1:41:c5:90:3b:00:01:2b:59:3c:0c:f0:5f:44:
                    99:89:69:ee:1d:90:04:4b:9f:95:19:59:5a:58:a1:
                    78:44:cb:d6:99:ef:cd:40:d2:d7:dd:45:74:67:f5:
                    31:22:e9:73:d3:23:ff:fe:32:dd:4d:fa:60:fc:10:
                    98:84:82:2e:2e:76:1b:96:9b:45:a4:81:f9:37:8a:
                    f5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:05:A6:50:E6:8C:9F:E7:49:C6:49:FF:91:7D:86:A6:94:00:D2:E5
            X509v3 Authority Key Identifier:
                keyid:62:43:57:5D:F1:F6:67:D5:FC:35:E5:15:D9:30:14:D3:7B:68:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/3138312e3232342e3230342e302f32342d3330203d3e203532343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:e0:ea:53:fd:26:fc:d3:22:cd:b9:53:00:42:cf:2e:8f:30:
         5a:27:a2:51:7d:03:df:d7:70:42:3b:b3:f8:62:56:ab:3d:7c:
         09:27:94:e9:87:e3:59:d9:11:81:97:19:c5:32:7d:9c:a8:d1:
         5e:8f:f8:43:b7:27:b4:15:45:69:6a:56:43:40:af:42:6a:87:
         a6:b3:6a:36:a5:17:ef:c9:70:31:8a:5a:89:ec:fc:a5:d9:2a:
         37:48:f1:4b:13:1e:71:6b:36:71:db:03:c8:d1:69:74:0e:72:
         62:fb:a2:da:2b:3e:4c:b3:0f:b6:fa:b5:20:ad:37:b1:7a:98:
         91:59:63:61:7f:54:fc:85:6e:17:00:8f:01:ef:11:eb:a5:63:
         ad:51:1e:c0:e6:1b:a6:98:1e:30:2f:2e:74:b6:7a:c9:1e:fc:
         a2:52:ca:54:31:27:bd:46:eb:bd:ed:28:98:c8:2a:ce:94:bf:
         a1:dc:dd:f9:3f:fd:fa:1d:7e:38:b0:64:b2:6c:f5:3a:0a:30:
         7c:23:38:5b:cc:77:e3:93:50:2f:a2:7b:d3:9c:0d:21:28:75:
         6e:0f:9f:59:a4:5d:e2:d7:e1:fd:35:93:8d:a7:e4:3b:f6:ff:
         06:98:cd:5b:16:da:1b:d4:8d:0f:7b:90:b4:9a:ab:15:6e:f7:
         62:de:21:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:58:09 2026 by rpki-client