Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/3138312e3232342e3230352e302f32342d3330203d3e203532343132.roa
File:                     3138312e3232342e3230352e302f32342d3330203d3e203532343132.roa (raw, json)
Hash identifier:          lebGDChiUnxaT+sW+V5nkJQMnCcVvWrqp3g/iHt7hz4=
Subject key identifier:   94:9B:CC:F2:14:1D:70:50:1F:2F:F1:22:89:20:26:8D:2A:E7:B5:2D
Certificate issuer:       /CN=6243575DF1F667D5FC35E515D93014D37B684DA3
Certificate serial:       383478235B38FBCC1074A5C849D22F74BBDD2CB0
Authority key identifier: 62:43:57:5D:F1:F6:67:D5:FC:35:E5:15:D9:30:14:D3:7B:68:4D:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/3138312e3232342e3230352e302f32342d3330203d3e203532343132.roa
Signing time:             Thu 09 Jul 2026 15:51:37 +0000
ROA not before:           Thu 09 Jul 2026 15:46:37 +0000
ROA not after:            Thu 08 Jul 2027 15:51:37 +0000
asID:                     52412
IP address blocks:        181.224.205.0/24 maxlen: 30
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 21:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:34:78:23:5b:38:fb:cc:10:74:a5:c8:49:d2:2f:74:bb:dd:2c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6243575DF1F667D5FC35E515D93014D37B684DA3
        Validity
            Not Before: Jul  9 15:46:37 2026 GMT
            Not After : Jul  8 15:51:37 2027 GMT
        Subject: CN=949BCCF2141D70501F2FF1228920268D2AE7B52D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6b:b1:53:55:b3:67:21:b0:68:11:f7:bd:33:
                    31:99:f3:77:63:db:d7:0d:cb:12:db:a5:e4:b8:02:
                    b9:c9:c0:e9:91:38:9d:e5:dc:94:8c:14:d7:3a:6d:
                    46:57:bd:0e:da:66:9e:89:51:d8:a0:ad:3b:ee:5f:
                    ae:68:ef:4d:c9:88:2e:2f:12:8d:84:23:0a:1f:91:
                    0a:ac:3d:a6:de:23:da:23:c7:b5:2f:f7:39:dc:cc:
                    8f:49:43:63:6c:7d:2f:25:b1:91:b7:1b:f1:6a:9b:
                    48:63:1d:45:9a:34:6f:e4:d4:57:69:91:99:6f:d2:
                    a0:d8:6e:5e:5f:c9:28:db:ff:3a:97:ff:1a:c1:c6:
                    41:9c:c8:14:d7:ef:fe:34:d0:d2:f7:61:aa:5b:7f:
                    ba:a4:5d:a0:8a:73:41:34:c6:d1:64:1e:9b:2f:15:
                    53:44:91:89:b8:bc:d0:20:6a:20:9c:23:14:8a:03:
                    2b:19:57:6d:e8:d2:e2:1f:67:3c:85:b8:aa:58:48:
                    0b:d3:1a:cd:a4:3d:1d:76:ff:ab:a8:a2:64:a3:22:
                    0e:fc:81:ff:d4:14:f1:14:2f:d1:64:0e:bd:28:08:
                    6f:8a:1b:88:bc:ea:ab:8f:ac:e8:86:07:f8:cd:95:
                    1b:e0:46:46:30:92:5c:f1:b0:7d:c8:fe:f8:ee:ed:
                    09:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9B:CC:F2:14:1D:70:50:1F:2F:F1:22:89:20:26:8D:2A:E7:B5:2D
            X509v3 Authority Key Identifier:
                keyid:62:43:57:5D:F1:F6:67:D5:FC:35:E5:15:D9:30:14:D3:7B:68:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/3138312e3232342e3230352e302f32342d3330203d3e203532343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:a2:c0:2f:c0:f6:73:8d:6b:e9:36:ba:85:d5:e3:ed:d5:65:
         e7:4a:14:95:2f:46:96:97:bd:97:99:b4:3f:9d:3a:6c:bf:ef:
         13:8c:f7:05:e0:c2:8a:48:e4:69:d1:c0:45:5c:ac:5a:60:d9:
         85:a2:14:d4:9a:95:6d:81:dd:a0:37:fd:3b:59:2e:77:bb:48:
         2e:f4:2c:be:f5:26:0d:fc:07:44:17:ee:bc:20:97:4a:cf:c3:
         8f:5c:6d:a0:7a:bc:91:26:c2:ab:16:fb:39:12:83:78:e1:5c:
         93:95:26:dd:e4:10:a5:91:ce:c9:ec:58:11:23:f3:06:02:94:
         69:44:e2:12:25:0d:23:c7:38:54:be:f4:eb:a0:74:58:6f:34:
         2b:6c:2f:66:37:d3:95:e6:ca:b0:e5:6c:03:b8:2f:11:6d:25:
         9e:d0:7f:d9:66:fb:08:11:42:35:00:9e:a1:41:60:07:97:64:
         aa:b5:0e:71:a1:1e:9b:d4:00:b7:1f:73:31:75:69:68:40:24:
         d4:5e:ed:b0:f1:7c:d9:f6:cc:d2:3f:72:f4:0f:a4:19:55:e5:
         65:14:42:89:a9:8e:5e:69:71:2a:b3:c0:e9:50:71:55:d6:17:
         cc:c2:78:50:d7:b7:16:e4:cf:4a:c5:04:ce:bd:cb:21:e3:54:
         82:89:a0:93
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUODR4I1s4+8wQdKXISdIvdLvdLLAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI0MzU3NURGMUY2NjdENUZDMzVFNTE1RDkzMDE0RDM3
QjY4NERBMzAeFw0yNjA3MDkxNTQ2MzdaFw0yNzA3MDgxNTUxMzdaMDMxMTAvBgNV
BAMTKDk0OUJDQ0YyMTQxRDcwNTAxRjJGRjEyMjg5MjAyNjhEMkFFN0I1MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCla7FTVbNnIbBoEfe9MzGZ83dj
29cNyxLbpeS4ArnJwOmROJ3l3JSMFNc6bUZXvQ7aZp6JUdigrTvuX65o703JiC4v
Eo2EIwofkQqsPabeI9ojx7Uv9znczI9JQ2NsfS8lsZG3G/Fqm0hjHUWaNG/k1Fdp
kZlv0qDYbl5fySjb/zqX/xrBxkGcyBTX7/400NL3Yapbf7qkXaCKc0E0xtFkHpsv
FVNEkYm4vNAgaiCcIxSKAysZV23o0uIfZzyFuKpYSAvTGs2kPR12/6uoomSjIg78
gf/UFPEUL9FkDr0oCG+KG4i86quPrOiGB/jNlRvgRkYwklzxsH3I/vju7QlNAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUlJvM8hQdcFAfL/EiiSAmjSrntS0wHwYDVR0j
BBgwFoAUYkNXXfH2Z9X8NeUV2TAU03toTaMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RjNDNzJEOUREMzgwNjY0M0I2RTgwRjcxQkY0OUQ0MDlB
NEVGNjI2ODhEQzNERDY0MUIwQjU4MDlGQTU3NTQ1LzAvNjI0MzU3NURGMUY2NjdE
NUZDMzVFNTE1RDkzMDE0RDM3QjY4NERBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MjQzNTc1REYxRjY2N0Q1RkMz
NUU1MTVEOTMwMTREMzdCNjg0REEzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0YzQzcyRDlERDM4MDY2NDNCNkU4MEY3MUJGNDlENDA5QTRFRjYyNjg4
REMzREQ2NDFCMEI1ODA5RkE1NzU0NS8wLzMxMzgzMTJlMzIzMjM0MmUzMjMwMzUy
ZTMwMmYzMjM0MmQzMzMwMjAzZDNlMjAzNTMyMzQzMTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAteDN
MA0GCSqGSIb3DQEBCwUAA4IBAQBKosAvwPZzjWvpNrqF1ePt1WXnShSVL0aWl72X
mbQ/nTpsv+8TjPcF4MKKSORp0cBFXKxaYNmFohTUmpVtgd2gN/07WS53u0gu9Cy+
9SYN/AdEF+68IJdKz8OPXG2geryRJsKrFvs5EoN44VyTlSbd5BClkc7J7FgRI/MG
ApRpROISJQ0jxzhUvvTroHRYbzQrbC9mN9OV5sqw5WwDuC8RbSWe0H/ZZvsIEUI1
AJ6hQWAHl2SqtQ5xoR6b1AC3H3MxdWloQCTUXu2w8XzZ9szSP3L0D6QZVeVlFEKJ
qY5eaXEqs8DpUHFV1hfMwnhQ17cW5M9KxQTOvcsh41SCiaCT
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:58:16 2026 by rpki-client