Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/3138312e3233332e3136382e302f32342d3234203d3e203237393531.roa
File:                     3138312e3233332e3136382e302f32342d3234203d3e203237393531.roa (raw, json)
Hash identifier:          CGg6/vHvqYgayMoTFvIRPpFhek92Tuya4EiNjii87HQ=
Subject key identifier:   D6:41:57:7D:A3:2E:49:C9:CF:69:2D:1F:7B:20:28:33:D4:44:D3:DF
Certificate issuer:       /CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
Certificate serial:       6C479F9C8178CFB81FE8FFB5AB8783EAE60266CF
Authority key identifier: CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/3138312e3233332e3136382e302f32342d3234203d3e203237393531.roa
Signing time:             Fri 17 Jul 2026 18:00:43 +0000
ROA not before:           Fri 17 Jul 2026 17:55:43 +0000
ROA not after:            Fri 16 Jul 2027 18:00:43 +0000
asID:                     27951
IP address blocks:        181.233.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl
                          rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:47:9f:9c:81:78:cf:b8:1f:e8:ff:b5:ab:87:83:ea:e6:02:66:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
        Validity
            Not Before: Jul 17 17:55:43 2026 GMT
            Not After : Jul 16 18:00:43 2027 GMT
        Subject: CN=D641577DA32E49C9CF692D1F7B202833D444D3DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:17:b4:72:29:3d:7e:f0:c0:53:0d:c6:f8:
                    12:bc:7c:b5:24:88:6d:e2:73:f1:3e:1b:37:71:d8:
                    59:3e:4f:8e:44:52:58:c6:47:43:75:0e:a5:e9:75:
                    0c:2e:b7:57:7e:89:a7:d4:e1:65:b6:f2:10:77:eb:
                    7b:33:fe:04:ce:1b:16:2f:ef:e6:5a:ee:0a:35:d9:
                    31:70:62:05:76:0c:bb:3f:7d:da:17:e6:c3:2b:de:
                    9d:59:f0:52:85:6a:b4:d2:77:a2:5f:f4:0e:2c:7a:
                    fe:b0:80:40:76:2c:3f:0d:0c:07:20:ff:16:1a:e7:
                    1f:38:ba:4a:9f:0a:94:a8:0a:0d:18:0b:a2:d7:eb:
                    ef:28:17:21:4f:65:32:d5:a8:89:ed:e4:16:47:c7:
                    42:c6:cd:94:e9:74:a1:13:e7:95:4d:00:6d:14:7b:
                    8e:c9:69:fe:fc:8d:b8:e1:18:c5:56:43:56:6f:cd:
                    5f:fb:ea:d4:e9:30:9b:db:1a:ff:48:39:5a:bb:9f:
                    9a:0d:f6:07:1d:4f:30:14:b0:a8:3d:e5:9d:82:f9:
                    52:5d:db:d0:dd:41:83:20:84:45:28:7b:b4:49:d2:
                    09:16:e1:10:1e:51:45:a8:d8:f6:5e:30:65:80:c6:
                    80:08:2b:2f:42:a5:4e:c9:b4:d1:07:e1:fb:b7:f6:
                    c7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:41:57:7D:A3:2E:49:C9:CF:69:2D:1F:7B:20:28:33:D4:44:D3:DF
            X509v3 Authority Key Identifier:
                keyid:CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/3138312e3233332e3136382e302f32342d3234203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:59:5a:51:98:df:e7:f0:b9:3e:01:44:40:be:51:46:76:6e:
         7e:09:70:42:13:26:4f:7c:a3:cb:86:b8:b7:6a:b7:0b:41:25:
         1e:5a:ac:94:58:f4:ff:f5:71:40:e9:f5:60:35:ed:dc:61:c7:
         12:96:75:9d:28:46:11:f8:7b:35:31:3e:1d:bb:15:d2:70:8d:
         fa:47:af:44:7c:c7:1c:db:c7:05:90:f7:24:38:3e:a0:ce:50:
         5e:b2:70:79:0c:e2:7d:f9:8f:a5:2f:b2:01:b5:fb:57:ed:00:
         3a:cb:ae:f4:17:ed:bc:71:18:b2:95:be:ec:63:73:e6:ea:f5:
         eb:4e:aa:2c:bf:ef:f9:aa:f0:3d:3d:16:78:8f:09:c4:23:d5:
         f0:36:bc:86:ba:76:72:8e:82:ed:4b:af:f0:4e:0a:ff:17:65:
         2f:5a:3a:0f:eb:ba:b7:7e:03:9a:3c:b4:87:f5:9d:72:d7:1e:
         44:09:27:9a:9e:fc:d5:bc:14:09:cd:cd:fa:0c:e9:47:bf:f2:
         2c:43:e3:b8:c2:bb:fe:24:b0:05:a2:4d:e2:99:95:83:c0:f0:
         f8:49:9b:98:ec:08:f6:5a:77:69:fc:49:84:50:03:50:19:55:
         2d:a2:39:70:75:47:e8:ff:77:ae:26:77:26:11:da:4e:fb:34:
         28:d7:08:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:30:01 2026 by rpki-client