Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/3138312e3233332e3136392e302f32342d3234203d3e203532343638.roa
File:                     3138312e3233332e3136392e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          QUpg9GaTA28ZIYL1lq5ma01c/y3zTlUKApNmjQf7tU0=
Subject key identifier:   6E:6E:75:6D:55:AB:4A:60:93:C0:C8:B4:E5:4D:94:56:24:C3:20:6E
Certificate issuer:       /CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
Certificate serial:       751B4EA2E0B754773A5777428FDE50EC6683212A
Authority key identifier: CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/3138312e3233332e3136392e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 16 Jun 2026 15:48:00 +0000
ROA not before:           Tue 16 Jun 2026 15:43:00 +0000
ROA not after:            Tue 15 Jun 2027 15:48:00 +0000
asID:                     52468
IP address blocks:        181.233.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl
                          rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:1b:4e:a2:e0:b7:54:77:3a:57:77:42:8f:de:50:ec:66:83:21:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
        Validity
            Not Before: Jun 16 15:43:00 2026 GMT
            Not After : Jun 15 15:48:00 2027 GMT
        Subject: CN=6E6E756D55AB4A6093C0C8B4E54D945624C3206E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b8:0e:b5:17:f4:cf:7d:68:78:2b:d8:c1:83:
                    8e:96:34:06:0f:f0:5b:52:2a:35:87:b8:d6:d8:a9:
                    6d:d6:a5:a8:f5:74:26:b6:5f:42:38:9e:f6:c2:e3:
                    fa:c6:d8:47:09:8c:b2:65:c1:89:f5:1b:f0:88:c0:
                    1d:f6:98:90:e4:7b:d9:4a:66:a0:0c:80:cf:d2:8b:
                    e8:e7:05:8b:d3:8e:8c:23:38:2c:e9:bf:b0:85:5d:
                    05:5e:59:4b:83:d6:42:30:c3:31:2d:09:56:cf:9c:
                    33:9b:d9:9f:56:9e:33:51:32:b0:ee:93:d7:fe:4d:
                    b0:28:e6:b6:9c:1c:2a:dc:21:96:81:ad:72:2f:aa:
                    5e:73:33:55:f8:c5:cc:8c:75:c9:91:10:78:ad:50:
                    06:50:52:f5:44:bc:91:97:77:a4:b1:dc:9b:4b:69:
                    cd:fb:c8:ce:4c:cf:bb:fd:de:06:af:4c:45:bb:e7:
                    4f:a8:be:44:2a:e2:19:50:5e:fd:f7:0f:5f:96:51:
                    34:7b:a4:70:59:86:84:64:e6:e7:f2:9d:f6:2b:cc:
                    f5:5a:2e:d2:7d:d7:19:11:a8:28:68:83:6e:db:d8:
                    b0:74:82:a0:29:ef:18:76:86:71:ee:b2:d9:20:64:
                    6a:bc:02:35:93:0a:2b:22:8a:85:76:a9:08:5e:c5:
                    67:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6E:75:6D:55:AB:4A:60:93:C0:C8:B4:E5:4D:94:56:24:C3:20:6E
            X509v3 Authority Key Identifier:
                keyid:CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/3138312e3233332e3136392e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:1a:10:eb:7f:e4:37:7b:ac:3a:18:38:57:98:68:3d:16:34:
         11:1c:4d:48:e6:99:7e:6f:af:50:d2:6d:91:d1:b7:4d:e4:a5:
         8b:96:86:31:8b:6c:c1:17:46:43:2f:b3:7d:3b:e6:6b:50:8a:
         b0:e8:cf:ff:93:62:ba:b5:88:34:1e:8a:ac:a9:f2:ed:8e:27:
         34:6b:81:c9:42:35:cf:c6:24:d7:43:f4:77:7e:e0:f5:13:ad:
         a4:07:d1:f1:c1:b3:2f:5d:2c:94:49:19:e7:65:24:c2:77:29:
         b6:7a:06:4f:98:db:fe:00:c6:a6:b4:8d:05:b6:6c:b1:bc:20:
         91:c2:1d:85:86:e5:d0:b5:3f:df:a6:ce:da:d4:c7:f6:4f:d8:
         3d:52:ac:50:e2:fc:d4:57:e4:c4:1a:96:f0:8c:7c:4d:da:43:
         76:ad:e9:a2:9b:5e:36:eb:27:53:93:51:87:5f:eb:62:dc:80:
         34:8a:31:00:81:04:b2:34:85:d8:d3:d6:bd:b7:57:93:e1:8f:
         71:08:03:b6:01:33:8e:6c:5b:c6:59:de:92:58:4b:98:03:79:
         1a:70:bb:0f:3c:73:9d:55:af:77:a8:fe:43:3a:43:84:a1:4e:
         aa:46:c3:ea:a6:b5:92:cb:bd:76:3b:1a:ab:49:ed:4d:c0:c9:
         45:e4:ee:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:55:50 2026 by rpki-client