Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3138312e3131382e3230382e302f32302d3234203d3e20323632313936.roa
File:                     3138312e3131382e3230382e302f32302d3234203d3e20323632313936.roa (raw, json)
Hash identifier:          OgDWg5aLzHUK5gxCWg9LifeRvFJF/9pfNnX6uD1nICM=
Subject key identifier:   E8:8B:58:CE:53:D2:5D:54:7C:43:87:3E:0F:5E:5C:5C:0B:5E:CE:DB
Certificate issuer:       /CN=236265F485589146D372FF70F0BD7364753EFBD3
Certificate serial:       66C7CF5AD69AED711F43A6AE1151134F635D9C6B
Authority key identifier: 23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3138312e3131382e3230382e302f32302d3234203d3e20323632313936.roa
Signing time:             Wed 07 Oct 2026 20:39:07 +0000
ROA not before:           Wed 07 Oct 2026 20:34:07 +0000
ROA not after:            Wed 06 Oct 2027 20:39:07 +0000
asID:                     262196
IP address blocks:        181.118.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 01:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c7:cf:5a:d6:9a:ed:71:1f:43:a6:ae:11:51:13:4f:63:5d:9c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=236265F485589146D372FF70F0BD7364753EFBD3
        Validity
            Not Before: Oct  7 20:34:07 2026 GMT
            Not After : Oct  6 20:39:07 2027 GMT
        Subject: CN=E88B58CE53D25D547C43873E0F5E5C5C0B5ECEDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ae:56:d6:22:1f:99:82:d9:25:24:5f:a8:4e:
                    9a:64:1b:50:1a:85:bd:b8:a0:5a:6c:e6:91:a7:11:
                    56:1a:19:78:7e:f9:12:f6:8c:4c:84:cb:31:72:f1:
                    9c:3f:a0:c7:9a:11:f8:82:c9:73:c2:c6:d7:74:54:
                    c2:eb:e1:4a:5b:34:e2:e5:42:0c:08:56:cc:74:9d:
                    ba:56:1b:14:75:c1:84:65:af:83:e9:b4:11:42:1f:
                    32:c6:e0:ee:d8:6d:84:40:e8:ae:43:72:47:c7:83:
                    c3:2f:ca:c8:59:97:0e:f3:35:b4:2b:dd:e8:aa:60:
                    4d:c3:7f:e6:9e:f0:5f:72:54:71:23:63:b8:f5:58:
                    77:64:bf:a7:49:cf:e9:fe:79:e3:5b:a5:a3:b3:2f:
                    8a:c3:76:2e:c8:32:f8:a4:79:d2:2f:4f:0c:82:2e:
                    0e:ea:22:f4:e0:b7:55:0e:d9:59:ee:1f:8e:4a:55:
                    69:04:2d:5a:0a:33:9a:6d:ba:8f:61:4e:92:2d:db:
                    45:b2:6d:0a:df:84:6c:a6:2b:ab:ee:78:48:44:ba:
                    86:fa:a8:b3:33:39:99:16:18:09:92:24:a2:2a:f9:
                    b2:2f:4c:80:f3:b5:27:fb:a0:cd:c7:ff:bc:c9:b0:
                    3f:4d:73:cb:f0:1f:7c:bf:1d:f0:75:f1:f4:a4:9c:
                    35:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8B:58:CE:53:D2:5D:54:7C:43:87:3E:0F:5E:5C:5C:0B:5E:CE:DB
            X509v3 Authority Key Identifier:
                keyid:23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3138312e3131382e3230382e302f32302d3234203d3e20323632313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5b:74:55:f9:f7:77:5a:dd:28:48:c3:30:18:ef:47:09:c9:41:
         56:e7:a6:3b:47:bd:0e:3a:be:74:d4:69:85:8a:60:85:c1:fa:
         7e:c0:e2:a1:fd:e1:9c:ed:80:73:2a:35:b4:3a:7f:ac:79:22:
         aa:b5:46:b8:61:c7:b1:6d:1e:34:1e:01:41:40:cc:fe:9f:65:
         35:81:66:3e:e0:ce:81:86:30:ef:85:b7:bb:a5:ff:75:1a:be:
         0d:60:0b:57:75:f9:24:d1:0d:c8:b1:fb:6e:9a:62:3c:26:2e:
         56:bc:7f:1f:5e:2d:6d:78:fc:1b:4b:48:c4:a2:49:08:73:6f:
         73:94:b0:4a:a3:61:69:f0:11:9c:bf:d4:a9:2d:33:1d:e7:9b:
         5c:ad:4c:b0:05:bb:8b:db:f6:fa:e6:b9:0b:b3:2c:68:2e:e5:
         da:b7:83:44:58:e7:c3:34:62:14:d4:5b:1b:06:02:4f:e1:59:
         1e:b2:eb:fb:dd:42:78:95:d3:39:64:fb:89:98:32:ce:fb:99:
         ae:2e:54:10:e5:08:19:05:12:58:d4:94:3d:bb:04:8f:07:b6:
         9c:4c:e7:76:28:d9:91:20:cb:74:18:dd:25:ba:50:44:0f:20:
         45:eb:4c:e0:28:81:4e:85:f4:a4:9c:73:f6:6c:39:de:99:ab:
         df:e9:61:31
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUZsfPWtaa7XEfQ6auEVETT2NdnGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjM2MjY1RjQ4NTU4OTE0NkQzNzJGRjcwRjBCRDczNjQ3
NTNFRkJEMzAeFw0yNjEwMDcyMDM0MDdaFw0yNzEwMDYyMDM5MDdaMDMxMTAvBgNV
BAMTKEU4OEI1OENFNTNEMjVENTQ3QzQzODczRTBGNUU1QzVDMEI1RUNFREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChrlbWIh+ZgtklJF+oTppkG1Aa
hb24oFps5pGnEVYaGXh++RL2jEyEyzFy8Zw/oMeaEfiCyXPCxtd0VMLr4UpbNOLl
QgwIVsx0nbpWGxR1wYRlr4PptBFCHzLG4O7YbYRA6K5DckfHg8MvyshZlw7zNbQr
3eiqYE3Df+ae8F9yVHEjY7j1WHdkv6dJz+n+eeNbpaOzL4rDdi7IMvikedIvTwyC
Lg7qIvTgt1UO2VnuH45KVWkELVoKM5ptuo9hTpIt20WybQrfhGymK6vueEhEuob6
qLMzOZkWGAmSJKIq+bIvTIDztSf7oM3H/7zJsD9Nc8vwH3y/HfB18fSknDWFAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU6ItYzlPSXVR8Q4c+D15cXAteztswHwYDVR0j
BBgwFoAUI2Jl9IVYkUbTcv9w8L1zZHU++9MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84ODk5RTdGQTZCQzA4QkU0MEYyQjVGNTlEMEE5QzhBQkUx
ODVEMERDMTNCODMwN0UwOTcxRTk2NDM5QTJFNkFBLzAvMjM2MjY1RjQ4NTU4OTE0
NkQzNzJGRjcwRjBCRDczNjQ3NTNFRkJEMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMzYyNjVGNDg1NTg5MTQ2RDM3
MkZGNzBGMEJENzM2NDc1M0VGQkQzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODg5OUU3RkE2QkMwOEJFNDBGMkI1RjU5RDBBOUM4QUJFMTg1RDBEQzEz
QjgzMDdFMDk3MUU5NjQzOUEyRTZBQS8wLzMxMzgzMTJlMzEzMTM4MmUzMjMwMzgy
ZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM5MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS1
dtAwDQYJKoZIhvcNAQELBQADggEBAFt0Vfn3d1rdKEjDMBjvRwnJQVbnpjtHvQ46
vnTUaYWKYIXB+n7A4qH94ZztgHMqNbQ6f6x5Iqq1Rrhhx7FtHjQeAUFAzP6fZTWB
Zj7gzoGGMO+Ft7ul/3Uavg1gC1d1+STRDcix+26aYjwmLla8fx9eLW14/BtLSMSi
SQhzb3OUsEqjYWnwEZy/1KktMx3nm1ytTLAFu4vb9vrmuQuzLGgu5dq3g0RY58M0
YhTUWxsGAk/hWR6y6/vdQniV0zlk+4mYMs77ma4uVBDlCBkFEljUlD27BI8HtpxM
53Yo2ZEgy3QY3SW6UEQPIEXrTOAogU6F9KScc/ZsOd6Zq9/pYTE=
-----END CERTIFICATE-----
Generated at Thu Oct 15 00:09:38 2026 by rpki-client