Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3138312e3232352e3133362e302f32322d3232203d3e2036393339.roa
File:                     3138312e3232352e3133362e302f32322d3232203d3e2036393339.roa (raw, json)
Hash identifier:          j2RZBixsMjS3dp8AOW3S52rU6QViyZbG9AcrPefmbaQ=
Subject key identifier:   54:D0:6B:69:B1:9F:51:80:90:22:2A:30:F9:FF:E4:9B:3D:8A:4F:9E
Certificate issuer:       /CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E
Certificate serial:       4F2653C05632B4F9704581EFC751738D41EC8C0E
Authority key identifier: BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3138312e3232352e3133362e302f32322d3232203d3e2036393339.roa
Signing time:             Thu 26 Mar 2026 17:25:01 +0000
ROA not before:           Thu 26 Mar 2026 17:20:01 +0000
ROA not after:            Thu 25 Mar 2027 17:25:01 +0000
asID:                     6939
IP address blocks:        181.225.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:26:53:c0:56:32:b4:f9:70:45:81:ef:c7:51:73:8d:41:ec:8c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E
        Validity
            Not Before: Mar 26 17:20:01 2026 GMT
            Not After : Mar 25 17:25:01 2027 GMT
        Subject: CN=54D06B69B19F518090222A30F9FFE49B3D8A4F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a8:c3:d1:a4:64:49:28:75:e1:af:0a:95:d4:
                    39:42:9c:15:f1:0e:22:51:cd:6c:d1:a5:12:a6:4b:
                    ac:1a:73:70:2e:99:9a:4a:1a:56:76:51:a5:fe:36:
                    8e:ee:14:84:5a:3e:7a:8b:ee:cc:60:f2:95:84:eb:
                    da:23:2b:98:92:74:15:79:7a:60:12:14:93:38:6d:
                    4d:84:f8:a0:53:84:1b:09:82:2d:47:68:85:84:64:
                    7c:a8:3f:17:f4:d3:89:e0:ac:8d:1e:f3:90:19:08:
                    cd:6a:f4:16:77:11:eb:5d:ad:f9:e9:14:8c:e9:60:
                    6f:db:d0:60:bd:09:48:8a:35:f8:50:07:02:5b:cd:
                    dc:04:46:d7:fa:12:d7:24:4d:11:b4:ea:84:47:d6:
                    ba:08:62:6f:0c:77:7c:ef:df:e8:b2:ed:f8:54:ae:
                    db:35:5a:d0:e1:84:36:ee:9b:1e:85:ac:92:94:c4:
                    14:ea:7e:e4:48:15:f1:e4:3c:a4:26:8c:38:7f:c4:
                    56:0a:24:3e:db:c1:95:1c:81:2d:a9:c4:1a:90:38:
                    2b:5c:79:71:76:81:a7:88:14:32:3b:50:98:c0:29:
                    a0:76:34:99:db:21:55:08:5a:b7:3f:6d:4f:ef:b7:
                    6c:5e:0f:9d:ea:2f:68:65:8f:66:43:72:e1:fe:59:
                    1d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D0:6B:69:B1:9F:51:80:90:22:2A:30:F9:FF:E4:9B:3D:8A:4F:9E
            X509v3 Authority Key Identifier:
                keyid:BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3138312e3232352e3133362e302f32322d3232203d3e2036393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:8d:5f:a8:4e:59:f7:c8:29:3a:56:97:04:df:ae:49:aa:6c:
         f4:04:b4:97:27:0a:bc:47:25:59:98:f7:71:c4:cd:e2:ca:db:
         d8:29:e8:2b:75:16:9e:aa:bd:23:30:bc:a3:31:c4:c6:03:3d:
         cd:e0:87:e2:d0:09:f0:2b:ab:ea:59:f0:82:71:fb:06:b4:2b:
         e3:5d:ee:9b:8d:c7:23:fc:5b:8f:82:7a:8f:98:92:10:b3:11:
         cd:74:c5:e0:d3:cb:33:9d:51:12:f0:80:78:ff:43:b1:80:67:
         94:07:5a:b1:8e:ea:73:2f:7f:91:5a:9f:df:f6:93:03:3c:47:
         c7:0d:2b:d6:fd:38:4a:be:44:68:bf:2e:d5:9e:fb:c0:4e:03:
         95:70:43:04:d3:4f:05:07:a9:0f:33:fb:62:55:e3:e7:64:75:
         b4:75:db:a2:92:39:45:f5:cd:e5:48:cc:13:2a:d6:b4:e5:75:
         ba:e8:01:ed:e3:f3:42:1c:ee:de:0d:54:7d:d7:af:63:a2:c6:
         1c:e8:ac:1c:ed:95:51:ef:0f:17:7d:93:70:35:5d:61:19:54:
         2b:2d:0d:dc:5d:6b:2f:50:af:80:ed:bc:6e:55:10:da:9a:ba:
         b0:f9:a7:8b:41:c1:63:bc:d4:f0:e2:5c:18:4b:09:8b:27:3a:
         e4:dd:92:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:29:48 2026 by rpki-client