Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4B9B5F0C45F94AB4A4EE2F3BE7D982CE44BDA77A96A10ED6CE001EAD7BD7133/0/3138312e3233332e39362e302f32322d3234203d3e203133393539.roa
File:                     3138312e3233332e39362e302f32322d3234203d3e203133393539.roa (raw, json)
Hash identifier:          +fppbOJxGsDtXVtKF4z5aLKiAZ9gSB4SsACyCeNJAE4=
Subject key identifier:   01:D2:9A:69:32:0E:CD:5D:C5:F5:29:43:0B:AF:F9:6E:3E:ED:A9:67
Certificate issuer:       /CN=2A3E18C8D040DD1C29E422399CF2718C4D9147AC
Certificate serial:       1ACDEAB4A6E059AA150DD27DC7C75F8ECCD4F50B
Authority key identifier: 2A:3E:18:C8:D0:40:DD:1C:29:E4:22:39:9C:F2:71:8C:4D:91:47:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4B9B5F0C45F94AB4A4EE2F3BE7D982CE44BDA77A96A10ED6CE001EAD7BD7133/0/3138312e3233332e39362e302f32322d3234203d3e203133393539.roa
Signing time:             Fri 01 May 2026 19:30:00 +0000
ROA not before:           Fri 01 May 2026 19:25:00 +0000
ROA not after:            Fri 30 Apr 2027 19:30:00 +0000
asID:                     13959
IP address blocks:        181.233.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E4B9B5F0C45F94AB4A4EE2F3BE7D982CE44BDA77A96A10ED6CE001EAD7BD7133/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E4B9B5F0C45F94AB4A4EE2F3BE7D982CE44BDA77A96A10ED6CE001EAD7BD7133/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 05:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:cd:ea:b4:a6:e0:59:aa:15:0d:d2:7d:c7:c7:5f:8e:cc:d4:f5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A3E18C8D040DD1C29E422399CF2718C4D9147AC
        Validity
            Not Before: May  1 19:25:00 2026 GMT
            Not After : Apr 30 19:30:00 2027 GMT
        Subject: CN=01D29A69320ECD5DC5F529430BAFF96E3EEDA967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e6:f4:df:df:a9:3c:98:55:c8:84:59:27:62:
                    9d:b2:32:f0:31:88:1d:ff:0a:c8:f4:e2:85:08:7e:
                    1c:c6:37:24:70:9b:3c:1c:a0:67:36:a0:7b:10:1d:
                    2b:b0:b1:70:53:40:eb:dc:c1:08:c3:02:d3:0f:02:
                    71:49:1c:5a:24:7a:12:84:45:85:9f:4d:bc:eb:63:
                    8d:81:c9:82:d5:b2:a3:49:17:05:c7:d0:5d:aa:22:
                    29:20:a1:66:49:4d:20:0a:86:df:58:81:e7:08:47:
                    dc:8e:00:a4:d9:a6:b9:48:10:7b:f3:68:03:bc:98:
                    27:ea:a4:dc:18:0c:f1:bd:45:df:a9:80:41:d9:bb:
                    3a:02:7d:b5:ae:69:3f:ba:eb:c6:3c:ac:af:40:bf:
                    f9:02:10:e4:f3:1e:ed:47:81:25:c7:8d:f5:5b:66:
                    75:36:d0:15:69:b6:ce:20:87:ec:20:6a:70:46:db:
                    5c:cf:5a:12:1c:f5:14:ce:48:8c:11:53:59:ab:a3:
                    c4:16:52:e3:cd:31:c3:a6:8d:c7:f5:0d:79:aa:d7:
                    b3:e4:c3:7c:cf:0d:62:01:1e:25:a9:53:ee:85:5d:
                    ee:82:e3:dd:2e:fb:92:6a:c1:74:c6:6a:a4:21:74:
                    36:0d:83:aa:ca:ea:78:aa:51:6a:99:71:01:6f:00:
                    1d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D2:9A:69:32:0E:CD:5D:C5:F5:29:43:0B:AF:F9:6E:3E:ED:A9:67
            X509v3 Authority Key Identifier:
                keyid:2A:3E:18:C8:D0:40:DD:1C:29:E4:22:39:9C:F2:71:8C:4D:91:47:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4B9B5F0C45F94AB4A4EE2F3BE7D982CE44BDA77A96A10ED6CE001EAD7BD7133/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A3E18C8D040DD1C29E422399CF2718C4D9147AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4B9B5F0C45F94AB4A4EE2F3BE7D982CE44BDA77A96A10ED6CE001EAD7BD7133/0/3138312e3233332e39362e302f32322d3234203d3e203133393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:13:f3:57:b2:18:cc:96:33:ab:8c:81:c1:4e:70:02:8a:5f:
         36:34:03:b6:00:45:f9:a1:b0:94:76:4b:91:83:2a:8e:21:f4:
         b3:bb:95:cb:bb:51:aa:9a:ae:fe:f8:06:2d:e0:e7:95:d5:a4:
         a5:b7:1d:59:ea:90:73:5e:bb:27:26:47:1d:23:12:cc:4c:9f:
         43:46:93:0e:1d:92:33:1f:61:96:26:13:6c:9d:28:a4:96:fe:
         38:81:84:38:f6:73:ba:28:6f:cf:d9:d5:ba:06:15:b7:cf:88:
         4e:79:b1:77:31:eb:45:27:e8:5a:80:73:87:65:11:82:20:ea:
         3e:a7:52:2a:4f:99:91:1e:70:f2:e4:f5:a5:0f:02:ae:19:b0:
         25:99:34:ab:0a:a5:56:05:b6:e5:a9:86:a1:c9:7f:d7:e6:2e:
         cc:1c:39:c2:20:e1:df:3a:ba:75:86:22:d7:b4:33:d1:69:8b:
         60:ae:b4:a9:a8:46:e6:95:48:c9:c8:a3:23:47:36:8b:6c:b8:
         23:fe:f3:5a:b7:7f:0b:eb:10:53:4a:61:50:e7:ab:01:37:81:
         3e:7f:37:1c:0f:ae:9b:5a:ba:d6:26:13:f8:21:d0:e7:92:8e:
         16:52:73:5a:67:4a:19:70:4b:ba:bb:c8:de:1c:52:cc:de:47:
         52:f2:03:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:10:33 2026 by rpki-client