Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3134342e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3134342e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          fgpNua8mILf47dJFZP5zC5DmtqOWCiXzxNb/0+AvvFA=
Subject key identifier:   C4:F6:BC:C0:9E:67:08:C9:7D:9F:A1:43:E5:AC:30:CA:39:F1:BF:E3
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       753B23EE67D92E0DAB64C969561F7D33D19E7B69
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3134342e302f32342d3234203d3e203532333233.roa
Signing time:             Mon 27 Apr 2026 18:40:04 +0000
ROA not before:           Mon 27 Apr 2026 18:35:04 +0000
ROA not after:            Mon 26 Apr 2027 18:40:04 +0000
asID:                     52323
IP address blocks:        181.16.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3b:23:ee:67:d9:2e:0d:ab:64:c9:69:56:1f:7d:33:d1:9e:7b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Apr 27 18:35:04 2026 GMT
            Not After : Apr 26 18:40:04 2027 GMT
        Subject: CN=C4F6BCC09E6708C97D9FA143E5AC30CA39F1BFE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:33:da:ae:0e:1f:28:d5:08:50:a8:84:76:b9:
                    18:1f:7f:dc:27:41:7b:b9:57:a8:e3:dd:2c:9c:73:
                    64:ea:d8:f1:71:e2:74:a0:c4:f5:21:a6:f7:fa:3b:
                    16:d1:2f:ae:a7:34:02:7d:d2:44:e8:a0:8b:ae:2c:
                    4e:d9:15:8d:8b:aa:b1:0f:f5:ba:20:e3:1a:a9:71:
                    45:85:36:b4:21:36:d5:c2:48:92:38:04:de:ad:36:
                    2e:08:06:78:3a:3b:e7:a5:1b:ec:99:67:32:46:3d:
                    64:54:81:61:97:59:a7:52:cb:71:a3:20:d1:06:6f:
                    08:1a:2c:b4:f7:12:5e:97:c5:b6:c5:e9:f0:c9:0f:
                    ae:f9:9a:c1:83:61:f6:e7:ba:8a:a2:15:72:bc:2b:
                    40:05:99:30:19:93:65:4f:26:02:df:87:7c:fa:87:
                    10:b6:28:46:de:e2:00:7b:64:f0:26:c5:a9:22:1f:
                    0f:fe:c7:49:88:2d:e9:52:75:3b:ed:39:f9:43:57:
                    54:f9:cc:a6:5b:f5:90:59:cd:71:72:a7:ed:72:70:
                    d2:b0:95:c5:fc:a7:72:a5:b3:4a:2a:19:5d:7c:81:
                    b1:d0:2e:bc:25:eb:06:7e:6b:b2:45:96:71:fc:3d:
                    a6:1d:63:73:35:ba:6a:c4:11:ea:d8:bf:cc:cf:2c:
                    e4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F6:BC:C0:9E:67:08:C9:7D:9F:A1:43:E5:AC:30:CA:39:F1:BF:E3
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3134342e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:9d:1d:dc:6a:cd:46:92:71:89:66:21:3b:3c:b7:93:42:5f:
         ac:30:00:0a:a3:84:0c:6c:da:72:fe:22:f0:50:11:ea:0e:03:
         97:29:aa:0a:cd:60:22:9e:76:22:6e:fe:53:66:18:73:b9:7a:
         65:c4:f7:63:55:c0:0a:58:f7:31:29:1d:52:b1:96:ea:c3:00:
         42:64:bc:dc:56:12:82:46:70:3e:68:85:94:93:0a:70:b3:74:
         74:bb:54:3f:db:4e:4b:18:8a:5d:88:bf:93:fd:6b:e2:96:29:
         e1:27:35:8f:bb:48:58:6e:f6:df:80:45:36:2b:92:e1:14:56:
         17:a1:88:5e:9f:eb:eb:2f:41:b9:9e:04:da:f3:03:8b:eb:aa:
         8c:d9:da:32:1f:82:fc:e4:bc:14:75:92:90:76:ed:51:6a:02:
         25:16:d1:ae:13:51:1e:09:83:ed:9b:46:32:41:3a:28:8c:b5:
         9b:a7:ce:ed:68:be:af:53:53:41:d0:78:f4:08:b9:43:e4:51:
         fc:cd:36:c9:ad:e6:f8:3a:cd:fd:69:a3:c4:a2:45:02:cf:bf:
         73:5e:d0:32:71:84:1d:80:af:ba:1e:34:8b:9c:f9:ed:7b:c2:
         3f:00:c7:77:8c:2a:6e:4d:e1:e6:e7:db:9b:a7:3e:58:51:a2:
         fb:21:b9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:56:30 2026 by rpki-client