Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3139382e302f32332d3234203d3e203532333233.roa
File:                     3138312e31362e3139382e302f32332d3234203d3e203532333233.roa (raw, json)
Hash identifier:          WoB+CZayHjMbPIHTH57Uj1yo/cz+NYtw50jeNMlmpnE=
Subject key identifier:   3C:2F:ED:4F:61:58:BF:C1:48:B8:CC:E2:4A:5C:4F:E0:25:16:AD:4C
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       48F8729518AE23A75A4718F6B7DC988FF095B0FD
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3139382e302f32332d3234203d3e203532333233.roa
Signing time:             Mon 27 Apr 2026 18:40:04 +0000
ROA not before:           Mon 27 Apr 2026 18:35:04 +0000
ROA not after:            Mon 26 Apr 2027 18:40:04 +0000
asID:                     52323
IP address blocks:        181.16.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f8:72:95:18:ae:23:a7:5a:47:18:f6:b7:dc:98:8f:f0:95:b0:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Apr 27 18:35:04 2026 GMT
            Not After : Apr 26 18:40:04 2027 GMT
        Subject: CN=3C2FED4F6158BFC148B8CCE24A5C4FE02516AD4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f6:42:20:73:4e:bc:a4:1c:3a:76:72:6d:7c:
                    58:01:18:67:95:87:2b:d2:f3:6e:20:4f:bc:97:5c:
                    20:a9:da:50:57:3d:ce:2a:2e:f3:0c:8d:a9:b9:43:
                    4c:71:ea:aa:92:f3:bd:c6:89:2a:0e:7d:28:93:25:
                    3b:ad:7f:89:37:18:27:b0:31:3d:be:4d:73:21:6d:
                    3a:89:9e:dc:33:d1:ae:65:d1:dd:22:1e:49:bd:3a:
                    a1:63:2f:b2:42:4a:be:c7:ed:bd:cc:4d:30:87:c5:
                    50:88:5b:00:28:a1:05:8b:e6:88:f6:07:19:3f:ee:
                    cd:d9:50:e3:61:b8:d5:ce:5c:f5:36:48:0f:c8:84:
                    23:b1:f9:80:53:00:d6:ce:e8:e2:e9:a7:f1:b7:a4:
                    52:47:a4:fa:d6:91:08:45:ce:37:42:52:45:5f:35:
                    1f:57:5c:59:e5:aa:7a:30:2f:dd:92:9f:d3:f6:85:
                    1e:14:10:ee:2a:3c:ba:06:c4:44:7c:33:a1:a7:7e:
                    ff:68:3f:fa:07:24:31:05:d3:c8:8e:2c:6b:36:d9:
                    3e:2d:2f:76:fe:f8:73:02:5c:7f:74:9f:80:84:ca:
                    49:31:9f:47:37:fe:e2:92:e1:39:ef:3e:89:e8:16:
                    4a:9e:ae:47:6f:ea:9f:e4:f7:f6:87:03:fa:78:70:
                    23:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2F:ED:4F:61:58:BF:C1:48:B8:CC:E2:4A:5C:4F:E0:25:16:AD:4C
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3139382e302f32332d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:f3:f0:fe:01:5d:c6:75:a8:42:7d:10:97:a2:39:60:82:d9:
         a1:8b:5b:1c:17:89:70:05:df:ec:40:8c:80:b6:f8:c2:16:0b:
         e5:db:df:0e:d1:8d:5a:d3:02:33:ec:08:b6:93:42:09:21:cc:
         5f:e6:2a:f7:88:d3:32:e2:69:c2:a5:98:cf:a7:01:b6:c6:3f:
         17:e2:c2:40:da:9b:05:f0:7b:92:fa:e6:7a:cb:e1:bd:65:1e:
         cb:d5:f1:b8:69:a7:bd:41:f7:bc:a4:15:f1:3c:54:b5:d8:a6:
         35:2b:79:7f:63:59:4b:38:91:58:3b:13:b6:8d:1b:e8:f0:5d:
         ad:d5:45:c0:5e:67:eb:a2:8c:1f:b8:0b:12:e4:bd:2a:71:a1:
         63:15:20:0b:10:33:4d:f9:4d:de:2f:7b:42:f9:d0:a5:9b:ce:
         c5:e1:0b:59:45:bc:94:a2:ac:2e:6c:e1:a0:cd:18:30:6d:3d:
         d4:4a:34:4f:42:f0:21:ee:78:22:e8:b6:5b:90:6b:97:28:81:
         d3:d1:35:bb:a0:0d:6e:2b:d8:b3:39:39:8e:73:f1:ef:1e:eb:
         ee:6d:03:1d:f7:36:cd:c0:f4:19:c0:92:97:6d:ac:0a:99:73:
         5c:c7:a4:70:b5:47:53:fd:31:b5:29:6f:2f:1c:56:5f:18:68:
         3a:b7:04:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:56:23 2026 by rpki-client