Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e31302e302f32332d3233203d3e2033383136.roa
File:                     3138312e3137342e31302e302f32332d3233203d3e2033383136.roa (raw, json)
Hash identifier:          ED6lYbgv8s1PnGiwBRxaSr4UWf+hwDZEmhqgh9z51qM=
Subject key identifier:   D9:BA:2D:49:92:AA:41:E2:79:7F:6B:01:43:99:38:A4:B6:4C:31:E9
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       61A4CFD329BC4B154C44276766AE7CD97CF650C0
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e31302e302f32332d3233203d3e2033383136.roa
Signing time:             Tue 17 Mar 2026 15:34:20 +0000
ROA not before:           Tue 17 Mar 2026 15:29:20 +0000
ROA not after:            Tue 16 Mar 2027 15:34:20 +0000
asID:                     3816
IP address blocks:        181.174.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a4:cf:d3:29:bc:4b:15:4c:44:27:67:66:ae:7c:d9:7c:f6:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Mar 17 15:29:20 2026 GMT
            Not After : Mar 16 15:34:20 2027 GMT
        Subject: CN=D9BA2D4992AA41E2797F6B01439938A4B64C31E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:8d:3c:92:0f:d8:db:d3:92:2d:d0:f5:e0:9e:
                    27:80:b9:38:54:ae:53:4f:2b:c9:73:79:a4:8b:8a:
                    93:c4:1e:9d:05:26:73:46:f4:eb:75:03:d4:81:56:
                    dc:f7:db:d2:8c:80:c2:b9:76:39:b5:48:9c:7d:7d:
                    49:3f:29:d5:92:a6:de:af:22:bd:dc:d9:c1:bb:48:
                    40:d0:ee:ec:d0:38:5c:f3:3d:01:23:4e:2e:60:70:
                    bc:ac:86:d9:8c:24:b2:0d:68:4d:20:34:d2:51:92:
                    35:c9:cd:12:9c:3e:b1:cb:6e:a7:d1:85:f8:22:51:
                    f7:0e:33:64:e6:24:65:e3:ef:97:b5:2a:a0:fe:38:
                    c1:de:c2:de:13:ea:95:91:e8:f0:ac:bd:42:b5:44:
                    7d:c9:de:c6:26:6a:13:65:e3:85:5e:0b:eb:49:cf:
                    01:74:90:7e:bf:be:61:f8:d6:81:8e:c2:a7:6a:22:
                    0a:05:3d:3f:8d:1c:16:aa:04:23:20:02:ca:f8:af:
                    ad:72:03:68:7f:d5:44:3d:ec:88:3e:69:f0:6f:16:
                    42:e3:a0:76:26:6e:18:55:8e:86:40:cd:45:6f:ac:
                    2f:6e:c2:86:be:83:d5:2a:5a:81:36:c4:99:0f:a8:
                    2b:5d:7b:76:e6:a6:39:76:96:8f:d2:ce:01:0f:77:
                    31:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BA:2D:49:92:AA:41:E2:79:7F:6B:01:43:99:38:A4:B6:4C:31:E9
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e31302e302f32332d3233203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:6c:73:0b:00:00:bc:61:7a:27:3e:12:17:ed:d5:28:16:b6:
         6d:17:c4:da:ec:a4:cc:64:23:d4:ac:cc:fd:76:c0:8e:b8:5d:
         52:75:fb:a8:0c:32:29:53:20:67:eb:95:81:80:01:4c:47:44:
         39:c4:2c:94:cc:10:66:b5:49:54:ec:bc:37:fc:58:d4:49:04:
         59:6d:97:f0:55:cf:a9:a8:2f:55:ed:e5:df:f1:b9:6a:d5:f3:
         eb:ce:95:f3:54:d3:7a:d0:0e:a3:38:28:3a:57:88:d3:d4:f8:
         e1:d6:dd:1a:f2:71:d4:0f:e0:f3:d2:15:2b:cf:d3:45:f0:78:
         20:aa:28:01:0d:5a:60:ca:9b:f8:b4:c4:3e:f3:39:af:1a:cd:
         cd:0b:98:66:2c:fe:82:08:95:fa:29:20:97:d7:0f:62:1f:f5:
         8b:5e:1d:d0:da:3f:8f:e6:82:13:ed:18:62:4f:2a:b2:59:d4:
         74:b3:a6:27:80:05:e8:64:8d:9f:36:0f:c4:02:ae:37:b6:a1:
         37:31:e3:74:e8:42:6c:d9:15:98:69:ef:b8:69:b6:ec:3c:16:
         89:7d:f2:67:a3:e5:1d:a8:65:05:af:9f:4a:f8:0d:45:51:9f:
         fc:89:e7:30:df:75:65:63:c7:29:ea:95:14:e7:dc:fc:85:d6:
         bc:c6:0d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:50:20 2026 by rpki-client