Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e31322e302f32332d3233203d3e2033383136.roa
File:                     3138312e3137342e31322e302f32332d3233203d3e2033383136.roa (raw, json)
Hash identifier:          /tLYceKVns6WgAWiHmY2+bs9/IvbIM1YQeLRXxUD19g=
Subject key identifier:   30:AB:A7:DC:BA:10:6C:9D:05:E4:46:A5:40:00:7D:50:24:15:B8:D6
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       332B8BBC58FE833D692999253545A6EA09BBA9DA
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e31322e302f32332d3233203d3e2033383136.roa
Signing time:             Wed 24 Jun 2026 19:49:32 +0000
ROA not before:           Wed 24 Jun 2026 19:44:32 +0000
ROA not after:            Wed 23 Jun 2027 19:49:32 +0000
asID:                     3816
IP address blocks:        181.174.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:2b:8b:bc:58:fe:83:3d:69:29:99:25:35:45:a6:ea:09:bb:a9:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Jun 24 19:44:32 2026 GMT
            Not After : Jun 23 19:49:32 2027 GMT
        Subject: CN=30ABA7DCBA106C9D05E446A540007D502415B8D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fa:de:f4:03:83:31:62:d9:a2:57:cf:fa:17:
                    a9:c3:20:6c:6b:f2:9a:25:4e:19:c3:72:ec:83:ea:
                    be:96:c9:80:2c:ec:11:f6:45:94:ca:ab:cc:c1:d4:
                    09:7c:fd:6e:4c:63:46:20:cd:e6:3e:19:41:e1:97:
                    18:e3:9b:3a:46:4d:77:71:c9:c9:18:1a:89:d1:77:
                    53:48:ef:a6:0f:30:40:65:18:62:6e:96:8a:d8:e2:
                    88:77:67:62:ce:3d:a8:eb:62:21:1d:7d:f6:c8:5e:
                    ee:ee:00:4e:05:4d:eb:dc:2b:15:c2:60:e6:62:2a:
                    cb:93:90:32:e8:70:5c:e6:f5:39:9b:ea:9f:85:01:
                    c3:30:97:a2:60:9f:c4:bc:6b:68:5a:1e:58:f0:2b:
                    77:57:d0:b3:a1:30:5c:08:66:dc:4d:11:fe:ac:30:
                    ee:77:3f:59:7c:1d:cc:d0:f5:f0:b3:5f:df:d1:b4:
                    54:6d:df:bf:fd:db:e8:54:2c:1e:3d:33:58:b2:a3:
                    37:a8:7b:20:b2:90:65:18:33:41:b4:e9:5d:28:62:
                    46:ad:52:63:1d:76:42:5e:7d:b4:8d:a5:ed:cb:54:
                    54:5d:0e:bd:d6:8f:b5:8a:11:b2:eb:6a:47:8f:bb:
                    ce:e8:a4:0a:b6:11:22:7c:bc:23:49:cf:51:f4:c3:
                    2c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AB:A7:DC:BA:10:6C:9D:05:E4:46:A5:40:00:7D:50:24:15:B8:D6
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e31322e302f32332d3233203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:2d:e1:20:67:00:aa:b6:13:18:43:66:e8:ec:d7:1b:1c:ca:
         db:43:7b:7b:5d:9f:22:34:32:ac:17:71:d2:02:ac:48:e6:7b:
         f4:e8:9b:b5:fa:55:d4:90:3b:50:ff:35:a8:ed:b4:22:ca:ea:
         ae:e7:c6:23:33:42:a3:4e:18:1b:fb:04:b0:8f:b5:c3:28:fe:
         ef:ae:eb:8e:bc:49:e4:46:12:5a:10:18:9f:86:05:77:2e:1f:
         41:36:dc:ce:bd:c7:11:75:8e:9e:16:c6:cf:3b:7f:4f:a6:9c:
         97:18:7c:17:94:61:a4:d5:72:c6:f5:c6:43:35:99:e7:6c:32:
         af:80:f2:73:44:91:29:22:f6:6e:1f:f5:61:39:68:0d:45:b3:
         0e:4f:bc:3d:2d:03:c4:bb:92:f4:ca:30:ae:2b:e6:8d:f9:a9:
         3e:ef:fb:ee:4c:bb:86:3a:e8:30:37:d5:02:cd:f1:3a:a0:90:
         c0:bf:9e:9c:6a:4c:6a:8d:a7:3e:0c:a9:ee:1b:0e:d8:6e:6e:
         65:95:85:63:22:9d:3e:ba:8b:3e:17:f7:66:e8:a4:1c:c6:06:
         28:f0:98:32:07:8d:0a:67:d1:f3:ab:36:73:5f:a2:7a:08:3f:
         a5:6c:da:8f:97:59:d2:8e:6d:f5:bd:2f:c3:c9:42:d8:57:c4:
         db:1e:2a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:57:39 2026 by rpki-client