Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e31342e302f32332d3233203d3e2033383136.roa
File:                     3138312e3137342e31342e302f32332d3233203d3e2033383136.roa (raw, json)
Hash identifier:          qYYolCFl4J1BoGo1oUsgaW0M/hvNEcbCnjwxD9sHew8=
Subject key identifier:   A6:F2:A6:24:12:88:B1:02:1C:EF:34:FB:17:CB:40:10:97:E0:34:44
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       0D747D737A061D775F5E5A16480AB49DC84C7341
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e31342e302f32332d3233203d3e2033383136.roa
Signing time:             Tue 17 Mar 2026 15:34:21 +0000
ROA not before:           Tue 17 Mar 2026 15:29:21 +0000
ROA not after:            Tue 16 Mar 2027 15:34:21 +0000
asID:                     3816
IP address blocks:        181.174.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:74:7d:73:7a:06:1d:77:5f:5e:5a:16:48:0a:b4:9d:c8:4c:73:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Mar 17 15:29:21 2026 GMT
            Not After : Mar 16 15:34:21 2027 GMT
        Subject: CN=A6F2A6241288B1021CEF34FB17CB401097E03444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1d:99:92:f8:e2:c3:df:04:72:7a:a3:33:28:
                    dd:ce:b7:16:de:c6:0e:d6:dd:ba:b2:70:cc:17:aa:
                    ec:1a:53:ed:35:f2:a7:9a:db:11:52:df:79:95:7b:
                    ab:c9:d4:3e:41:65:b2:f3:48:c3:9c:1b:f3:7b:34:
                    06:b6:59:96:bf:54:a9:1c:07:d9:a1:f8:12:02:a2:
                    57:53:30:8e:63:cb:0b:66:8c:ad:59:68:31:19:67:
                    15:fd:a0:e3:cf:a9:6a:c7:26:79:59:d6:43:ad:63:
                    2f:a3:53:aa:8b:5c:24:31:6c:87:d6:64:cd:13:56:
                    d9:8f:54:d4:fe:a2:8b:28:bc:02:14:47:bd:d4:c6:
                    bc:4e:5c:88:49:9b:24:fc:74:22:f3:8a:f4:62:34:
                    87:4a:35:d7:83:f9:32:2b:a4:28:d8:dc:3e:fc:2f:
                    c5:ce:a7:86:91:aa:ac:4e:6e:cf:a5:78:6f:92:83:
                    95:a6:e5:14:0c:d4:c9:03:71:c1:98:0d:85:87:52:
                    aa:b0:2a:08:03:51:fa:07:24:14:b3:d3:de:7b:b7:
                    eb:6d:3e:ca:83:6a:8b:cf:82:4a:93:eb:3d:3b:78:
                    99:de:22:ac:96:94:d6:f9:cb:e1:28:76:53:43:10:
                    86:b5:42:91:07:51:87:e8:f1:1c:5b:3b:90:9e:67:
                    0d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F2:A6:24:12:88:B1:02:1C:EF:34:FB:17:CB:40:10:97:E0:34:44
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e31342e302f32332d3233203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:d4:72:bc:05:c3:1c:37:de:fb:62:1c:25:e7:b3:2d:8e:2c:
         c7:56:b6:c5:1f:ec:20:6f:6d:9f:a0:ce:ec:92:d8:4f:c5:f0:
         30:73:d1:4b:ce:c2:83:33:07:ed:c6:3a:0e:b8:95:8f:45:21:
         78:83:c0:6f:a0:75:99:24:d3:61:a4:34:14:6b:5a:35:eb:55:
         f7:76:25:12:67:60:2d:d3:16:18:2c:e7:4a:bb:2c:bb:bb:a8:
         75:cf:04:76:54:62:a6:ac:2c:9f:d5:b5:00:ac:17:66:46:69:
         fa:bf:26:58:c3:97:14:36:26:b5:ab:d3:01:94:e1:e5:c7:26:
         fe:61:95:83:45:9d:08:57:46:5e:ae:48:bf:1b:54:44:72:49:
         8c:03:fa:40:c8:21:49:41:de:76:c8:96:f8:3e:ca:9b:87:d0:
         9b:1c:f1:3e:a8:f9:a3:03:34:6e:6d:f4:17:24:b6:54:55:11:
         79:15:12:e2:c2:07:c9:2d:49:9c:9b:45:d7:d5:07:19:30:aa:
         f2:b3:ff:eb:a0:f5:b8:c0:8a:d4:ca:8e:c6:ae:49:76:2d:70:
         75:b6:cf:e1:63:b0:e7:cf:f5:78:06:00:c7:a1:3f:22:0a:fe:
         bc:46:24:eb:b7:48:8a:54:12:32:d8:85:be:db:d0:3d:20:31:
         68:1b:8e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:33:55 2026 by rpki-client