Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e32322e302f32332d3233203d3e2033383136.roa
File:                     3138312e3137342e32322e302f32332d3233203d3e2033383136.roa (raw, json)
Hash identifier:          zC64lLVZyaP/RJCPUpI0CFNFGtDUxy4fVjadYnZ1nlw=
Subject key identifier:   E5:E9:BA:A9:C8:75:1D:A6:87:B9:D4:66:DA:2D:6A:28:DA:04:DD:9A
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       2EC89711D88964F43FE6568ABAF32579E77C9D73
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e32322e302f32332d3233203d3e2033383136.roa
Signing time:             Tue 17 Mar 2026 15:34:21 +0000
ROA not before:           Tue 17 Mar 2026 15:29:21 +0000
ROA not after:            Tue 16 Mar 2027 15:34:21 +0000
asID:                     3816
IP address blocks:        181.174.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c8:97:11:d8:89:64:f4:3f:e6:56:8a:ba:f3:25:79:e7:7c:9d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Mar 17 15:29:21 2026 GMT
            Not After : Mar 16 15:34:21 2027 GMT
        Subject: CN=E5E9BAA9C8751DA687B9D466DA2D6A28DA04DD9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d2:b4:5a:25:c5:c3:72:2b:65:f3:80:90:ed:
                    f4:ce:36:9d:c2:e4:2a:0e:ad:cc:94:ea:65:eb:a8:
                    f4:6f:1d:22:45:36:d9:b5:a8:63:29:b6:dd:ea:ec:
                    72:94:12:82:da:0d:8c:2f:4f:83:26:15:f1:0c:d7:
                    e9:b3:d7:44:16:c3:21:90:ca:d3:81:ce:5b:24:cf:
                    e7:85:0e:9b:4d:5a:72:3f:d4:60:17:a5:53:ca:e2:
                    47:74:e7:9f:c0:a8:d0:8f:63:e2:e9:b0:79:29:d5:
                    09:4b:5d:6b:94:cb:e4:fc:7e:68:71:94:5d:79:b2:
                    62:9b:60:f4:ff:4a:af:34:1c:72:32:67:df:09:14:
                    e3:e0:fa:a3:1d:3b:26:87:74:a1:5f:40:2d:59:33:
                    74:0b:1a:81:ad:2f:c1:e6:b4:47:4f:06:a2:a0:ff:
                    a7:ae:98:5a:2b:2a:da:60:b9:1f:57:b4:3a:8f:d4:
                    35:f1:4b:18:7d:78:b3:f4:6d:6a:ae:88:25:cd:78:
                    64:ca:22:4f:ca:04:85:fb:2a:94:2d:f3:d8:16:96:
                    9e:b2:6f:b8:17:5d:98:43:d5:04:d9:71:a2:9c:f6:
                    d7:4d:c9:8f:b4:2d:fa:00:ef:76:d3:16:cf:6e:ed:
                    95:15:e0:7b:c6:41:94:f5:21:01:a1:58:93:a6:93:
                    92:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E9:BA:A9:C8:75:1D:A6:87:B9:D4:66:DA:2D:6A:28:DA:04:DD:9A
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e32322e302f32332d3233203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:37:44:d3:89:70:ad:9e:8f:b1:d1:1d:eb:51:eb:8d:1e:43:
         f2:b9:28:70:5b:24:b3:2b:6b:e9:3a:0c:71:15:05:c6:5a:03:
         ed:74:be:eb:c6:d5:17:63:90:63:f9:fe:34:0b:a7:f9:54:2c:
         4c:d9:27:9c:78:cb:67:7c:aa:15:81:f0:2d:ec:6a:7b:c6:25:
         0e:c7:53:6c:a1:2c:56:3d:ee:f4:05:20:e1:72:5e:73:41:c0:
         65:ac:ba:f4:e7:4b:a4:36:1f:69:12:9e:63:a6:0c:95:b5:db:
         3d:77:99:9b:9f:6f:b2:91:72:04:a2:54:c9:2a:e8:54:f6:9a:
         bd:80:f4:fc:d9:a2:a1:d8:ae:a7:d0:54:24:4d:b6:2e:b8:33:
         9f:a6:a0:09:a1:89:6a:e7:15:91:20:21:c7:7b:1a:3c:3a:26:
         e5:42:54:4c:e4:a0:45:b1:37:0e:bf:c5:ac:28:bd:0f:bf:eb:
         e2:2b:a9:d1:ee:c6:b3:96:b3:ee:b5:88:5f:95:29:54:7d:4e:
         82:de:fc:a0:68:45:1e:a7:3f:bb:1e:d4:38:66:99:05:b1:db:
         14:cb:63:f9:bd:42:af:e7:88:85:6f:d3:d4:d1:7d:49:27:d9:
         33:36:40:63:23:55:01:2f:cd:ac:31:f7:f5:b4:4a:b7:25:42:
         8d:5a:b1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:18:46 2026 by rpki-client