Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e33322e302f32332d3233203d3e2033383136.roa
File:                     3138312e3137342e33322e302f32332d3233203d3e2033383136.roa (raw, json)
Hash identifier:          cS5cp2YIgkd8y2dfNa5Adh0KKe9LZBcvCrynAxqitSU=
Subject key identifier:   EE:5C:E3:D9:15:7E:EC:1F:58:A0:CA:D0:E2:22:D3:03:D6:24:63:F2
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       16ADAD151E559DA4E829678035C3C0F10EEADA24
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e33322e302f32332d3233203d3e2033383136.roa
Signing time:             Tue 17 Mar 2026 15:34:20 +0000
ROA not before:           Tue 17 Mar 2026 15:29:20 +0000
ROA not after:            Tue 16 Mar 2027 15:34:20 +0000
asID:                     3816
IP address blocks:        181.174.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ad:ad:15:1e:55:9d:a4:e8:29:67:80:35:c3:c0:f1:0e:ea:da:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Mar 17 15:29:20 2026 GMT
            Not After : Mar 16 15:34:20 2027 GMT
        Subject: CN=EE5CE3D9157EEC1F58A0CAD0E222D303D62463F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:68:fe:e3:93:ab:3a:e6:35:92:eb:8a:d5:e0:
                    2a:00:a9:5b:8b:1a:35:de:6a:50:49:e6:ac:71:89:
                    dd:a9:ef:a9:95:99:39:91:bc:66:28:4c:f7:85:d6:
                    ef:08:a4:5b:3c:82:13:1e:26:57:9a:63:a5:df:2b:
                    a8:15:42:e0:07:f6:98:d3:7a:de:ca:d5:dc:49:95:
                    09:da:97:32:f2:6c:7f:04:a6:58:ac:d3:1a:80:33:
                    2d:01:10:71:2a:35:03:41:e9:2f:ff:7b:8d:ac:71:
                    71:5c:4d:dd:b3:89:38:8f:0c:62:b1:90:31:10:4f:
                    45:a4:e5:81:0c:f9:3e:53:dc:54:f6:90:a7:61:fa:
                    a0:f9:65:4d:cd:6f:e9:50:53:82:53:d5:f5:2d:97:
                    ef:19:70:59:06:11:5d:81:fd:aa:e4:14:f5:cc:26:
                    0e:16:b3:77:86:8b:26:36:f6:bb:3f:6b:d1:8b:54:
                    72:24:ee:d4:6d:28:a3:86:4b:f1:d6:97:73:75:24:
                    de:2e:05:dc:06:fb:d4:de:87:7f:e2:c9:91:d0:da:
                    45:a8:26:e1:a1:4e:f0:be:99:97:76:2b:f1:f3:51:
                    75:55:a8:f2:46:f4:78:d5:8f:65:58:dd:4c:da:34:
                    bd:27:2c:40:14:28:00:55:d5:69:70:9b:72:d4:92:
                    da:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5C:E3:D9:15:7E:EC:1F:58:A0:CA:D0:E2:22:D3:03:D6:24:63:F2
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e33322e302f32332d3233203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:ee:c3:82:da:7f:4f:47:83:33:eb:c7:f2:49:89:1d:d1:5c:
         8f:2c:d1:ef:ed:24:e1:72:8f:dc:0b:79:f0:b5:29:1a:11:db:
         79:df:1f:74:9f:d8:4d:2b:78:ce:14:f4:43:a2:3d:25:cd:46:
         d7:3f:38:f9:93:90:5b:52:09:0c:ad:3b:c4:3e:e6:2f:51:35:
         e4:fa:3e:c9:cd:d0:54:77:13:20:d4:41:52:02:56:65:b1:50:
         24:a2:ac:40:49:f0:5d:bd:e5:52:c2:6e:c0:ab:46:bc:d5:d4:
         1c:84:c9:94:85:11:75:af:21:fc:c2:66:6f:e9:45:c0:b7:fa:
         fa:f2:c4:ff:36:ae:e7:e2:a5:f7:49:99:26:4a:c0:37:07:17:
         20:02:83:35:5e:c6:45:ad:65:d0:56:70:24:e6:ac:71:6e:21:
         98:5d:33:29:7a:f7:2b:ce:af:b8:ea:e1:2c:da:ea:15:c3:7a:
         d6:7f:1f:ef:f5:34:a2:6a:5a:8e:33:79:f2:27:51:6b:2a:d7:
         d2:52:ee:86:1e:b1:81:14:8e:4a:05:71:bf:17:d4:da:e6:a3:
         dd:38:2a:f7:b8:5c:91:69:ce:21:e3:bb:be:6e:a7:13:9f:a7:
         2f:0b:f8:da:25:2c:cf:ab:64:2f:19:6e:a6:98:62:d4:11:07:
         0a:f4:bd:5b
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUFq2tFR5VnaToKWeANcPA8Q7q2iQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE1QTM3MUZDMDE5ODlBQTU5NkZFMjY4Q0U3MEEzQzRE
Q0FBN0E5QjAeFw0yNjAzMTcxNTI5MjBaFw0yNzAzMTYxNTM0MjBaMDMxMTAvBgNV
BAMTKEVFNUNFM0Q5MTU3RUVDMUY1OEEwQ0FEMEUyMjJEMzAzRDYyNDYzRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAaP7jk6s65jWS64rV4CoAqVuL
GjXealBJ5qxxid2p76mVmTmRvGYoTPeF1u8IpFs8ghMeJleaY6XfK6gVQuAH9pjT
et7K1dxJlQnalzLybH8Eplis0xqAMy0BEHEqNQNB6S//e42scXFcTd2ziTiPDGKx
kDEQT0Wk5YEM+T5T3FT2kKdh+qD5ZU3Nb+lQU4JT1fUtl+8ZcFkGEV2B/arkFPXM
Jg4Ws3eGiyY29rs/a9GLVHIk7tRtKKOGS/HWl3N1JN4uBdwG+9Teh3/iyZHQ2kWo
JuGhTvC+mZd2K/HzUXVVqPJG9HjVj2VY3UzaNL0nLEAUKABV1Wlwm3LUktq3AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU7lzj2RV+7B9YoMrQ4iLTA9YkY/IwHwYDVR0j
BBgwFoAU2lo3H8AZiapZb+JoznCjxNyqepswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDYwNjQ1Rjk0NzQ4ODMyQTY1REFCNTRBMDFBNzI5QTAy
MDhFNDQ0NkM4MjMyQTE3QkE2RkUwNzNDRDQ2NUM1LzAvREE1QTM3MUZDMDE5ODlB
QTU5NkZFMjY4Q0U3MEEzQzREQ0FBN0E5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTVBMzcxRkMwMTk4OUFBNTk2
RkUyNjhDRTcwQTNDNERDQUE3QTlCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA2MDY0NUY5NDc0ODgzMkE2NURBQjU0QTAxQTcyOUEwMjA4RTQ0NDZD
ODIzMkExN0JBNkZFMDczQ0Q0NjVDNS8wLzMxMzgzMTJlMzEzNzM0MmUzMzMyMmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMzODMxMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG1riAwDQYJ
KoZIhvcNAQELBQADggEBAJLuw4Laf09HgzPrx/JJiR3RXI8s0e/tJOFyj9wLefC1
KRoR23nfH3Sf2E0reM4U9EOiPSXNRtc/OPmTkFtSCQytO8Q+5i9RNeT6PsnN0FR3
EyDUQVICVmWxUCSirEBJ8F295VLCbsCrRrzV1ByEyZSFEXWvIfzCZm/pRcC3+vry
xP82rufipfdJmSZKwDcHFyACgzVexkWtZdBWcCTmrHFuIZhdMyl69yvOr7jq4Sza
6hXDetZ/H+/1NKJqWo4zefInUWsq19JS7oYesYEUjkoFcb8X1Nrmo904Kve4XJFp
ziHju75upxOfpy8L+NolLM+rZC8ZbqaYYtQRBwr0vVs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:18:40 2026 by rpki-client