Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e3137382e302e302f31352d3234203d3e203131353536.roa
File:                     3138312e3137382e302e302f31352d3234203d3e203131353536.roa (raw, json)
Hash identifier:          e33WCc4l2Cj+GOMfnzZh17DH4V71QYTSsKtUpKr3Doc=
Subject key identifier:   DA:77:8A:2B:B3:C9:FF:C1:36:EC:0F:0E:5B:C9:0D:B0:53:4B:67:B7
Certificate issuer:       /CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
Certificate serial:       31EB8E94D1D94BD2A984720A8A28495AA97E51F4
Authority key identifier: F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e3137382e302e302f31352d3234203d3e203131353536.roa
Signing time:             Fri 13 Feb 2026 14:30:19 +0000
ROA not before:           Fri 13 Feb 2026 14:25:19 +0000
ROA not after:            Fri 12 Feb 2027 14:30:19 +0000
asID:                     11556
IP address blocks:        181.178.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 01:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:eb:8e:94:d1:d9:4b:d2:a9:84:72:0a:8a:28:49:5a:a9:7e:51:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
        Validity
            Not Before: Feb 13 14:25:19 2026 GMT
            Not After : Feb 12 14:30:19 2027 GMT
        Subject: CN=DA778A2BB3C9FFC136EC0F0E5BC90DB0534B67B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a6:36:86:6c:cd:3f:bf:e2:ff:08:2b:3f:9e:
                    47:19:82:d3:3d:3c:57:f1:7e:ea:2d:bb:cf:61:1e:
                    b0:25:49:91:f1:64:06:06:ff:dd:b8:9e:fd:09:9e:
                    4a:93:dd:3d:05:86:e7:b5:ae:d5:e8:c1:bd:c6:f8:
                    75:85:0e:c9:b9:20:f7:97:4e:5d:19:75:0e:21:9d:
                    02:7c:7c:a6:42:ee:9a:c0:8b:74:41:23:c7:9b:ab:
                    55:c4:16:9b:42:56:e7:8a:02:48:91:0a:54:06:c2:
                    a1:73:be:24:05:78:8a:c2:c6:72:f5:c0:35:50:76:
                    4c:6a:0e:d9:3d:74:92:8e:a6:7e:02:27:b1:1e:f6:
                    92:b6:c5:f0:32:36:9f:a2:cd:eb:1a:aa:ca:6d:c4:
                    5b:7a:c6:27:c1:e0:66:23:f7:39:d8:29:94:a6:24:
                    29:f6:d5:e1:0a:db:a8:a7:3e:63:0d:72:3e:ea:d7:
                    ed:4c:e8:d9:70:7a:52:ed:c1:5b:cd:91:92:42:18:
                    7c:d2:2f:67:94:28:57:27:db:92:78:83:2b:ea:6e:
                    68:49:38:03:34:f3:00:ec:7f:64:f0:42:51:ad:dc:
                    9b:e1:8b:0d:90:23:46:13:b3:64:d1:a9:2e:b7:aa:
                    14:5c:66:2b:a7:19:79:70:4a:8c:74:c7:95:dc:32:
                    8e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:77:8A:2B:B3:C9:FF:C1:36:EC:0F:0E:5B:C9:0D:B0:53:4B:67:B7
            X509v3 Authority Key Identifier:
                keyid:F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e3137382e302e302f31352d3234203d3e203131353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.178.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         72:1f:78:a3:7c:56:ce:dc:63:8f:d0:9b:d0:9c:14:ed:45:92:
         67:15:03:c9:28:74:34:16:c3:6a:5b:bf:05:f4:24:21:e1:35:
         a4:ed:51:29:a0:69:91:93:d3:b0:a4:03:98:e8:ff:6b:67:2b:
         83:54:53:76:dd:cb:41:03:60:60:7c:2d:a8:e0:ce:eb:33:e7:
         d5:39:b8:2d:3f:8b:29:0f:25:fe:be:1a:b0:98:35:a2:44:0d:
         9b:48:36:a3:53:66:64:11:0b:b3:91:6c:f6:ca:9c:51:fe:8a:
         54:b8:db:23:35:42:c8:2b:61:b4:52:56:33:3e:c8:06:59:bb:
         cd:21:e6:52:09:0c:90:3e:7a:bb:28:29:ab:44:57:15:f1:b0:
         42:b0:31:45:b9:62:1b:23:6e:34:87:cb:0b:1d:48:cf:56:60:
         0b:c7:29:ca:ba:93:5f:65:05:04:3a:ff:12:01:76:06:07:06:
         c5:24:9a:56:26:bc:db:bf:20:21:e8:cf:e2:ec:11:44:f5:c9:
         d4:cb:6c:4a:c5:cc:46:22:55:e2:29:f3:0b:41:90:85:72:00:
         98:e2:b5:ae:42:8c:05:55:24:87:9a:d6:74:61:c1:5b:91:a9:
         72:80:74:5f:67:0e:b2:79:82:58:2a:44:a3:67:2e:f4:34:fa:
         8b:10:af:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:52:43 2026 by rpki-client