Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e3137382e302e302f31352d3234203d3e203134373534.roa
File:                     3138312e3137382e302e302f31352d3234203d3e203134373534.roa (raw, json)
Hash identifier:          45MNDWTW+9fEgtml6ZilzSLCBRDRBnh4v0Ub8blTxOs=
Subject key identifier:   95:B5:7D:7C:1B:78:74:E9:FC:53:47:41:CD:1B:B1:BF:9B:78:5D:3B
Certificate issuer:       /CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
Certificate serial:       297E74D69A73DE06528F9905F8B7A3FEA25BD669
Authority key identifier: F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e3137382e302e302f31352d3234203d3e203134373534.roa
Signing time:             Thu 12 Feb 2026 23:30:15 +0000
ROA not before:           Thu 12 Feb 2026 23:25:15 +0000
ROA not after:            Thu 11 Feb 2027 23:30:15 +0000
asID:                     14754
IP address blocks:        181.178.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 01:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:7e:74:d6:9a:73:de:06:52:8f:99:05:f8:b7:a3:fe:a2:5b:d6:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
        Validity
            Not Before: Feb 12 23:25:15 2026 GMT
            Not After : Feb 11 23:30:15 2027 GMT
        Subject: CN=95B57D7C1B7874E9FC534741CD1BB1BF9B785D3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:25:3e:a5:3e:2d:62:24:32:c1:d7:5e:7e:90:
                    f2:5d:28:4b:d5:ac:e7:05:63:21:bd:d5:02:d4:fd:
                    32:5e:2f:6f:d3:60:1e:79:93:4e:89:37:8e:00:97:
                    c2:da:1d:0c:f8:8e:79:ac:dc:25:04:5d:2e:78:e5:
                    ae:f1:b7:c2:cf:be:b6:61:60:d7:75:46:cb:b4:d7:
                    e4:4a:14:fe:d4:bd:96:1d:41:29:94:4e:db:d6:53:
                    67:a1:0d:d5:58:57:02:15:d7:99:95:2a:89:cd:5c:
                    d7:69:a3:61:c4:f1:d9:8b:0d:79:70:78:b8:9d:09:
                    c6:63:ab:54:10:f9:62:56:be:e5:c8:51:25:1d:b6:
                    14:66:0a:fa:3c:b7:ad:5a:50:bd:8b:99:14:04:d3:
                    41:7a:69:ae:4d:3b:77:da:78:04:a9:2f:8e:bd:6f:
                    79:a5:49:f2:2e:40:23:e2:f5:c6:a6:3e:89:a2:58:
                    51:64:06:24:9a:11:a2:be:33:d8:8a:8e:9b:ac:db:
                    8f:d3:32:40:cf:d1:3d:8b:6d:1f:5e:b9:2d:6d:35:
                    98:97:79:7e:e9:c4:b8:3f:f6:e5:9b:e5:40:c4:f8:
                    71:53:99:03:f8:be:de:54:8f:d1:b6:6a:39:6f:17:
                    b1:dd:bc:92:d4:22:ca:1c:e8:a8:48:32:72:17:3d:
                    f3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B5:7D:7C:1B:78:74:E9:FC:53:47:41:CD:1B:B1:BF:9B:78:5D:3B
            X509v3 Authority Key Identifier:
                keyid:F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e3137382e302e302f31352d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.178.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         8a:d5:27:b5:59:4f:f1:5a:19:1b:b7:ae:80:f6:48:fa:21:f6:
         42:e1:26:c8:5c:f1:0d:02:56:11:d4:b2:64:5a:4e:9c:71:e0:
         77:17:7c:db:c4:17:29:50:c7:b3:08:8a:e5:c6:37:b3:4e:43:
         d0:a4:58:0c:60:63:d4:71:83:66:63:97:74:61:e1:a0:7a:e2:
         81:45:98:0e:31:3e:07:1d:a1:dd:5d:fb:64:c6:64:b1:c6:22:
         f7:e6:54:1a:4e:6d:81:e7:53:06:38:01:06:64:8f:49:ae:d1:
         c8:03:54:b9:39:5c:92:79:8c:51:eb:87:bb:a5:4f:48:35:28:
         9c:31:d2:3b:a2:d9:5c:dc:de:30:50:f0:00:7c:2f:ae:4c:e1:
         d9:ae:5e:c6:a7:05:a7:31:92:d7:3f:b5:0a:cb:72:60:59:b6:
         26:de:37:2b:5c:a2:c3:2c:f7:d1:59:c2:e0:30:e7:49:c7:45:
         a5:59:f4:7c:c0:12:d0:8d:2d:ed:0a:d9:56:f7:17:d8:6f:12:
         9a:75:00:c0:35:db:c2:97:24:61:2c:43:02:18:cb:22:d1:84:
         a7:fd:3e:77:d8:26:14:b3:af:ac:64:2a:d2:a5:0c:03:39:6a:
         7d:46:f2:f9:e3:63:7a:3e:74:e9:7d:7f:af:16:9d:2b:63:ce:
         e7:db:d0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:52:46 2026 by rpki-client