Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e3137382e302e302f31362d3234203d3e20323632323237.roa
File:                     3138312e3137382e302e302f31362d3234203d3e20323632323237.roa (raw, json)
Hash identifier:          HSCB+OdIGo9sDaVVCPtGRxEMLGT2SPD28/UJolelrR8=
Subject key identifier:   A9:25:A7:89:11:63:C2:0C:8A:B3:56:EA:B2:D2:FE:6F:A0:B4:29:9F
Certificate issuer:       /CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
Certificate serial:       37180D9D499D6E333DC019EC281DFC2FB4FD95F1
Authority key identifier: F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e3137382e302e302f31362d3234203d3e20323632323237.roa
Signing time:             Thu 12 Feb 2026 23:30:15 +0000
ROA not before:           Thu 12 Feb 2026 23:25:15 +0000
ROA not after:            Thu 11 Feb 2027 23:30:15 +0000
asID:                     262227
IP address blocks:        181.178.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 01:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:18:0d:9d:49:9d:6e:33:3d:c0:19:ec:28:1d:fc:2f:b4:fd:95:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
        Validity
            Not Before: Feb 12 23:25:15 2026 GMT
            Not After : Feb 11 23:30:15 2027 GMT
        Subject: CN=A925A7891163C20C8AB356EAB2D2FE6FA0B4299F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:72:b5:8c:0d:71:92:fd:44:cd:3d:ea:bb:59:
                    1a:f8:00:22:d7:08:14:fe:fe:a8:83:f4:ac:ce:94:
                    bc:fc:bf:da:0b:08:ca:44:06:a2:fe:e4:7a:fc:4b:
                    35:3b:1b:67:e6:57:59:6d:78:ff:10:26:df:e5:08:
                    c6:d9:68:9e:33:28:e5:6a:2f:39:92:f3:74:2a:57:
                    26:ed:80:71:27:5c:ec:92:99:d2:bc:ae:5a:96:ad:
                    b7:eb:ca:06:c1:87:4f:17:27:e2:e5:91:d6:5d:39:
                    28:fb:5a:25:eb:78:f3:1c:c3:0c:cb:98:e7:be:b8:
                    26:1d:14:42:6c:72:9c:01:24:14:84:36:19:f9:d7:
                    74:4a:77:9f:91:67:06:51:5a:5d:91:7d:0a:f5:8a:
                    01:81:0f:e0:a1:fa:38:a3:0f:92:5c:06:9b:a6:77:
                    2e:f3:4c:87:03:89:d4:1f:80:24:e5:98:f6:80:16:
                    0f:86:ae:14:05:c1:96:10:cc:d5:d3:42:e0:83:8c:
                    f9:72:fb:a5:2d:23:56:a9:9b:e3:6f:0d:57:20:c9:
                    25:5b:48:ed:b3:42:ab:7f:08:67:22:e9:b7:95:a0:
                    47:04:91:bd:56:79:c2:58:ee:38:f8:bf:74:ca:80:
                    6d:11:5a:6b:a7:95:25:56:40:3c:3c:e0:be:e7:1e:
                    51:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:25:A7:89:11:63:C2:0C:8A:B3:56:EA:B2:D2:FE:6F:A0:B4:29:9F
            X509v3 Authority Key Identifier:
                keyid:F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e3137382e302e302f31362d3234203d3e20323632323237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.178.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         94:48:eb:0c:15:3f:3d:9f:4e:03:45:48:70:58:4e:d8:c7:2b:
         4a:c2:8f:66:93:90:d2:05:3f:f5:70:1d:2b:61:5a:d1:d2:68:
         8d:26:a0:fc:df:4d:35:6f:0d:43:51:06:16:d5:00:d8:c2:ec:
         a2:7a:a3:6c:01:4f:4a:df:9d:20:54:e0:12:63:cb:6f:00:02:
         da:e7:1e:e1:2f:69:e9:26:25:ea:25:26:c8:0d:4f:58:25:1f:
         44:5d:29:7e:56:8e:eb:0c:ef:11:6f:1d:d3:2c:b4:ce:ea:dd:
         48:df:e1:13:64:b2:21:5b:3b:1b:84:a0:97:17:c7:d8:32:d5:
         7f:34:af:6e:2d:d8:01:a8:16:41:d7:21:a2:42:98:ca:63:88:
         83:fd:f2:0e:39:91:67:03:8f:ff:72:df:5c:b2:cc:31:cc:dd:
         e8:eb:d8:b1:1a:95:2b:c0:8e:e1:5a:ec:47:17:d2:4e:2b:64:
         5d:a4:03:4f:e1:0a:86:41:1c:a5:92:7e:bf:af:ac:8c:08:8c:
         63:06:33:4b:9f:84:64:f9:b8:4c:6c:13:2e:05:5a:fd:5f:36:
         a1:34:fc:40:a2:57:6c:53:8a:7f:6e:b7:cc:f6:56:65:3c:35:
         dc:40:72:2c:d5:a9:b8:cd:99:cb:7e:f7:c4:d7:41:87:21:e8:
         7d:c2:30:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:52:37 2026 by rpki-client