Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e33382e302e302f31362d3234203d3e203131353536.roa
File:                     3138312e33382e302e302f31362d3234203d3e203131353536.roa (raw, json)
Hash identifier:          d+zjKdea0wobtgpJHqHF6lCE9rMmkS6365fgk2z7tIg=
Subject key identifier:   7F:E0:E5:70:C8:E0:16:02:69:1C:77:E9:E3:E4:DB:B3:60:BF:B5:D0
Certificate issuer:       /CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
Certificate serial:       68C56C209049E57D54FA2CB960E33A4C9BB2A5B5
Authority key identifier: F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e33382e302e302f31362d3234203d3e203131353536.roa
Signing time:             Fri 13 Feb 2026 14:30:19 +0000
ROA not before:           Fri 13 Feb 2026 14:25:19 +0000
ROA not after:            Fri 12 Feb 2027 14:30:19 +0000
asID:                     11556
IP address blocks:        181.38.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 01:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c5:6c:20:90:49:e5:7d:54:fa:2c:b9:60:e3:3a:4c:9b:b2:a5:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
        Validity
            Not Before: Feb 13 14:25:19 2026 GMT
            Not After : Feb 12 14:30:19 2027 GMT
        Subject: CN=7FE0E570C8E01602691C77E9E3E4DBB360BFB5D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:90:fe:9c:32:fc:4f:39:a0:37:8f:99:aa:a6:
                    8d:9e:de:d6:5d:de:b6:70:e2:8b:b8:06:4d:d5:8a:
                    31:40:07:5d:c4:a0:ca:80:89:9b:29:19:e6:73:6b:
                    f3:77:e3:2c:10:8c:42:47:b6:54:fd:c5:bd:b7:ae:
                    d7:17:d7:3c:27:ba:25:03:ba:22:c5:22:49:1d:b1:
                    9c:1d:c8:50:73:8f:8d:55:cf:d2:1a:3e:59:24:cb:
                    ef:68:92:fa:b8:20:b0:e8:63:d1:6f:0a:43:25:24:
                    62:12:2a:53:9f:cc:6e:42:7b:46:9c:c7:c9:f1:28:
                    9c:11:4f:63:69:17:1a:18:8b:24:84:86:0b:da:7f:
                    17:17:e8:4b:ee:28:b6:7e:29:ee:49:19:52:19:e3:
                    7a:40:59:8b:b0:02:28:70:48:e7:e0:01:d2:1c:85:
                    d9:1d:bb:91:a5:8f:a2:7e:81:a1:dd:e0:a1:6b:38:
                    31:9d:05:71:4b:28:dc:89:3f:65:4f:ac:e5:91:dd:
                    81:da:5d:25:1a:f1:de:60:fc:7a:d6:bd:05:c4:69:
                    84:91:c7:58:d9:09:15:f2:34:c6:62:de:ad:7c:97:
                    0e:55:db:bf:8e:53:78:34:8d:8a:0f:72:28:c2:c0:
                    aa:03:02:ea:b0:7a:16:9d:b0:b6:c6:f1:66:8f:2b:
                    a6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E0:E5:70:C8:E0:16:02:69:1C:77:E9:E3:E4:DB:B3:60:BF:B5:D0
            X509v3 Authority Key Identifier:
                keyid:F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e33382e302e302f31362d3234203d3e203131353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.38.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         26:02:33:3b:78:44:08:cb:ee:a8:b2:f2:b8:2c:38:38:07:29:
         87:4c:54:cd:0e:30:8f:a2:7d:81:51:26:e2:c1:33:6c:e8:1b:
         bf:cf:47:d5:6c:5f:fb:90:ea:fb:bb:33:b0:75:d4:57:94:2e:
         ef:cc:e2:19:1e:3b:79:ab:b4:5e:db:38:33:4d:96:6c:c3:6b:
         d0:5f:11:f8:fc:b0:36:0a:88:07:5b:d9:df:48:cb:68:53:68:
         55:68:0a:73:af:8c:bd:67:8c:8d:fe:6e:ce:f3:38:cc:7b:3b:
         cb:37:96:50:89:25:c9:4d:69:3a:8c:ee:2f:eb:1d:dc:9d:9c:
         ab:a2:c8:ff:7a:97:85:d8:bd:25:9a:f9:d3:25:1b:81:95:d9:
         fd:f3:0d:75:78:5f:f8:fd:7b:3a:19:84:53:2d:59:a9:85:f5:
         a6:78:ad:4d:8f:53:d4:91:70:38:3d:a3:08:44:f4:92:d4:b9:
         b6:d6:20:59:f7:bd:c1:6d:5e:9d:87:7a:d6:de:d2:57:69:7f:
         4c:70:e2:aa:65:d8:d6:ef:67:fa:2f:7e:c7:64:d9:b3:aa:b8:
         46:74:db:e0:6d:9a:2e:0b:d8:74:a7:7b:6f:27:9c:8f:6a:74:
         72:3f:23:6a:a9:e4:c8:de:ff:ba:39:57:a3:dd:03:f0:5a:73:
         f2:cc:12:75
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUaMVsIJBJ5X1U+iy5YOM6TJuypbUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA3QUMyQzMzMTNENzRGMjI1ODUzODkyNDFCM0JFMkE3
Qjg5RDdCRjAeFw0yNjAyMTMxNDI1MTlaFw0yNzAyMTIxNDMwMTlaMDMxMTAvBgNV
BAMTKDdGRTBFNTcwQzhFMDE2MDI2OTFDNzdFOUUzRTREQkIzNjBCRkI1RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtkP6cMvxPOaA3j5mqpo2e3tZd
3rZw4ou4Bk3VijFAB13EoMqAiZspGeZza/N34ywQjEJHtlT9xb23rtcX1zwnuiUD
uiLFIkkdsZwdyFBzj41Vz9IaPlkky+9okvq4ILDoY9FvCkMlJGISKlOfzG5Ce0ac
x8nxKJwRT2NpFxoYiySEhgvafxcX6EvuKLZ+Ke5JGVIZ43pAWYuwAihwSOfgAdIc
hdkdu5Glj6J+gaHd4KFrODGdBXFLKNyJP2VPrOWR3YHaXSUa8d5g/HrWvQXEaYSR
x1jZCRXyNMZi3q18lw5V27+OU3g0jYoPcijCwKoDAuqwehadsLbG8WaPK6b9AgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUf+DlcMjgFgJpHHfp4+Tbs2C/tdAwHwYDVR0j
BBgwFoAU8HrCwzE9dPIlhTiSQbO+KnuJ178wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNEIyNTg1QjFERTVFRjRFRjdDRjA3MjBENzhENTIxNDYx
RjM2RDczMjg2MjE4NURFNzVCRDhCNTg5NkZEMjQyLzAvRjA3QUMyQzMzMTNENzRG
MjI1ODUzODkyNDFCM0JFMkE3Qjg5RDdCRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMDdBQzJDMzMxM0Q3NEYyMjU4
NTM4OTI0MUIzQkUyQTdCODlEN0JGLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDRCMjU4NUIxREU1RUY0RUY3Q0YwNzIwRDc4RDUyMTQ2MUYzNkQ3MzI4
NjIxODVERTc1QkQ4QjU4OTZGRDI0Mi8wLzMxMzgzMTJlMzMzODJlMzAyZTMwMmYz
MTM2MmQzMjM0MjAzZDNlMjAzMTMxMzUzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAtSYwDQYJKoZI
hvcNAQELBQADggEBACYCMzt4RAjL7qiy8rgsODgHKYdMVM0OMI+ifYFRJuLBM2zo
G7/PR9VsX/uQ6vu7M7B11FeULu/M4hkeO3mrtF7bODNNlmzDa9BfEfj8sDYKiAdb
2d9Iy2hTaFVoCnOvjL1njI3+bs7zOMx7O8s3llCJJclNaTqM7i/rHdydnKuiyP96
l4XYvSWa+dMlG4GV2f3zDXV4X/j9ezoZhFMtWamF9aZ4rU2PU9SRcDg9owhE9JLU
ubbWIFn3vcFtXp2Hetbe0ldpf0xw4qpl2NbvZ/ovfsdk2bOquEZ02+Btmi4L2HSn
e28nnI9qdHI/I2qp5Mje/7o5V6PdA/Bac/LMEnU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:53:00 2026 by rpki-client