Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/3138312e3137342e3137322e302f32322d3234203d3e203230323037.roa
File:                     3138312e3137342e3137322e302f32322d3234203d3e203230323037.roa (raw, json)
Hash identifier:          GprPVvhb4GwrAMR3mAxzOrj1VhqPk1Jb37VstW2Xce0=
Subject key identifier:   CB:1B:F0:6A:B0:6C:D1:54:AA:EA:39:0D:B6:53:BD:51:86:20:ED:91
Certificate issuer:       /CN=4F99A2A558BEB359E92AC3908E9098C384DE72F7
Certificate serial:       30C58C8ED6E07E7068D1F54FA1DCF8904C2EDDEF
Authority key identifier: 4F:99:A2:A5:58:BE:B3:59:E9:2A:C3:90:8E:90:98:C3:84:DE:72:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/3138312e3137342e3137322e302f32322d3234203d3e203230323037.roa
Signing time:             Tue 24 Feb 2026 19:31:39 +0000
ROA not before:           Tue 24 Feb 2026 19:26:39 +0000
ROA not after:            Tue 23 Feb 2027 19:31:39 +0000
asID:                     20207
IP address blocks:        181.174.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 19:43:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c5:8c:8e:d6:e0:7e:70:68:d1:f5:4f:a1:dc:f8:90:4c:2e:dd:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F99A2A558BEB359E92AC3908E9098C384DE72F7
        Validity
            Not Before: Feb 24 19:26:39 2026 GMT
            Not After : Feb 23 19:31:39 2027 GMT
        Subject: CN=CB1BF06AB06CD154AAEA390DB653BD518620ED91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:43:c3:b4:15:dc:42:f7:37:52:fc:0e:33:da:
                    6d:0e:e0:8a:6a:bb:61:37:b0:7a:15:72:1f:92:c7:
                    e5:5c:40:5a:41:0d:ca:07:3d:2c:d7:f9:ac:61:a5:
                    6e:17:7c:2b:90:ed:8f:bc:ac:08:44:ad:81:62:28:
                    de:c0:7f:76:26:ef:cc:48:4c:3b:ff:b0:37:fc:b4:
                    af:14:64:d8:0f:3d:e9:90:1e:1d:92:90:8d:b0:e6:
                    00:8c:76:52:12:79:6e:50:bc:3c:2f:05:0e:44:34:
                    16:f3:10:9d:e9:69:bb:28:ab:ba:78:60:d1:75:9a:
                    42:5e:9d:21:76:19:21:90:b6:c9:1d:02:e3:3d:e2:
                    3e:6f:39:b7:5a:d0:8a:10:5b:c8:fc:24:a8:b4:15:
                    6f:4d:96:c8:e5:a1:37:6a:2b:51:5f:e8:cd:07:ac:
                    6d:93:ef:03:7d:ac:31:3c:27:a5:8c:fe:76:30:81:
                    d0:0c:1d:d0:dd:af:bb:e6:01:9a:2d:fa:13:e1:b2:
                    31:80:36:4b:90:99:14:b5:7f:08:a7:fe:e0:96:a0:
                    ee:b1:43:e3:20:a0:09:da:fd:e4:1f:ae:92:8a:ec:
                    7f:9c:4c:83:b6:d8:d9:06:f7:49:fc:dc:3d:24:eb:
                    ab:7f:25:17:a8:97:8c:30:de:f4:ea:d8:d1:88:c8:
                    62:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1B:F0:6A:B0:6C:D1:54:AA:EA:39:0D:B6:53:BD:51:86:20:ED:91
            X509v3 Authority Key Identifier:
                keyid:4F:99:A2:A5:58:BE:B3:59:E9:2A:C3:90:8E:90:98:C3:84:DE:72:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/3138312e3137342e3137322e302f32322d3234203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:a2:79:f8:a9:c3:32:ff:4f:67:f4:d7:13:0a:8d:55:df:9f:
         04:a0:f6:92:d2:98:77:c1:6b:1f:d7:9f:68:74:a3:93:6b:98:
         a0:25:07:4a:54:df:cc:65:84:9f:8e:fc:79:a0:41:47:86:44:
         b0:f0:f1:f6:68:20:13:75:5c:1f:3b:b0:72:96:49:a3:3a:7f:
         f6:22:3f:75:9b:bd:ac:3e:84:40:0b:06:7c:2b:a4:1d:0e:ed:
         e3:1a:4e:4f:7f:45:ec:ac:c0:fb:d1:dd:1a:87:fe:4e:17:a3:
         50:22:6c:bb:e7:30:3c:2c:36:10:38:1f:5a:5d:62:df:5b:d0:
         31:cd:2e:25:17:22:02:85:22:9f:95:7e:72:13:18:b9:1f:56:
         ef:9d:fc:66:a3:3c:00:77:f1:fa:06:ca:b3:bb:e9:10:e5:c1:
         d5:2b:29:b6:a3:de:b9:83:eb:b4:4b:18:52:c9:32:93:3e:73:
         8b:8b:d7:23:ab:51:7e:74:8b:19:e3:79:d9:c6:9b:72:18:f7:
         f1:a1:b8:6a:6f:80:1f:e8:22:62:c6:00:cd:59:6e:13:6c:aa:
         bc:0e:52:e5:21:5a:41:4c:a5:2e:f4:3a:01:13:ba:b3:b6:ba:
         7e:15:9b:76:a4:86:27:4d:5e:eb:9d:1c:75:f6:1b:02:54:b1:
         bb:01:10:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:18:41 2026 by rpki-client