Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS273140.roa
File:                     AS273140.roa (raw, json)
Hash identifier:          zaFyo9shY4wf2IU4xT/5cOTW9u67t9JjlRqiJLvLnNI=
Subject key identifier:   CF:EF:53:B3:62:26:61:CD:5C:92:D4:93:C2:D3:24:F2:F8:3C:3B:B5
Certificate issuer:       /CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
Certificate serial:       5C0EB4AF71C2C9D32E7F2D5D44CC048FB2316C1D
Authority key identifier: 72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS273140.roa
Signing time:             Tue 14 Apr 2026 21:25:00 +0000
ROA not before:           Tue 14 Apr 2026 21:20:00 +0000
ROA not after:            Tue 13 Apr 2027 21:25:00 +0000
asID:                     273140
IP address blocks:        181.188.225.0/24 maxlen: 24
                          200.7.250.0/24 maxlen: 24
                          200.7.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:0e:b4:af:71:c2:c9:d3:2e:7f:2d:5d:44:cc:04:8f:b2:31:6c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
        Validity
            Not Before: Apr 14 21:20:00 2026 GMT
            Not After : Apr 13 21:25:00 2027 GMT
        Subject: CN=CFEF53B3622661CD5C92D493C2D324F2F83C3BB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:4f:04:ea:68:c5:eb:d4:82:46:4f:90:ea:
                    e7:93:42:33:b0:f2:5d:ee:fe:b7:e0:44:e5:02:ae:
                    16:13:76:1d:e9:80:3d:ec:d4:a6:31:e8:92:e4:91:
                    5d:df:cf:28:8d:4a:df:98:8f:84:4a:5e:fe:53:84:
                    f0:be:4c:ae:c7:8b:2c:b9:e3:67:c2:45:67:e7:cc:
                    e5:65:c0:d9:fa:6e:16:c7:e1:a9:e1:71:1a:b2:d6:
                    06:10:3f:c8:63:a8:ee:59:bb:80:4e:9f:77:c9:b0:
                    74:ac:68:43:7a:d5:08:9b:34:17:00:67:ca:30:0c:
                    12:73:47:70:c2:b4:3c:5c:ee:5e:db:9a:23:e8:8b:
                    e1:28:40:66:79:63:86:d4:18:b7:b8:b6:f5:0b:31:
                    72:68:ec:59:39:b7:85:12:80:1e:d8:8d:12:88:a5:
                    22:d5:5e:77:d3:f2:41:2a:49:3d:66:64:cc:d5:c2:
                    1a:af:81:c8:06:63:b5:be:4e:d4:04:56:2d:72:88:
                    bb:dd:8a:d5:ba:1f:6c:71:c0:63:b8:43:da:3c:db:
                    d2:a4:a8:21:f7:aa:ed:d6:38:5b:39:27:5d:ad:c6:
                    66:b7:cb:1d:1c:c3:dc:dd:5e:df:7f:07:8c:3e:62:
                    cb:30:33:84:9b:ce:e0:d8:42:77:4b:3c:c6:f0:a0:
                    82:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:EF:53:B3:62:26:61:CD:5C:92:D4:93:C2:D3:24:F2:F8:3C:3B:B5
            X509v3 Authority Key Identifier:
                keyid:72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS273140.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.225.0/24
                  200.7.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:8c:97:5b:18:57:71:49:70:c8:fa:d2:4d:a9:a8:c8:bc:e3:
         cc:26:84:98:77:f3:d1:03:86:d2:35:b5:49:d1:42:60:1c:e7:
         5e:70:97:c6:cc:bf:6a:f4:96:c9:a6:5c:01:56:c8:09:f4:a0:
         60:9a:7e:da:71:fe:af:5c:38:20:7b:a4:c5:10:cb:fe:c2:dd:
         ef:40:83:bb:2a:c2:21:2a:c5:8d:eb:a1:fa:3c:e1:66:af:7c:
         fa:0c:73:45:28:91:35:4c:c0:33:79:bf:b5:cd:e3:d0:60:ce:
         6f:c7:ca:5a:4f:88:4a:01:7a:28:66:6b:44:74:75:05:e9:b4:
         50:54:f5:96:75:e9:ef:c1:2b:9e:6c:ec:7a:04:19:3d:e9:90:
         93:5f:27:27:18:b6:fd:f9:f4:8c:c4:23:f6:d5:10:15:11:f7:
         03:b4:64:08:2d:47:17:aa:3c:c8:e3:30:a3:d5:35:35:cb:83:
         58:52:16:6f:63:d8:70:56:58:ce:5b:7f:6d:cd:c2:cf:57:b6:
         14:11:69:82:62:fa:17:bd:1e:f2:c6:ae:56:26:65:07:22:82:
         de:1a:76:ce:06:b6:e9:be:69:63:ed:8b:27:e0:62:39:57:9f:
         69:a0:b1:64:06:83:29:cf:8c:34:83:b9:5d:a8:62:c7:8c:f9:
         24:7c:a8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:30:45 2026 by rpki-client