Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/3138312e3137342e3138342e302f32322d3234203d3e20323130383736.roa
File:                     3138312e3137342e3138342e302f32322d3234203d3e20323130383736.roa (raw, json)
Hash identifier:          UuiVftl4mDS7BsZlPKJ0HWNWCDSVTAM8RNvq0lZB5fM=
Subject key identifier:   41:B5:70:D8:4C:B8:6C:AA:35:09:C5:40:26:B6:01:0E:D7:FE:C9:94
Certificate issuer:       /CN=0F5F9A2CF444A9C495532D9BB5295457EA53D556
Certificate serial:       7831B4D99213641A40EE96593B58663BF200F135
Authority key identifier: 0F:5F:9A:2C:F4:44:A9:C4:95:53:2D:9B:B5:29:54:57:EA:53:D5:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/3138312e3137342e3138342e302f32322d3234203d3e20323130383736.roa
Signing time:             Mon 16 Feb 2026 11:30:42 +0000
ROA not before:           Mon 16 Feb 2026 11:25:42 +0000
ROA not after:            Mon 15 Feb 2027 11:30:42 +0000
asID:                     210876
IP address blocks:        181.174.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 21:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:31:b4:d9:92:13:64:1a:40:ee:96:59:3b:58:66:3b:f2:00:f1:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F5F9A2CF444A9C495532D9BB5295457EA53D556
        Validity
            Not Before: Feb 16 11:25:42 2026 GMT
            Not After : Feb 15 11:30:42 2027 GMT
        Subject: CN=41B570D84CB86CAA3509C54026B6010ED7FEC994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:c6:ae:50:1b:9d:c8:e4:93:83:bb:0d:29:
                    bf:0c:32:16:c3:57:ef:c3:88:78:03:92:44:e7:6a:
                    78:c5:68:92:b0:25:c2:f5:4e:bc:76:59:d5:ca:58:
                    ec:e7:7e:e5:0f:d2:f9:3c:b2:1d:a7:b4:12:50:9f:
                    a0:e6:d5:39:a5:fa:9b:c5:8b:f1:db:3f:00:3a:8d:
                    79:2b:3a:31:c6:34:95:d7:7f:0d:49:73:4f:32:51:
                    1d:ca:f5:ae:5e:8c:5b:34:e2:04:e4:62:4c:70:d0:
                    2a:ca:7c:22:36:17:bd:3c:b5:73:7c:53:66:2a:48:
                    93:58:a2:15:e8:85:28:ab:68:37:7a:cb:88:ac:29:
                    4b:b9:eb:75:71:72:3f:e5:90:fd:55:73:03:67:c8:
                    6b:06:34:26:ea:2c:da:60:41:fe:9c:3c:bb:b3:be:
                    42:d6:ec:90:89:3f:4e:e1:d7:4d:30:e1:ad:cb:4f:
                    e6:e7:16:42:24:96:f8:1e:54:c8:b8:e9:60:ec:38:
                    37:a4:dc:1b:1c:f3:54:4e:e7:9d:56:ad:00:7d:8b:
                    7e:d3:33:c8:47:13:b0:f1:20:c5:9d:ea:04:a3:a7:
                    11:20:20:6f:f0:2c:9a:3b:da:ed:23:3d:53:e8:ed:
                    ce:d6:97:1e:56:56:eb:27:f9:09:ec:24:fd:01:0b:
                    01:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B5:70:D8:4C:B8:6C:AA:35:09:C5:40:26:B6:01:0E:D7:FE:C9:94
            X509v3 Authority Key Identifier:
                keyid:0F:5F:9A:2C:F4:44:A9:C4:95:53:2D:9B:B5:29:54:57:EA:53:D5:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/3138312e3137342e3138342e302f32322d3234203d3e20323130383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:d4:80:6a:8d:ba:2d:af:da:b0:0d:b9:b4:97:cb:48:b8:49:
         f3:b0:40:f5:9d:b0:1e:ce:48:ef:49:31:5d:30:82:31:fb:22:
         c1:21:50:39:ef:99:5a:a0:67:73:a6:15:95:5a:21:22:e2:a7:
         e6:67:c0:44:c2:92:58:25:14:ba:5e:35:92:eb:7f:36:a0:9b:
         bc:75:38:65:92:b3:42:ba:d9:df:a2:e1:08:ab:f3:1c:0f:52:
         32:18:a0:71:12:c9:47:bc:88:0c:1b:75:ec:3f:2b:f3:42:a6:
         3b:0c:7d:62:07:0f:5d:38:7f:e3:06:a6:95:ac:8d:2e:ce:42:
         88:f6:21:fb:73:ca:e2:a7:87:e3:cb:2b:e1:13:a3:ab:4e:15:
         97:3e:8f:ac:16:ad:d9:b0:4d:7b:d2:16:55:96:99:bc:71:f5:
         f3:37:37:af:fd:b2:04:4c:c3:61:f9:46:87:c7:2b:03:f3:92:
         91:fd:55:13:55:37:4d:d4:d1:06:51:67:0d:58:0c:c9:3a:e2:
         cd:77:65:b5:cf:e3:3e:bf:4a:42:70:22:2c:46:c1:ab:71:b9:
         77:ac:8e:65:31:76:a6:6b:d0:87:d3:8f:c2:0f:f7:fe:5b:57:
         87:52:9c:2a:52:7a:84:c7:08:be:7c:01:2d:62:d8:0e:97:3c:
         1c:1f:91:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:21:23 2026 by rpki-client