Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/3138312e3137342e3138382e302f32322d3234203d3e20323132303137.roa
File:                     3138312e3137342e3138382e302f32322d3234203d3e20323132303137.roa (raw, json)
Hash identifier:          m9oyTGD4YwuF4v6tGQ32rmEVCiFNRA23vStoNvHuwJo=
Subject key identifier:   0F:63:44:33:94:69:F5:FF:C9:83:68:4D:57:48:44:A3:25:A4:87:19
Certificate issuer:       /CN=0F5F9A2CF444A9C495532D9BB5295457EA53D556
Certificate serial:       0863C832AA4BEF964F2E487E6C87E687E4611DC6
Authority key identifier: 0F:5F:9A:2C:F4:44:A9:C4:95:53:2D:9B:B5:29:54:57:EA:53:D5:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/3138312e3137342e3138382e302f32322d3234203d3e20323132303137.roa
Signing time:             Mon 16 Feb 2026 11:30:42 +0000
ROA not before:           Mon 16 Feb 2026 11:25:42 +0000
ROA not after:            Mon 15 Feb 2027 11:30:42 +0000
asID:                     212017
IP address blocks:        181.174.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:63:c8:32:aa:4b:ef:96:4f:2e:48:7e:6c:87:e6:87:e4:61:1d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F5F9A2CF444A9C495532D9BB5295457EA53D556
        Validity
            Not Before: Feb 16 11:25:42 2026 GMT
            Not After : Feb 15 11:30:42 2027 GMT
        Subject: CN=0F6344339469F5FFC983684D574844A325A48719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:08:69:7e:b5:88:92:89:f7:3b:01:35:04:cf:
                    bd:e9:fb:0e:c3:4c:52:39:a7:ac:6d:28:3e:67:ab:
                    02:58:7e:da:98:cc:8e:a8:7c:8e:5f:5b:dd:8b:4e:
                    d5:17:f9:45:33:70:e2:79:88:91:99:82:6f:24:66:
                    69:58:54:e9:b5:58:03:75:38:62:76:17:87:62:9f:
                    c6:7b:72:19:d6:b0:f2:05:ee:89:1a:3e:e6:eb:36:
                    e7:9c:bb:1c:b2:b6:20:67:5e:82:3c:1a:b8:ef:a3:
                    74:0f:54:39:c1:05:18:de:67:b5:8a:e6:57:95:73:
                    c5:bc:aa:fb:96:25:06:36:22:c8:72:58:13:f5:e5:
                    1e:b3:1f:dd:b4:71:22:63:b1:55:e6:57:56:6b:b1:
                    08:d6:86:ff:67:a3:1f:9a:6f:d3:da:a3:43:51:e1:
                    4c:88:cf:6d:2b:2d:80:e3:28:d4:71:b2:9d:e0:9d:
                    c8:7c:95:08:1e:66:a4:44:91:6c:21:02:02:d1:30:
                    55:a7:82:48:4a:7b:bd:ac:ed:18:b4:69:73:01:c2:
                    28:e2:09:2c:54:a1:df:4f:d6:f6:45:7e:c1:bf:1a:
                    d5:f2:7b:3e:7b:d8:28:2f:f5:9e:13:df:af:e7:9d:
                    ec:c0:2c:1b:d5:fe:1c:95:ed:a4:ca:19:08:d5:89:
                    9c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:63:44:33:94:69:F5:FF:C9:83:68:4D:57:48:44:A3:25:A4:87:19
            X509v3 Authority Key Identifier:
                keyid:0F:5F:9A:2C:F4:44:A9:C4:95:53:2D:9B:B5:29:54:57:EA:53:D5:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/3138312e3137342e3138382e302f32322d3234203d3e20323132303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:81:0a:57:ee:be:db:6d:ec:13:52:c6:a6:ca:e8:a6:bc:9b:
         a0:98:42:0e:a1:2b:3f:fd:8c:3d:42:58:13:22:c3:6c:00:72:
         a4:80:88:2f:71:59:1d:95:12:45:a0:60:4f:5d:1f:2c:5f:51:
         ea:a0:7e:f5:b4:63:64:1e:35:a0:05:08:60:88:69:55:10:ea:
         37:69:71:33:be:45:a4:1f:b5:47:0f:cb:1c:ba:3b:36:6e:e7:
         f3:11:7a:00:fa:33:bd:88:bd:bd:4b:48:b0:86:bc:cd:e0:b5:
         01:32:0b:5d:73:bc:4c:b9:f1:6c:df:9c:6e:ee:be:05:bc:dc:
         5a:78:bc:00:77:c8:f4:42:10:9c:f6:97:ba:8a:d4:66:c8:cb:
         de:32:a0:99:0e:80:38:26:f8:7e:ea:93:47:9a:ba:d1:62:29:
         15:5d:85:fc:3f:9c:36:5e:70:44:c7:47:4f:4f:7e:6e:96:09:
         0a:7c:3e:00:62:19:53:9e:71:5a:5c:c0:00:e1:7a:e1:ba:a4:
         b1:bf:92:7d:ee:bf:c8:e9:00:d5:f7:84:68:29:34:ac:de:43:
         6d:ba:78:e7:83:ef:80:01:40:d6:22:ae:cf:c8:9e:10:a7:04:
         93:80:c1:4d:ca:27:e7:e4:20:37:5b:77:ec:99:aa:a1:aa:6f:
         ac:a5:20:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:31:15 2026 by rpki-client