Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/3138312e3232342e3136302e302f32322d3234203d3e20323734383931.roa
File:                     3138312e3232342e3136302e302f32322d3234203d3e20323734383931.roa (raw, json)
Hash identifier:          hOwKRnxi1KF8YidMe2+MAk5kx+TOUb7Zv8pOyPf61ZE=
Subject key identifier:   C8:BC:C6:F0:18:89:16:7B:1F:E0:E1:F0:FB:19:91:E1:72:EA:90:3C
Certificate issuer:       /CN=B80E10741F3FBFB387E3DBB6D9EBC098E757799D
Certificate serial:       39CDD715577F5C06CEE0BDF6B42B6E04350532DC
Authority key identifier: B8:0E:10:74:1F:3F:BF:B3:87:E3:DB:B6:D9:EB:C0:98:E7:57:79:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B80E10741F3FBFB387E3DBB6D9EBC098E757799D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/3138312e3232342e3136302e302f32322d3234203d3e20323734383931.roa
Signing time:             Sun 31 May 2026 04:05:00 +0000
ROA not before:           Sun 31 May 2026 04:00:00 +0000
ROA not after:            Sun 30 May 2027 04:05:00 +0000
asID:                     274891
IP address blocks:        181.224.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/B80E10741F3FBFB387E3DBB6D9EBC098E757799D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/B80E10741F3FBFB387E3DBB6D9EBC098E757799D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B80E10741F3FBFB387E3DBB6D9EBC098E757799D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:cd:d7:15:57:7f:5c:06:ce:e0:bd:f6:b4:2b:6e:04:35:05:32:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B80E10741F3FBFB387E3DBB6D9EBC098E757799D
        Validity
            Not Before: May 31 04:00:00 2026 GMT
            Not After : May 30 04:05:00 2027 GMT
        Subject: CN=C8BCC6F01889167B1FE0E1F0FB1991E172EA903C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:45:a5:06:f6:32:41:75:b1:41:7a:14:3e:6f:
                    cc:d4:bb:b8:64:b6:ad:8d:99:94:bb:cb:b5:cf:45:
                    5e:f0:09:25:ff:cc:dc:a3:c3:6c:56:19:c5:4f:5a:
                    1f:f2:07:ef:b8:2d:2b:e0:21:6e:ed:fe:17:53:c8:
                    c8:d9:6e:f0:4b:04:46:ac:fd:90:3a:97:55:c3:75:
                    5a:10:1f:e6:9e:50:95:63:99:47:5f:20:6d:e7:8f:
                    aa:c4:9c:ba:f0:18:ab:6c:e8:24:87:c4:f3:d3:a3:
                    4c:1d:7a:af:73:d2:f6:45:75:88:02:ba:f1:ed:2c:
                    01:c0:ec:ae:21:42:9a:8a:9d:ef:ff:c6:9b:37:f6:
                    77:21:19:41:9b:f9:c3:9c:2d:0f:54:0f:f8:8f:5d:
                    10:c5:e4:3e:ab:be:a4:26:77:37:7f:b2:c2:ad:c3:
                    d2:61:b0:9a:6e:3b:af:d8:39:c5:12:c9:ee:25:bc:
                    67:cd:27:d0:f4:9f:72:ee:ab:e1:a7:17:98:37:48:
                    0f:86:c1:8e:94:46:6a:42:80:50:06:f2:f3:e8:76:
                    ec:46:d6:28:b1:1e:42:9e:60:50:dd:03:1e:4c:7a:
                    ac:7d:0b:6a:d8:1d:74:83:65:1a:79:b5:a3:2d:b5:
                    3a:e6:5a:74:4c:92:c1:c2:3a:58:02:1b:9d:9e:fb:
                    e8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BC:C6:F0:18:89:16:7B:1F:E0:E1:F0:FB:19:91:E1:72:EA:90:3C
            X509v3 Authority Key Identifier:
                keyid:B8:0E:10:74:1F:3F:BF:B3:87:E3:DB:B6:D9:EB:C0:98:E7:57:79:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/B80E10741F3FBFB387E3DBB6D9EBC098E757799D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B80E10741F3FBFB387E3DBB6D9EBC098E757799D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/3138312e3232342e3136302e302f32322d3234203d3e20323734383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:7a:26:20:83:d0:7e:b3:eb:94:37:56:e2:4d:66:52:d7:9a:
         89:09:b7:a6:81:79:43:b0:46:d2:d0:a2:20:06:d8:e6:2d:84:
         ee:97:e9:db:02:ea:d4:2d:c8:72:2e:49:cd:b0:56:4d:aa:8e:
         41:4b:1c:71:24:50:f7:86:0d:bd:0a:d4:70:29:18:46:29:ce:
         1f:6a:5e:8a:7c:e0:cc:f9:15:39:07:44:e9:2c:c1:ca:15:e9:
         8f:5f:23:16:db:0f:e1:72:33:db:13:8f:68:ee:ea:68:c1:b3:
         ae:9e:0f:4b:57:6f:85:c0:8c:b7:dd:43:54:69:6f:49:76:47:
         dc:ac:06:19:58:9c:e3:2e:a4:39:6c:83:29:54:c0:98:d0:6a:
         19:ae:5f:40:68:81:5c:ca:bf:ca:cf:73:01:ca:6e:6d:19:26:
         07:bb:12:7a:1f:8d:ca:a5:16:81:d6:98:91:33:82:8c:78:f4:
         7d:ae:70:00:ec:ad:15:34:3f:1d:5b:6e:0f:71:6b:80:2c:cd:
         00:78:b2:05:a4:c5:f9:49:a8:7d:a8:86:d0:f0:68:9a:a2:1c:
         83:d6:81:9e:bf:8c:2a:10:ac:18:92:51:c7:d4:5f:c1:df:08:
         37:a7:58:d1:88:56:ef:64:68:e4:38:a7:b1:8d:34:d2:7c:53:
         cf:92:33:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:07:44 2026 by rpki-client