Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3138312e3233332e34382e302f32322d3234203d3e203233303331.roa
File:                     3138312e3233332e34382e302f32322d3234203d3e203233303331.roa (raw, json)
Hash identifier:          M46eYlU5cmMgHh9hzGwks34ed/uImizhAIYoLI528Qo=
Subject key identifier:   F0:97:85:D3:5D:BF:B1:D9:EA:AC:25:7F:30:3F:3A:98:2F:4B:45:55
Certificate issuer:       /CN=906C41A68E3475138AF53A5B55627EDE35432068
Certificate serial:       1AF07D33B1FA85A3BDF73C17EB53FD60C59EC8D8
Authority key identifier: 90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3138312e3233332e34382e302f32322d3234203d3e203233303331.roa
Signing time:             Tue 06 Jan 2026 19:00:38 +0000
ROA not before:           Tue 06 Jan 2026 18:55:38 +0000
ROA not after:            Tue 05 Jan 2027 19:00:38 +0000
asID:                     23031
IP address blocks:        181.233.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl
                          rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f0:7d:33:b1:fa:85:a3:bd:f7:3c:17:eb:53:fd:60:c5:9e:c8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906C41A68E3475138AF53A5B55627EDE35432068
        Validity
            Not Before: Jan  6 18:55:38 2026 GMT
            Not After : Jan  5 19:00:38 2027 GMT
        Subject: CN=F09785D35DBFB1D9EAAC257F303F3A982F4B4555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3a:e9:56:9c:ac:35:0e:c8:f5:99:01:35:1b:
                    74:d5:03:51:60:8e:a3:fb:c0:19:f8:b5:2b:cf:72:
                    73:ca:f9:cb:e6:15:98:ff:2c:de:4c:94:07:7a:5f:
                    0e:db:b1:50:14:c3:17:eb:24:ee:04:3c:52:e6:80:
                    89:64:e9:85:52:b2:ac:5a:c0:b4:0c:92:d5:60:ed:
                    d0:03:5c:01:5d:7c:0b:2f:5b:c3:d4:56:ca:d2:cd:
                    4d:d7:36:29:b5:cb:be:f4:a0:17:b6:03:34:57:0e:
                    53:9b:6e:2d:ca:bc:d6:4a:cb:ab:09:a2:20:1b:33:
                    fb:3c:67:2b:3c:ea:5a:60:80:e3:2c:89:d2:4d:9d:
                    d2:52:e6:5b:77:bc:85:46:73:0d:f0:ce:6e:9e:89:
                    eb:22:e0:de:4c:12:cd:1a:ce:cf:2f:8f:14:d7:30:
                    ad:04:1c:e4:58:eb:89:5d:98:46:f8:ca:b0:5d:7c:
                    7b:9e:ee:e4:49:dc:52:c3:7e:e5:13:2e:e4:f2:59:
                    7c:19:1b:ba:8d:ac:ea:cb:9e:e3:79:92:ee:2b:ec:
                    d5:55:8c:79:7a:32:ff:a3:e8:ac:36:fa:90:67:c6:
                    a2:e8:4c:be:c4:2e:ca:f4:aa:e5:8c:d6:d7:9a:1c:
                    e8:81:df:23:50:56:76:e8:3f:cd:f9:e9:8d:5b:c5:
                    b2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:97:85:D3:5D:BF:B1:D9:EA:AC:25:7F:30:3F:3A:98:2F:4B:45:55
            X509v3 Authority Key Identifier:
                keyid:90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3138312e3233332e34382e302f32322d3234203d3e203233303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:b7:1e:f7:bf:d7:2d:e1:47:fb:cc:cf:d7:d9:a9:17:92:1c:
         33:c3:53:3d:e8:7b:7d:ec:85:26:4e:3c:c1:9a:3b:94:73:bd:
         f1:58:17:34:e2:91:8c:86:ff:50:51:34:cb:97:44:43:1d:7d:
         db:08:ab:b2:31:01:6f:6c:a6:93:82:91:33:0f:25:9a:12:12:
         a2:9c:93:b6:b9:4b:f9:a2:1e:8c:2b:ac:51:00:33:c7:f3:3a:
         48:3b:ca:83:16:7b:48:b2:2a:70:e6:a8:8d:9b:33:9e:3a:5b:
         dd:5a:66:c2:16:a4:14:cb:42:41:2c:54:9c:61:ee:48:94:88:
         10:aa:d7:71:7b:8d:50:aa:0b:8a:1b:77:04:a3:f8:dd:cb:87:
         3b:36:23:46:8a:59:9f:9c:0b:29:4d:75:3d:66:5f:07:0e:66:
         01:1c:ec:e2:44:6f:90:ec:e2:af:91:bf:99:0a:63:c2:e2:aa:
         1f:b4:b4:ab:05:82:0e:20:4f:b6:56:95:36:be:9a:c6:77:3d:
         35:8f:7f:2f:53:40:a1:9c:17:40:b4:e6:fe:3e:76:fc:f4:48:
         c6:79:61:56:f0:a3:f4:bf:bd:ad:b0:aa:ea:e0:fd:8b:21:9e:
         7f:9c:c0:71:75:7f:b7:87:13:03:ac:c5:88:de:33:de:07:07:
         57:71:b1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:50:49 2026 by rpki-client