Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58F85986DA8CDF7ECB900C687ED2D78B60D557263C06CEF787BE89EE732DFA96/0/3138312e3232342e3137332e302f32342d3234203d3e20323633323338.roa
File:                     3138312e3232342e3137332e302f32342d3234203d3e20323633323338.roa (raw, json)
Hash identifier:          kAzSyIzI+FkqRgL9T75NGJ3R/613e4kkIAtXgOi//n4=
Subject key identifier:   EE:58:88:C5:D3:5D:78:43:3A:10:E6:45:D5:41:30:14:AD:54:AE:75
Certificate issuer:       /CN=59733F5876DFD9F28DCAA69B8752B844D0C39173
Certificate serial:       704A4CF771B1A67BC88A1880CA62402D9B6B429C
Authority key identifier: 59:73:3F:58:76:DF:D9:F2:8D:CA:A6:9B:87:52:B8:44:D0:C3:91:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59733F5876DFD9F28DCAA69B8752B844D0C39173.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58F85986DA8CDF7ECB900C687ED2D78B60D557263C06CEF787BE89EE732DFA96/0/3138312e3232342e3137332e302f32342d3234203d3e20323633323338.roa
Signing time:             Mon 09 Feb 2026 16:29:46 +0000
ROA not before:           Mon 09 Feb 2026 16:24:46 +0000
ROA not after:            Mon 08 Feb 2027 16:29:46 +0000
asID:                     263238
IP address blocks:        181.224.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58F85986DA8CDF7ECB900C687ED2D78B60D557263C06CEF787BE89EE732DFA96/0/59733F5876DFD9F28DCAA69B8752B844D0C39173.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58F85986DA8CDF7ECB900C687ED2D78B60D557263C06CEF787BE89EE732DFA96/0/59733F5876DFD9F28DCAA69B8752B844D0C39173.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59733F5876DFD9F28DCAA69B8752B844D0C39173.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 17:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4a:4c:f7:71:b1:a6:7b:c8:8a:18:80:ca:62:40:2d:9b:6b:42:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59733F5876DFD9F28DCAA69B8752B844D0C39173
        Validity
            Not Before: Feb  9 16:24:46 2026 GMT
            Not After : Feb  8 16:29:46 2027 GMT
        Subject: CN=EE5888C5D35D78433A10E645D5413014AD54AE75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ed:9a:0b:7e:28:2b:b4:b7:c3:a9:1f:fb:31:
                    09:74:a9:34:45:84:84:5b:2b:95:5b:b9:d0:c7:9f:
                    0c:26:81:fe:36:c2:7a:be:87:0b:e6:cd:59:f7:51:
                    2d:34:0c:ff:f2:13:80:21:17:f2:18:b9:43:aa:68:
                    ff:ba:dd:62:ac:2e:ec:f1:f3:e2:25:81:fe:b9:3c:
                    c6:3a:80:e6:92:7f:cc:dc:9d:7a:f1:01:02:46:59:
                    6f:44:d5:a8:58:6f:7c:4c:60:33:d6:a4:92:d8:e8:
                    22:c7:3f:33:e9:88:92:cb:b2:b7:85:62:1b:5f:66:
                    c2:07:a2:4a:a4:f1:43:a6:64:f0:11:46:1d:bc:f5:
                    50:a4:50:f8:82:3f:93:92:2a:f5:03:a5:7a:01:77:
                    2c:6a:3b:a7:a0:63:4a:f7:e3:65:09:91:e6:9c:e7:
                    d0:8d:e8:ed:73:57:37:2b:e1:c0:dd:28:bf:5c:19:
                    61:1b:68:16:46:8c:8e:0f:50:f2:a7:df:93:15:d8:
                    f2:8f:08:50:3f:52:e0:1a:fc:0d:65:ba:7f:af:ea:
                    1c:aa:b4:0f:f9:5b:8d:e3:07:a2:71:40:d5:78:b7:
                    75:78:be:d6:0e:5d:4e:ef:6a:a6:59:60:61:96:e6:
                    0f:7c:d5:8a:f4:83:23:78:6e:dc:5e:e8:6f:41:59:
                    11:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:58:88:C5:D3:5D:78:43:3A:10:E6:45:D5:41:30:14:AD:54:AE:75
            X509v3 Authority Key Identifier:
                keyid:59:73:3F:58:76:DF:D9:F2:8D:CA:A6:9B:87:52:B8:44:D0:C3:91:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58F85986DA8CDF7ECB900C687ED2D78B60D557263C06CEF787BE89EE732DFA96/0/59733F5876DFD9F28DCAA69B8752B844D0C39173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59733F5876DFD9F28DCAA69B8752B844D0C39173.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58F85986DA8CDF7ECB900C687ED2D78B60D557263C06CEF787BE89EE732DFA96/0/3138312e3232342e3137332e302f32342d3234203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:3c:81:c3:5e:ae:37:77:c0:a5:db:c8:81:da:82:1e:c9:37:
         f2:84:20:2e:52:80:75:e1:8e:bd:78:9b:06:cf:dc:ba:91:10:
         7f:fd:5e:e7:fd:83:5d:21:14:c7:35:f8:7c:20:39:65:95:9b:
         67:65:02:cc:ee:a3:e9:04:0a:1f:90:06:39:f8:76:45:64:7c:
         23:50:6e:14:de:35:c5:8a:2d:6f:f6:6f:89:1c:15:40:01:20:
         be:a7:35:c6:71:83:fb:d0:a7:cb:d6:53:00:bf:f5:f2:55:6d:
         13:ae:74:8d:85:f4:c8:47:c9:1a:ab:3c:0d:10:94:ea:aa:fa:
         18:5b:6a:a3:6f:37:24:5f:5c:d3:c2:14:cc:cf:d3:ee:1e:af:
         3e:43:71:33:f4:e9:cf:0f:39:07:c9:ad:bf:a2:87:0c:38:63:
         88:db:0f:bc:9c:d0:10:dd:2e:e5:96:0b:bb:95:b1:43:5b:ec:
         ea:d7:61:e7:c7:f9:1f:d5:60:73:39:79:2b:d2:6d:fb:7b:15:
         f0:75:8f:3a:a4:e0:68:34:81:02:c1:2f:ed:28:b2:ba:5c:0a:
         32:6d:f7:bb:f5:65:3f:2d:bc:7f:f1:7d:13:6a:a9:92:2a:c0:
         7f:bb:bb:84:93:d0:5e:a5:b9:a8:8c:2b:ec:21:24:03:e1:86:
         6f:47:7d:2f
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUcEpM93GxpnvIihiAymJALZtrQpwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk3MzNGNTg3NkRGRDlGMjhEQ0FBNjlCODc1MkI4NDRE
MEMzOTE3MzAeFw0yNjAyMDkxNjI0NDZaFw0yNzAyMDgxNjI5NDZaMDMxMTAvBgNV
BAMTKEVFNTg4OEM1RDM1RDc4NDMzQTEwRTY0NUQ1NDEzMDE0QUQ1NEFFNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl7ZoLfigrtLfDqR/7MQl0qTRF
hIRbK5VbudDHnwwmgf42wnq+hwvmzVn3US00DP/yE4AhF/IYuUOqaP+63WKsLuzx
8+Ilgf65PMY6gOaSf8zcnXrxAQJGWW9E1ahYb3xMYDPWpJLY6CLHPzPpiJLLsreF
YhtfZsIHokqk8UOmZPARRh289VCkUPiCP5OSKvUDpXoBdyxqO6egY0r342UJkeac
59CN6O1zVzcr4cDdKL9cGWEbaBZGjI4PUPKn35MV2PKPCFA/UuAa/A1lun+v6hyq
tA/5W43jB6JxQNV4t3V4vtYOXU7vaqZZYGGW5g981Yr0gyN4btxe6G9BWRGHAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU7liIxdNdeEM6EOZF1UEwFK1UrnUwHwYDVR0j
BBgwFoAUWXM/WHbf2fKNyqabh1K4RNDDkXMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81OEY4NTk4NkRBOENERjdFQ0I5MDBDNjg3RUQyRDc4QjYw
RDU1NzI2M0MwNkNFRjc4N0JFODlFRTczMkRGQTk2LzAvNTk3MzNGNTg3NkRGRDlG
MjhEQ0FBNjlCODc1MkI4NDREMEMzOTE3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OTczM0Y1ODc2REZEOUYyOERD
QUE2OUI4NzUyQjg0NEQwQzM5MTczLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNThGODU5ODZEQThDREY3RUNCOTAwQzY4N0VEMkQ3OEI2MEQ1NTcyNjND
MDZDRUY3ODdCRTg5RUU3MzJERkE5Ni8wLzMxMzgzMTJlMzIzMjM0MmUzMTM3MzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzMjMzMzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC1
4K0wDQYJKoZIhvcNAQELBQADggEBAFg8gcNerjd3wKXbyIHagh7JN/KEIC5SgHXh
jr14mwbP3LqREH/9Xuf9g10hFMc1+HwgOWWVm2dlAszuo+kECh+QBjn4dkVkfCNQ
bhTeNcWKLW/2b4kcFUABIL6nNcZxg/vQp8vWUwC/9fJVbROudI2F9MhHyRqrPA0Q
lOqq+hhbaqNvNyRfXNPCFMzP0+4erz5DcTP06c8POQfJrb+ihww4Y4jbD7yc0BDd
LuWWC7uVsUNb7OrXYefH+R/VYHM5eSvSbft7FfB1jzqk4Gg0gQLBL+0osrpcCjJt
97v1ZT8tvH/xfRNqqZIqwH+7u4ST0F6luaiMK+whJAPhhm9HfS8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:30:47 2026 by rpki-client