Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3138312e3131382e3230382e302f32302d3234203d3e20323632313936.roa
File:                     3138312e3131382e3230382e302f32302d3234203d3e20323632313936.roa (raw, json)
Hash identifier:          pOD++tiBCFgPVVy829ujO1Bz794e1CwVwxKpHQkuvbg=
Subject key identifier:   82:F4:2D:7D:30:DE:31:D7:38:4E:FE:55:18:1E:8D:47:B8:05:D5:65
Certificate issuer:       /CN=236265F485589146D372FF70F0BD7364753EFBD3
Certificate serial:       6686CF83E15176C84DB1B97191363350697C20BA
Authority key identifier: 23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3138312e3131382e3230382e302f32302d3234203d3e20323632313936.roa
Signing time:             Wed 05 Nov 2025 19:51:45 +0000
ROA not before:           Wed 05 Nov 2025 19:46:45 +0000
ROA not after:            Wed 04 Nov 2026 19:51:45 +0000
asID:                     262196
IP address blocks:        181.118.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:86:cf:83:e1:51:76:c8:4d:b1:b9:71:91:36:33:50:69:7c:20:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=236265F485589146D372FF70F0BD7364753EFBD3
        Validity
            Not Before: Nov  5 19:46:45 2025 GMT
            Not After : Nov  4 19:51:45 2026 GMT
        Subject: CN=82F42D7D30DE31D7384EFE55181E8D47B805D565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:0e:e6:6f:6c:7b:31:10:81:be:c5:8b:8d:
                    3f:6d:c4:7c:66:ae:61:23:85:b4:53:7e:d7:09:84:
                    93:11:a7:a7:0c:ed:45:70:ab:66:5b:31:ae:ea:47:
                    17:49:27:40:06:2f:e6:4f:45:5f:d9:a7:90:26:1c:
                    21:a8:ad:1f:3b:ba:4a:55:14:03:f1:c1:ed:c6:75:
                    4e:3d:2b:79:4d:c1:f9:66:0a:ad:74:31:24:19:f5:
                    cb:ee:fb:b4:b5:03:af:59:6f:36:41:51:4d:14:c6:
                    34:4f:ff:e6:03:0f:fa:89:db:40:82:91:9b:b1:b4:
                    ad:17:6a:4d:ef:30:fc:6e:75:40:31:45:94:d0:51:
                    0e:a5:e8:5a:12:cc:b4:f6:f6:a8:cc:99:f8:75:02:
                    1e:36:dd:6c:bb:39:e9:85:85:bd:f5:6e:a2:4c:4a:
                    c4:d6:bb:36:43:af:d9:18:fc:65:0d:0b:0a:34:a9:
                    f1:8a:8c:f2:b2:39:43:79:0c:62:46:b1:13:61:14:
                    aa:76:11:4c:97:cd:0d:63:08:2f:de:b2:d8:98:c6:
                    5e:f6:8a:91:2f:1c:a6:94:44:77:70:49:cc:a3:02:
                    b9:57:08:31:1f:bf:00:23:6f:20:ec:2a:15:f1:ff:
                    de:20:08:07:e1:7a:15:8b:48:b0:41:20:bc:5a:aa:
                    86:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F4:2D:7D:30:DE:31:D7:38:4E:FE:55:18:1E:8D:47:B8:05:D5:65
            X509v3 Authority Key Identifier:
                keyid:23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3138312e3131382e3230382e302f32302d3234203d3e20323632313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9d:2d:6e:4f:eb:70:86:83:a3:20:0b:24:22:ff:4a:c2:c6:55:
         d0:bc:17:9f:99:5c:80:82:64:1f:28:96:4e:c2:ce:11:cf:15:
         32:94:87:98:47:b1:98:c2:a7:3d:e1:55:d0:cd:af:3f:2d:d1:
         a6:cb:a0:f6:6a:c0:65:5f:0c:a9:ab:02:c9:00:16:1d:b9:9d:
         19:1d:b0:34:2d:f1:36:e6:4f:18:5b:79:24:ce:5a:51:08:a2:
         08:73:99:ca:f4:4f:1c:1b:60:b1:89:90:2e:2c:c5:3c:6e:4b:
         9d:eb:c7:19:bb:41:05:71:d6:81:da:de:6a:01:33:c2:34:56:
         b4:a7:71:d2:04:78:a7:64:df:dd:f9:f8:46:2f:53:21:59:be:
         a8:31:25:30:77:60:c2:63:fd:71:e8:c4:50:a6:70:5a:b9:2c:
         30:1c:fb:ed:09:6f:f2:c5:97:9d:86:60:bb:9a:a6:95:7f:b8:
         51:8c:36:ad:e8:f0:1f:28:ad:ca:19:a7:cc:0c:db:fe:fe:bc:
         7a:f6:f3:68:96:f3:e0:8d:d6:84:cb:bd:c2:ab:ea:6a:fc:11:
         a6:88:fe:27:89:a8:50:a5:b9:5b:66:4f:41:37:a2:d9:54:c0:
         95:89:bd:d8:8c:a5:2a:69:3e:ea:d8:5d:f1:89:84:52:f0:35:
         75:7d:f3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:43:53 2025 by rpki-client