Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3231302e302f32342d3234203d3e203237383935.roa
File:                     3138312e39342e3231302e302f32342d3234203d3e203237383935.roa (raw, json)
Hash identifier:          /PiMwuJqCsEG48rlNivAT9GbMDbgvYMfppN24zswSJ0=
Subject key identifier:   F6:A7:06:60:54:4D:F5:59:47:D2:71:8D:6F:E4:C1:82:28:FA:A6:24
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       31547FEC092D0C6B0F1521FC39F961B20E14D7A7
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3231302e302f32342d3234203d3e203237383935.roa
Signing time:             Tue 06 Jan 2026 19:21:37 +0000
ROA not before:           Tue 06 Jan 2026 19:16:37 +0000
ROA not after:            Tue 05 Jan 2027 19:21:37 +0000
asID:                     27895
IP address blocks:        181.94.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:54:7f:ec:09:2d:0c:6b:0f:15:21:fc:39:f9:61:b2:0e:14:d7:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Jan  6 19:16:37 2026 GMT
            Not After : Jan  5 19:21:37 2027 GMT
        Subject: CN=F6A70660544DF55947D2718D6FE4C18228FAA624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3e:3e:67:af:21:0e:94:9e:e1:b9:c4:97:0d:
                    8d:36:1c:f6:36:b5:99:a4:87:6a:50:da:76:3f:7a:
                    45:79:7c:3a:31:47:80:92:12:ca:96:79:0a:65:cd:
                    61:01:db:7b:01:be:05:ea:29:b9:fa:98:00:13:8a:
                    68:aa:ac:e9:53:18:d9:3d:8d:92:e9:3f:54:20:4a:
                    4d:c3:44:70:3e:3a:6a:54:68:53:d9:d2:8f:4e:93:
                    47:98:90:75:83:78:ed:cc:4e:88:56:00:75:32:e1:
                    8a:94:6a:b5:36:53:a7:ad:3b:68:bd:83:64:35:ab:
                    19:65:9a:b6:cb:d1:fc:4c:72:fa:26:2d:d1:c2:2b:
                    59:68:f7:ae:d9:df:a7:7f:a1:61:6b:5c:d9:eb:43:
                    30:a3:56:7f:21:1d:c0:5f:33:33:5b:28:5e:50:a2:
                    71:31:05:d2:5f:d7:a0:e6:fa:7c:f4:55:10:f0:da:
                    0a:02:38:43:60:d5:a4:ad:3f:8f:98:06:b6:a0:0e:
                    ed:d9:ad:5f:9d:49:be:48:ca:97:c3:08:4b:38:73:
                    be:b8:e0:9e:63:68:2c:c3:57:1d:69:27:8b:d2:57:
                    48:98:89:d1:20:f3:d6:e7:d2:73:51:40:a0:2c:5d:
                    94:3b:43:a0:4b:f5:cc:28:45:fe:ef:51:8e:ba:05:
                    95:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A7:06:60:54:4D:F5:59:47:D2:71:8D:6F:E4:C1:82:28:FA:A6:24
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3231302e302f32342d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.94.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:fc:e5:d2:2d:ac:9c:6e:bb:24:ad:82:4c:09:1c:52:e1:9a:
         90:ae:eb:3a:cf:86:22:96:fe:da:2a:d0:9e:d6:c0:a9:ba:7f:
         e2:59:41:c0:22:6d:0b:cb:91:97:e7:5f:be:e8:0d:b9:30:2d:
         94:1d:fc:26:da:72:56:ca:f1:5f:23:6b:36:0c:99:80:e6:85:
         c3:c7:fd:fe:b6:ea:dc:0f:e2:66:d2:84:49:93:f2:73:1d:cd:
         68:e6:3a:d4:f6:63:88:04:f1:ba:1c:6f:ec:8d:8b:d6:38:6a:
         3a:11:31:a1:a4:bd:fd:d3:2c:92:ee:b6:c7:84:07:09:51:cc:
         00:27:46:db:9b:40:e6:aa:af:14:e3:d3:b3:24:08:21:2e:23:
         91:ea:2d:00:f9:1f:61:86:8b:db:15:6c:dd:09:42:9d:5f:cb:
         9f:b2:74:f5:74:75:8e:ba:2a:e4:4f:ec:fc:65:d7:4c:b1:dc:
         22:e6:10:9c:aa:b5:aa:e4:82:94:c4:10:ef:b4:de:4b:10:ff:
         96:84:23:2a:13:95:08:dc:90:5d:82:43:21:94:35:d9:05:98:
         fa:21:83:1e:83:b2:85:f0:95:f4:15:88:b3:d1:d1:f8:37:e2:
         53:99:b1:47:d9:8a:5a:58:4e:f7:9b:c0:eb:5d:c7:2f:a8:b7:
         63:e3:5e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:01:56 2026 by rpki-client