Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3234342e302f32322d3234203d3e203237383935.roa
File:                     3138312e39342e3234342e302f32322d3234203d3e203237383935.roa (raw, json)
Hash identifier:          L5eKijLphHRSejnTexl5OQs3+/heG4L6u5fz02FKaDU=
Subject key identifier:   A7:8D:40:37:62:9C:DD:03:05:D5:10:93:48:EE:D1:51:5E:02:79:2D
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       3D6FF1FD130FE4D8D3051E0F96AF55B431D40631
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3234342e302f32322d3234203d3e203237383935.roa
Signing time:             Tue 06 Jan 2026 19:21:38 +0000
ROA not before:           Tue 06 Jan 2026 19:16:38 +0000
ROA not after:            Tue 05 Jan 2027 19:21:38 +0000
asID:                     27895
IP address blocks:        181.94.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:6f:f1:fd:13:0f:e4:d8:d3:05:1e:0f:96:af:55:b4:31:d4:06:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Jan  6 19:16:38 2026 GMT
            Not After : Jan  5 19:21:38 2027 GMT
        Subject: CN=A78D4037629CDD0305D5109348EED1515E02792D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:72:69:20:56:73:f8:c9:ef:0c:be:f5:42:cc:
                    4e:00:a5:fc:79:07:4c:0e:09:27:90:ec:6b:77:da:
                    a2:7b:a4:f3:2e:63:15:65:a6:a3:55:fd:d5:d7:ce:
                    6c:86:60:78:73:68:fd:5b:86:a1:a1:9c:42:af:64:
                    73:3c:ae:ea:4e:22:6f:4f:cf:ce:4b:09:be:8c:62:
                    af:6d:41:aa:2a:aa:b1:b3:10:a2:fb:3e:e2:00:cc:
                    a0:a8:c8:2b:69:e9:e2:08:a5:99:bc:7f:b8:e5:ec:
                    ef:ac:be:55:5d:99:ea:78:53:70:d2:46:31:4f:48:
                    69:00:f5:90:b3:aa:b9:64:fa:0f:f0:02:7a:a6:9e:
                    53:c6:38:35:34:fd:4b:88:fc:33:17:74:06:af:11:
                    d0:61:8f:a8:38:ad:73:54:7d:ab:9c:3f:f4:f0:81:
                    71:44:2f:ec:c8:eb:60:f4:f1:f8:9e:62:8b:ec:df:
                    3b:33:92:14:1b:61:82:c6:b8:3e:d8:24:56:16:8a:
                    6b:dc:5a:07:1e:1c:71:27:df:6f:a5:31:23:2e:ff:
                    c6:1c:b3:e3:ac:82:06:25:5d:9a:ee:0c:f1:4c:bc:
                    ea:30:b5:1b:48:35:2b:d7:fe:63:d2:4d:b7:ea:4d:
                    37:54:9e:bc:f1:a4:42:6d:cb:04:1a:a3:93:0e:79:
                    b2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8D:40:37:62:9C:DD:03:05:D5:10:93:48:EE:D1:51:5E:02:79:2D
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3234342e302f32322d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.94.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:83:fe:bd:35:dd:df:30:b7:63:3c:c9:bf:ba:5a:dc:50:2b:
         2f:f8:4d:8f:fe:f2:c9:7f:e5:29:cf:60:28:a4:c4:79:8e:3a:
         25:fa:0c:42:3d:71:0a:72:98:5b:fd:26:8c:0a:11:f9:ea:82:
         c6:cb:68:a7:07:dc:c1:c1:15:5c:62:b7:9d:c8:19:42:6c:18:
         ad:8c:6f:21:fe:a4:ff:b3:2b:95:28:7d:13:af:c6:9b:cc:5f:
         fa:97:af:36:57:de:92:b9:ff:01:30:a2:a0:6f:6c:ad:41:5c:
         8d:7f:81:ee:fe:49:25:b2:47:8f:14:f3:ac:05:3f:9f:56:05:
         47:ae:8d:77:0a:a5:0d:f1:3f:0b:68:ee:32:fe:9b:70:58:25:
         b0:0d:ff:2b:35:48:47:cb:b3:8e:30:20:28:7a:12:85:d4:62:
         6f:d2:59:45:28:f0:0a:b9:03:ef:46:a4:60:c3:c8:dc:b9:84:
         3a:0e:4b:c9:72:a0:46:76:00:47:61:c7:0a:09:17:22:52:5c:
         2a:7d:be:dd:4d:b0:4e:68:46:ff:4c:e4:eb:4c:09:45:13:96:
         37:09:0a:1c:1d:21:fe:0e:17:1e:81:31:78:1d:5b:11:76:a3:
         56:8d:87:45:c8:79:09:30:7a:77:be:19:1c:81:be:49:b8:ff:
         f9:d0:2a:b0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPW/x/RMP5NjTBR4Plq9VtDHUBjEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZDQkFBMDgwRTIxOUM3M0Y5QkJGNTUyRDgxQjY1QzA1
MDYzRDQyNzAeFw0yNjAxMDYxOTE2MzhaFw0yNzAxMDUxOTIxMzhaMDMxMTAvBgNV
BAMTKEE3OEQ0MDM3NjI5Q0REMDMwNUQ1MTA5MzQ4RUVEMTUxNUUwMjc5MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDacmkgVnP4ye8MvvVCzE4Apfx5
B0wOCSeQ7Gt32qJ7pPMuYxVlpqNV/dXXzmyGYHhzaP1bhqGhnEKvZHM8rupOIm9P
z85LCb6MYq9tQaoqqrGzEKL7PuIAzKCoyCtp6eIIpZm8f7jl7O+svlVdmep4U3DS
RjFPSGkA9ZCzqrlk+g/wAnqmnlPGODU0/UuI/DMXdAavEdBhj6g4rXNUfaucP/Tw
gXFEL+zI62D08fieYovs3zszkhQbYYLGuD7YJFYWimvcWgceHHEn32+lMSMu/8Yc
s+OsggYlXZruDPFMvOowtRtINSvX/mPSTbfqTTdUnrzxpEJtywQao5MOebI5AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUp41AN2Kc3QMF1RCTSO7RUV4CeS0wHwYDVR0j
BBgwFoAUL8uqCA4hnHP5u/VS2BtlwFBj1CcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMEJCMDQwMDQ1M0I1RDE3RkM1Mzc3RDFDMTdDMzhFM0FB
NTgwMjQ2RjAwNzM4MDIyMzY5RDQ4MDA3MTYyREQyLzAvMkZDQkFBMDgwRTIxOUM3
M0Y5QkJGNTUyRDgxQjY1QzA1MDYzRDQyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRkNCQUEwODBFMjE5QzczRjlC
QkY1NTJEODFCNjVDMDUwNjNENDI3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTBCQjA0MDA0NTNCNUQxN0ZDNTM3N0QxQzE3QzM4RTNBQTU4MDI0NkYw
MDczODAyMjM2OUQ0ODAwNzE2MkREMi8wLzMxMzgzMTJlMzkzNDJlMzIzNDM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzM4MzkzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArVe9DAN
BgkqhkiG9w0BAQsFAAOCAQEAGoP+vTXd3zC3YzzJv7pa3FArL/hNj/7yyX/lKc9g
KKTEeY46JfoMQj1xCnKYW/0mjAoR+eqCxstopwfcwcEVXGK3ncgZQmwYrYxvIf6k
/7MrlSh9E6/Gm8xf+pevNlfekrn/ATCioG9srUFcjX+B7v5JJbJHjxTzrAU/n1YF
R66NdwqlDfE/C2juMv6bcFglsA3/KzVIR8uzjjAgKHoShdRib9JZRSjwCrkD70ak
YMPI3LmEOg5LyXKgRnYAR2HHCgkXIlJcKn2+3U2wTmhG/0zk60wJRROWNwkKHB0h
/g4XHoExeB1bEXajVo2HRch5CTB6d74ZHIG+Sbj/+dAqsA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:49:13 2026 by rpki-client