Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3138312e3139392e3231322e302f32342d3234203d3e203430333131.roa
File:                     3138312e3139392e3231322e302f32342d3234203d3e203430333131.roa (raw, json)
Hash identifier:          RhQbyum2ZxP55HeVKyGzuRiwHekcdEbacMdOeoLtQIA=
Subject key identifier:   F3:6F:26:EA:7E:DA:BA:8D:73:AF:0F:83:6E:93:B1:A6:FE:19:27:A3
Certificate issuer:       /CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
Certificate serial:       0F4E2B4A8EE9DD6E4FCCD0FDDFE80F939A7B2983
Authority key identifier: B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3138312e3139392e3231322e302f32342d3234203d3e203430333131.roa
Signing time:             Thu 09 Apr 2026 16:38:11 +0000
ROA not before:           Thu 09 Apr 2026 16:33:11 +0000
ROA not after:            Thu 08 Apr 2027 16:38:11 +0000
asID:                     40311
IP address blocks:        181.199.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 07:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:4e:2b:4a:8e:e9:dd:6e:4f:cc:d0:fd:df:e8:0f:93:9a:7b:29:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
        Validity
            Not Before: Apr  9 16:33:11 2026 GMT
            Not After : Apr  8 16:38:11 2027 GMT
        Subject: CN=F36F26EA7EDABA8D73AF0F836E93B1A6FE1927A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:82:88:94:ce:74:4b:a6:80:50:ab:14:d0:49:
                    1d:e7:16:db:eb:03:1f:99:28:b5:19:ab:4a:c5:54:
                    cd:fe:86:ed:1f:41:1c:7e:39:3a:63:b6:41:ef:04:
                    f7:52:a4:09:23:4e:da:d2:e5:b7:e0:6f:ef:43:55:
                    1a:ed:e2:53:97:84:ca:92:45:bd:b1:b8:e4:33:e4:
                    15:a7:dd:2f:c8:ce:49:cd:be:60:34:de:ba:9e:07:
                    63:aa:08:0a:5d:38:27:e2:38:96:78:8a:cc:7f:bb:
                    d0:34:66:ea:47:8d:dc:bb:fb:78:28:72:fd:3a:1d:
                    e1:82:b4:19:de:41:ff:73:7d:05:9b:82:94:43:5e:
                    37:82:58:24:3d:de:d2:78:a3:58:d0:58:3c:cd:96:
                    e3:b0:3c:22:b9:9e:9e:3e:2e:a6:46:0d:bf:b2:66:
                    29:0f:14:04:e0:77:4b:9e:69:a2:c4:70:ed:12:e5:
                    f9:d7:a1:6f:a0:c2:1d:97:ca:99:50:d5:8e:75:26:
                    8d:a3:28:f1:5c:73:7c:94:58:8d:29:68:1a:2a:fc:
                    73:5a:4c:42:dc:fa:8d:79:0a:59:74:cd:e3:83:6a:
                    5e:9d:35:2f:66:5e:d5:29:26:27:01:e4:c8:38:87:
                    c5:d0:91:fd:05:d7:8c:64:a1:7d:d3:f6:25:b8:b6:
                    4e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6F:26:EA:7E:DA:BA:8D:73:AF:0F:83:6E:93:B1:A6:FE:19:27:A3
            X509v3 Authority Key Identifier:
                keyid:B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3138312e3139392e3231322e302f32342d3234203d3e203430333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.199.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:9c:52:5d:34:94:59:e9:b5:5b:7e:16:65:32:89:d9:15:32:
         27:98:37:05:6b:d9:a2:d2:fb:e9:f8:f0:03:9c:2a:41:bf:9a:
         2d:5e:bd:79:84:97:bd:d9:7a:45:64:5b:60:45:3e:d7:b0:ee:
         dc:74:74:48:ba:d2:1f:77:13:32:44:34:e1:1c:c5:c2:6e:31:
         a4:d9:1c:e4:c6:7c:7b:d7:e2:05:30:5b:85:af:2a:2e:36:9c:
         c4:eb:10:66:e2:8f:c2:76:9e:a5:c6:74:b8:1c:e8:f7:93:21:
         c3:a2:de:cd:e7:17:89:dc:94:de:2d:5a:91:46:50:67:4d:ce:
         84:ce:4b:79:61:0c:21:43:7a:2b:24:fd:da:b3:20:c7:8a:d6:
         45:64:dd:8f:a4:8e:09:75:9a:1d:3f:d5:2e:20:69:2d:f6:31:
         17:ae:61:08:f5:55:7f:35:ea:16:f7:83:60:6d:11:ed:84:a1:
         24:4b:7b:53:98:1b:e9:ee:77:a1:aa:39:f1:b8:53:d5:a3:f2:
         33:27:df:bc:57:3f:ba:33:fc:c2:56:55:03:b8:a5:0d:c3:63:
         59:89:80:6d:b1:d8:6d:28:7c:09:6d:9e:c1:9c:e1:8a:38:1c:
         87:7b:ed:48:64:0b:98:dc:00:1f:5d:71:4a:ea:b6:32:5c:1e:
         e1:8d:b2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:42:45 2026 by rpki-client