Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF0A4F620D224C38859357384007DECBBDBE5CA6B1FFD28472D04B77E3F596B1/0/3138312e3138392e32372e302f32342d3234203d3e20323732383736.roa
File:                     3138312e3138392e32372e302f32342d3234203d3e20323732383736.roa (raw, json)
Hash identifier:          fYdnN6siai7L2XRQXjEweL1treaahG8ugAvnhgc0Jdk=
Subject key identifier:   8C:C3:90:CB:0E:3B:07:69:82:D3:C5:C5:F3:E1:5D:25:E1:37:18:68
Certificate issuer:       /CN=ED84261D115D794840163DB5C548D17B25BA2A9E
Certificate serial:       4B00FCA3FC1FD53AECBFCA0A108AC6A9B45C82CF
Authority key identifier: ED:84:26:1D:11:5D:79:48:40:16:3D:B5:C5:48:D1:7B:25:BA:2A:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED84261D115D794840163DB5C548D17B25BA2A9E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF0A4F620D224C38859357384007DECBBDBE5CA6B1FFD28472D04B77E3F596B1/0/3138312e3138392e32372e302f32342d3234203d3e20323732383736.roa
Signing time:             Fri 05 Jun 2026 23:00:00 +0000
ROA not before:           Fri 05 Jun 2026 22:55:00 +0000
ROA not after:            Fri 04 Jun 2027 23:00:00 +0000
asID:                     272876
IP address blocks:        181.189.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF0A4F620D224C38859357384007DECBBDBE5CA6B1FFD28472D04B77E3F596B1/0/ED84261D115D794840163DB5C548D17B25BA2A9E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF0A4F620D224C38859357384007DECBBDBE5CA6B1FFD28472D04B77E3F596B1/0/ED84261D115D794840163DB5C548D17B25BA2A9E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED84261D115D794840163DB5C548D17B25BA2A9E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:00:fc:a3:fc:1f:d5:3a:ec:bf:ca:0a:10:8a:c6:a9:b4:5c:82:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED84261D115D794840163DB5C548D17B25BA2A9E
        Validity
            Not Before: Jun  5 22:55:00 2026 GMT
            Not After : Jun  4 23:00:00 2027 GMT
        Subject: CN=8CC390CB0E3B076982D3C5C5F3E15D25E1371868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:83:a7:a5:6c:d2:62:24:ca:84:85:77:c9:81:
                    35:75:ef:5c:95:46:2a:6f:6d:cc:b9:95:05:3c:d2:
                    a0:eb:3e:08:34:7d:1b:b8:1c:22:19:b8:06:10:d7:
                    b9:bd:4e:62:14:d9:e7:8b:b7:39:f1:ae:71:3f:65:
                    0b:73:36:5d:e3:6c:c7:cf:91:f5:0a:01:f8:25:6f:
                    96:54:d2:95:58:48:33:c3:c6:35:62:d9:13:57:d3:
                    e5:94:9e:1d:9d:1d:02:8a:4b:2b:ea:24:f0:76:c5:
                    97:99:51:e6:de:9e:76:f9:f0:06:7b:eb:bc:ff:bc:
                    09:af:52:e0:5a:1d:44:51:b6:f0:e9:1c:ba:df:0f:
                    ce:7d:ca:c2:f4:b1:14:88:1c:be:3a:bd:da:d3:60:
                    42:ee:18:3c:bb:f2:ab:dd:88:4c:80:26:d5:1a:6c:
                    95:d9:3d:9c:08:ec:99:74:68:f8:3f:ea:d3:44:44:
                    27:4e:65:f4:e1:60:94:1b:98:77:15:ac:99:d3:2c:
                    8d:5b:8c:ef:f8:c2:31:0b:9e:f6:b8:6f:ea:30:77:
                    a3:5a:fa:48:c0:69:47:1d:cc:33:4b:85:62:f6:5a:
                    fa:d9:d1:b3:f8:de:dd:16:d3:51:40:9e:b9:a9:8a:
                    87:d9:73:0e:fb:93:19:e2:97:f8:53:14:4a:b5:d7:
                    d4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C3:90:CB:0E:3B:07:69:82:D3:C5:C5:F3:E1:5D:25:E1:37:18:68
            X509v3 Authority Key Identifier:
                keyid:ED:84:26:1D:11:5D:79:48:40:16:3D:B5:C5:48:D1:7B:25:BA:2A:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF0A4F620D224C38859357384007DECBBDBE5CA6B1FFD28472D04B77E3F596B1/0/ED84261D115D794840163DB5C548D17B25BA2A9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED84261D115D794840163DB5C548D17B25BA2A9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF0A4F620D224C38859357384007DECBBDBE5CA6B1FFD28472D04B77E3F596B1/0/3138312e3138392e32372e302f32342d3234203d3e20323732383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:6a:de:da:51:d1:0c:cf:81:ac:6e:d3:f3:55:38:fb:db:41:
         61:c8:87:4e:de:a9:5c:a0:97:21:31:97:8f:fe:1b:9e:1c:fc:
         15:38:24:4b:5a:59:9c:dd:65:53:84:36:3a:d9:a8:b5:10:16:
         58:c0:02:33:fb:08:0b:d8:a5:3a:7a:fc:23:08:d0:a1:04:c6:
         82:27:73:71:b4:49:53:14:da:7e:43:fc:49:ac:59:58:76:b3:
         10:1c:a0:73:7f:3a:83:68:52:63:21:06:9b:b4:ad:40:14:40:
         00:97:18:8f:79:f7:5f:b9:ae:da:86:13:c9:f8:6f:88:39:32:
         64:19:a9:50:c0:1d:52:8d:4b:c2:43:d9:d1:3a:06:1c:57:3f:
         18:d7:21:66:48:fc:ad:9e:74:e2:dd:f8:51:21:a0:7b:9d:02:
         29:5f:4e:18:d5:3a:b9:a4:7b:1c:b8:3c:1b:3a:46:f6:44:52:
         18:09:2e:22:07:87:97:78:64:19:99:10:16:41:a4:42:e2:9f:
         33:87:9f:47:0c:7f:ac:50:4a:4e:dd:03:e7:ff:3f:78:ad:ae:
         6e:44:00:f1:09:60:71:1c:77:df:3d:fa:ea:7d:42:7e:d6:89:
         19:22:64:83:4d:2a:6b:79:e1:32:fd:c0:e6:31:75:3c:3c:40:
         84:d8:9d:50
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUSwD8o/wf1Trsv8oKEIrGqbRcgs8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQ4NDI2MUQxMTVENzk0ODQwMTYzREI1QzU0OEQxN0Iy
NUJBMkE5RTAeFw0yNjA2MDUyMjU1MDBaFw0yNzA2MDQyMzAwMDBaMDMxMTAvBgNV
BAMTKDhDQzM5MENCMEUzQjA3Njk4MkQzQzVDNUYzRTE1RDI1RTEzNzE4NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxg6elbNJiJMqEhXfJgTV171yV
Ripvbcy5lQU80qDrPgg0fRu4HCIZuAYQ17m9TmIU2eeLtznxrnE/ZQtzNl3jbMfP
kfUKAfglb5ZU0pVYSDPDxjVi2RNX0+WUnh2dHQKKSyvqJPB2xZeZUebennb58AZ7
67z/vAmvUuBaHURRtvDpHLrfD859ysL0sRSIHL46vdrTYELuGDy78qvdiEyAJtUa
bJXZPZwI7Jl0aPg/6tNERCdOZfThYJQbmHcVrJnTLI1bjO/4wjELnva4b+owd6Na
+kjAaUcdzDNLhWL2WvrZ0bP43t0W01FAnrmpiofZcw77kxnil/hTFEq119T1AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUjMOQyw47B2mC08XF8+FdJeE3GGgwHwYDVR0j
BBgwFoAU7YQmHRFdeUhAFj21xUjReyW6Kp4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRjBBNEY2MjBEMjI0QzM4ODU5MzU3Mzg0MDA3REVDQkJE
QkU1Q0E2QjFGRkQyODQ3MkQwNEI3N0UzRjU5NkIxLzAvRUQ4NDI2MUQxMTVENzk0
ODQwMTYzREI1QzU0OEQxN0IyNUJBMkE5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRDg0MjYxRDExNUQ3OTQ4NDAx
NjNEQjVDNTQ4RDE3QjI1QkEyQTlFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUYwQTRGNjIwRDIyNEMzODg1OTM1NzM4NDAwN0RFQ0JCREJFNUNBNkIx
RkZEMjg0NzJEMDRCNzdFM0Y1OTZCMS8wLzMxMzgzMTJlMzEzODM5MmUzMjM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMyMzgzNzM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtb0b
MA0GCSqGSIb3DQEBCwUAA4IBAQADat7aUdEMz4GsbtPzVTj720FhyIdO3qlcoJch
MZeP/hueHPwVOCRLWlmc3WVThDY62ai1EBZYwAIz+wgL2KU6evwjCNChBMaCJ3Nx
tElTFNp+Q/xJrFlYdrMQHKBzfzqDaFJjIQabtK1AFEAAlxiPefdfua7ahhPJ+G+I
OTJkGalQwB1SjUvCQ9nROgYcVz8Y1yFmSPytnnTi3fhRIaB7nQIpX04Y1Tq5pHsc
uDwbOkb2RFIYCS4iB4eXeGQZmRAWQaRC4p8zh59HDH+sUEpO3QPn/z94ra5uRADx
CWBxHHffPfrqfUJ+1okZImSDTSpreeEy/cDmMXU8PECE2J1Q
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:12:47 2026 by rpki-client