Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230322e302e302f31362d3234203d3e2037343138.roa
File:                     3138312e3230322e302e302f31362d3234203d3e2037343138.roa (raw, json)
Hash identifier:          ofgRwaovn38oH2u69XPIlht0BAWCDSCesurWTVtpaRA=
Subject key identifier:   35:E9:84:23:9C:CE:E0:8B:0D:50:6D:82:C6:E7:62:E1:A1:AD:20:D2
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       4E011BABB670042DA7519C980591B8C2E5F2061F
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230322e302e302f31362d3234203d3e2037343138.roa
Signing time:             Thu 11 Jun 2026 13:25:01 +0000
ROA not before:           Thu 11 Jun 2026 13:20:01 +0000
ROA not after:            Thu 10 Jun 2027 13:25:01 +0000
asID:                     7418
IP address blocks:        181.202.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:01:1b:ab:b6:70:04:2d:a7:51:9c:98:05:91:b8:c2:e5:f2:06:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Jun 11 13:20:01 2026 GMT
            Not After : Jun 10 13:25:01 2027 GMT
        Subject: CN=35E984239CCEE08B0D506D82C6E762E1A1AD20D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f4:d8:1b:b6:f5:0c:fd:e1:44:e6:de:61:d6:
                    0d:c8:80:e4:3b:9e:68:14:bf:f3:c6:a9:04:f1:a1:
                    b2:69:53:c5:61:e7:d8:fe:d6:ea:3a:4b:6e:2f:16:
                    09:01:31:24:a2:1b:03:08:36:b7:d3:42:5f:c8:ae:
                    25:73:ed:97:17:77:4d:4d:34:ee:81:c8:22:3d:a5:
                    78:a4:b9:67:50:ca:28:56:b6:6b:05:29:f9:96:e1:
                    e9:4f:d5:26:d9:24:06:38:b8:75:e5:40:6a:b9:b3:
                    92:70:a0:5f:d8:bb:27:0b:ed:1c:37:47:a8:6b:cc:
                    21:39:50:be:ba:58:80:ac:df:6e:fc:b4:dc:cb:88:
                    7d:bf:f7:eb:07:96:5c:d9:bb:f9:0e:23:54:44:48:
                    34:59:54:41:27:9a:5f:3d:6b:38:e2:c5:40:fa:3e:
                    30:3f:d8:e2:e0:b9:a2:e0:82:23:15:ba:0d:1e:4b:
                    5a:14:73:a6:84:0d:fa:04:2f:5d:2e:c7:d8:19:b4:
                    e0:eb:27:9f:1f:bc:4d:33:03:7f:29:02:4e:41:2f:
                    68:c4:df:95:ca:16:fa:dc:bc:f5:b5:5e:6f:81:89:
                    b6:c2:d1:e0:31:6c:b7:ad:2c:cc:8f:28:cf:51:e0:
                    0b:39:0e:ec:a4:2c:54:79:4d:c0:81:cf:39:1e:5e:
                    44:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E9:84:23:9C:CE:E0:8B:0D:50:6D:82:C6:E7:62:E1:A1:AD:20:D2
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230322e302e302f31362d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.202.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         27:45:80:68:95:3e:54:27:78:6c:f7:f6:2b:e2:1d:93:74:c1:
         30:80:ea:35:df:af:34:40:32:89:c3:05:f6:e1:73:dc:35:d8:
         df:c1:8f:c9:e9:02:7e:25:85:14:4d:cb:11:05:95:14:5b:12:
         dd:df:96:8e:1f:98:52:a7:ea:ea:d8:1e:c1:94:09:99:12:53:
         ae:5f:f8:58:fe:16:7e:51:37:c5:79:62:15:82:41:82:45:49:
         ff:c2:f5:aa:e8:7f:f2:4f:bc:9a:08:54:aa:25:45:3f:4f:1e:
         44:1f:7a:df:5d:a0:1a:94:f0:c1:97:0a:0f:ea:97:28:94:92:
         97:c5:0c:53:d4:2b:33:5e:51:ec:9d:05:95:71:ba:88:f8:44:
         bb:61:91:46:6e:66:b6:f1:8b:50:52:5f:af:1f:fa:76:19:bf:
         24:59:ce:89:91:d0:82:fc:ed:1b:a7:99:e4:cd:42:ac:f3:40:
         12:61:ec:b3:73:c3:91:85:4f:10:c2:0e:70:d4:e7:8e:90:fe:
         1f:59:0d:9e:fb:11:86:f4:95:53:55:63:f5:42:de:b9:eb:71:
         fb:e3:ec:1f:9d:27:e9:8d:0b:49:ea:22:48:35:52:8f:6f:67:
         e6:94:73:8c:95:f8:b1:6b:96:14:6c:ca:51:39:ba:f1:48:d1:
         35:49:fa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:14:27 2026 by rpki-client