Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e32362e302f32332d3233203d3e2033383136.roa
File:                     3138312e3137342e32362e302f32332d3233203d3e2033383136.roa (raw, json)
Hash identifier:          xjKK5lnXBs+L0Xeqm1rr6hZnXBOaiqzfgIUqzf087yY=
Subject key identifier:   79:08:02:BE:E6:DF:94:41:44:3D:2A:E8:DF:15:E1:66:B3:F2:1F:0C
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       3E2151E604207DA808EF96717E6AC83CCAA1BF16
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e32362e302f32332d3233203d3e2033383136.roa
Signing time:             Thu 26 Feb 2026 16:32:01 +0000
ROA not before:           Thu 26 Feb 2026 16:27:01 +0000
ROA not after:            Thu 25 Feb 2027 16:32:01 +0000
asID:                     3816
IP address blocks:        181.174.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:21:51:e6:04:20:7d:a8:08:ef:96:71:7e:6a:c8:3c:ca:a1:bf:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Feb 26 16:27:01 2026 GMT
            Not After : Feb 25 16:32:01 2027 GMT
        Subject: CN=790802BEE6DF9441443D2AE8DF15E166B3F21F0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d1:e4:82:c5:25:8c:23:ff:ae:99:71:9c:e3:
                    b8:9c:b3:41:23:3d:84:79:09:6e:be:d3:b1:04:ee:
                    01:bc:da:8d:b2:54:39:9d:e4:a1:63:2d:ee:41:76:
                    46:ed:8b:ec:2a:51:1e:34:88:68:e1:31:2e:41:6c:
                    42:4b:f5:91:0e:10:53:0f:24:7a:f8:9e:ce:95:6a:
                    bd:35:bf:b9:98:23:ae:ca:2a:2c:07:cd:74:28:9d:
                    14:48:9f:5c:ba:06:a1:91:82:83:c6:58:a9:79:77:
                    b4:82:4b:a2:3f:55:ae:67:d5:cd:70:7c:4c:d2:f7:
                    5c:40:57:d9:38:e8:e9:34:2c:ca:78:96:70:51:48:
                    19:42:6d:84:37:03:ff:36:77:a3:d8:39:a1:27:a8:
                    8a:24:1b:8a:bf:c5:04:a9:22:25:fe:b3:34:3d:ed:
                    5e:4d:59:1c:e8:62:de:6a:ff:f6:35:7b:b9:71:a2:
                    74:d0:35:53:09:ad:82:a0:e4:78:bf:66:5e:4f:97:
                    b5:63:ec:a0:b9:99:36:eb:56:4f:d3:86:22:fe:f3:
                    10:18:66:48:11:96:58:80:df:80:bb:57:63:a1:36:
                    d9:39:17:8c:57:b0:a7:36:2b:89:2e:b4:62:e2:f1:
                    1f:97:a4:61:e4:b3:dc:cb:9e:20:35:d6:2d:35:43:
                    e0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:08:02:BE:E6:DF:94:41:44:3D:2A:E8:DF:15:E1:66:B3:F2:1F:0C
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e32362e302f32332d3233203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:f4:fb:af:87:70:b5:e7:7e:14:3f:e0:da:e5:d5:d1:19:fa:
         52:18:34:ce:99:79:3d:ea:87:ca:4f:fb:aa:38:ff:c4:d8:1d:
         4c:58:ed:1c:90:f7:c8:6e:44:ff:70:f3:eb:8f:aa:16:c0:9d:
         65:31:e7:17:12:4e:e3:b3:e6:22:59:36:46:15:d2:04:6a:13:
         86:22:a6:72:73:53:f0:dd:21:79:8b:5c:5d:19:f7:11:cb:9e:
         13:e1:76:1f:95:8a:b6:32:5c:dc:fd:e8:f1:0d:a1:67:bd:9d:
         c0:a5:9a:0e:53:1f:87:85:e4:c5:bd:8e:31:e0:6b:21:c3:ce:
         74:7d:a3:09:0d:86:ad:5a:98:86:02:19:4a:de:43:dd:85:bb:
         af:dc:0b:24:63:17:bd:6b:98:6f:a7:12:65:de:57:c1:e4:03:
         be:1e:56:50:ae:8d:bd:dc:64:14:97:72:67:af:a0:a3:b9:c1:
         7e:8b:4a:6b:09:b0:82:5e:74:47:67:39:d3:f1:7d:47:6a:61:
         bb:2d:ed:52:c1:bd:2d:bc:aa:bc:f6:a2:c2:f4:95:4b:65:0a:
         95:64:b4:cf:3d:d9:b7:8e:41:cb:b9:ca:a0:53:c1:4e:0d:49:
         c8:a5:35:9e:05:37:4d:a4:1c:5a:7d:4f:a4:49:59:f9:17:a3:
         a0:ca:65:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:51:17 2026 by rpki-client