Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e32382e302f32332d3233203d3e2033383136.roa
File:                     3138312e3137342e32382e302f32332d3233203d3e2033383136.roa (raw, json)
Hash identifier:          tAdVUT2jhGGXiYGQhWcwDsEXCJjNq2BRhjGMo4C61w8=
Subject key identifier:   A5:28:50:3F:DC:A8:B7:31:6C:B0:EF:F6:33:C9:2E:FF:FF:69:B2:8B
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       42771B1A04E5787C91C96BB07BDB7BD6C82190C7
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e32382e302f32332d3233203d3e2033383136.roa
Signing time:             Fri 27 Feb 2026 18:32:13 +0000
ROA not before:           Fri 27 Feb 2026 18:27:13 +0000
ROA not after:            Fri 26 Feb 2027 18:32:13 +0000
asID:                     3816
IP address blocks:        181.174.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:77:1b:1a:04:e5:78:7c:91:c9:6b:b0:7b:db:7b:d6:c8:21:90:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Feb 27 18:27:13 2026 GMT
            Not After : Feb 26 18:32:13 2027 GMT
        Subject: CN=A528503FDCA8B7316CB0EFF633C92EFFFF69B28B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c1:9a:85:66:0e:c2:61:dd:92:25:cc:69:b8:
                    41:79:07:a7:39:0e:d0:ee:da:36:8f:31:05:b0:ad:
                    8e:ca:6d:6c:80:84:c4:fe:cd:cc:c6:5d:3c:33:31:
                    6d:e9:a0:86:57:80:86:e8:f2:08:1c:7c:b2:5f:d1:
                    5c:76:9e:b3:ff:ce:7d:63:1d:8d:57:64:c7:37:d4:
                    25:f3:68:0b:fc:be:12:15:e8:f0:36:d4:77:f8:d9:
                    d4:58:c2:cd:96:11:00:d2:59:92:03:ac:60:05:b9:
                    bc:a8:af:3d:89:fe:f9:e4:f1:bd:35:2c:67:8d:c7:
                    11:93:84:11:ac:92:8c:73:24:2d:30:b8:40:55:92:
                    7f:07:9f:a8:2d:46:34:d2:2b:71:50:e6:51:e3:99:
                    8d:19:6e:aa:8a:a0:a1:b9:4b:3d:82:f1:f6:a6:40:
                    a3:9d:67:15:62:e7:93:29:95:21:ee:87:e2:6d:b2:
                    5a:b0:84:ad:66:f4:52:94:8a:e9:82:73:32:ec:06:
                    23:6e:af:8c:7a:d4:8a:13:8c:40:37:46:e0:03:fd:
                    31:68:d9:cc:5e:60:ee:a3:7f:da:65:d2:57:2a:c8:
                    63:35:a2:47:2a:85:0d:6b:25:9f:ae:86:b0:2a:fc:
                    24:6d:8f:7d:5b:0b:1a:36:4d:d4:53:92:80:ed:fc:
                    03:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:28:50:3F:DC:A8:B7:31:6C:B0:EF:F6:33:C9:2E:FF:FF:69:B2:8B
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e32382e302f32332d3233203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:a6:37:01:0d:5a:9a:37:7a:8d:d0:8f:9a:24:3a:c5:5f:1d:
         89:48:9b:f0:7e:c4:54:cc:89:7e:f0:11:a9:5c:a3:e0:c1:97:
         59:46:f6:3a:fc:51:2c:53:39:48:e5:28:13:8a:ae:44:f0:33:
         1b:a9:1f:18:4d:fb:48:2a:ee:0e:95:2e:74:9e:49:31:23:01:
         9f:47:ce:5c:52:a6:85:07:bf:da:58:46:9e:14:0a:2f:08:c4:
         fe:83:a9:68:5a:80:b8:c8:28:8a:4a:7f:c3:18:e0:c4:13:fa:
         72:aa:62:d4:98:6d:2e:4c:5e:2c:57:d0:30:3f:f9:6f:38:c7:
         80:b1:d5:b1:47:34:6f:37:a2:1f:7b:ad:e2:db:be:fe:93:45:
         7d:99:fb:b3:c4:c2:85:44:a3:eb:9d:05:18:3d:31:84:a8:ea:
         b8:7e:36:38:00:e1:da:a0:72:f9:31:e2:a1:43:1f:55:e5:74:
         75:39:cf:62:67:e7:19:0c:e1:b1:68:60:87:0c:5a:57:aa:cb:
         81:82:c1:f0:6b:1f:b1:f8:95:82:1c:21:1a:d2:24:ff:1c:94:
         a1:3a:71:8c:d8:ce:e7:7c:85:8a:b8:0a:81:be:cd:14:5b:0f:
         e0:87:e1:41:17:15:1c:10:b5:0a:38:6e:60:71:91:fc:68:43:
         5e:64:fa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:51:27 2026 by rpki-client