Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32362e302f32342d3238203d3e20323633383039.roa
File:                     3138312e3139312e32362e302f32342d3238203d3e20323633383039.roa (raw, json)
Hash identifier:          iCq/Ukzl5CDThL9olN0twGxFzAwjflkRjsyhB8JKs+s=
Subject key identifier:   81:90:16:FD:72:63:C9:5B:B6:32:52:9D:7F:82:3E:F1:DC:D0:15:BE
Certificate issuer:       /CN=3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76
Certificate serial:       76BB0AF92EAE380ED81116A18F12C3CBD9392612
Authority key identifier: 3D:06:F0:A5:D3:F0:CF:D8:4C:F1:A8:1F:12:D5:E3:C7:62:3E:CD:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32362e302f32342d3238203d3e20323633383039.roa
Signing time:             Mon 06 Apr 2026 12:10:02 +0000
ROA not before:           Mon 06 Apr 2026 12:05:02 +0000
ROA not after:            Mon 05 Apr 2027 12:10:02 +0000
asID:                     263809
IP address blocks:        181.191.26.0/24 maxlen: 28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:bb:0a:f9:2e:ae:38:0e:d8:11:16:a1:8f:12:c3:cb:d9:39:26:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76
        Validity
            Not Before: Apr  6 12:05:02 2026 GMT
            Not After : Apr  5 12:10:02 2027 GMT
        Subject: CN=819016FD7263C95BB632529D7F823EF1DCD015BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:6e:df:3d:33:ab:2c:4c:9e:be:bc:29:80:
                    ed:a4:d8:32:96:de:73:46:4a:39:57:36:76:a4:1b:
                    d3:7d:04:b6:f2:67:e6:a3:ac:4f:8e:2f:89:24:31:
                    da:70:a5:53:14:c8:5d:37:dc:d0:2e:df:39:2f:37:
                    42:0c:5c:59:49:46:29:c5:50:4d:be:39:b0:3c:08:
                    7d:66:fc:cb:fd:de:f8:e6:f6:81:a9:43:71:c0:3b:
                    00:c3:f7:b7:57:6a:fd:44:17:77:2a:3d:c4:e7:a0:
                    53:02:e9:8f:6c:c7:4c:04:65:58:6d:4c:61:ea:74:
                    a2:18:7a:4a:e5:33:23:09:1a:be:76:51:85:45:cf:
                    e1:e1:18:c6:d3:18:24:04:27:13:da:d8:ed:93:b8:
                    1b:58:28:fa:d4:7e:68:12:f8:cd:ce:04:c3:1c:9a:
                    83:20:64:51:c0:a4:14:97:62:d3:3c:be:7b:ce:e0:
                    a6:02:f0:fe:fc:86:a9:c7:af:5d:e8:00:62:92:cd:
                    c9:67:6e:c0:d7:f2:6c:20:de:40:ee:c9:fa:9f:06:
                    f8:17:8b:38:00:3b:7a:0d:0b:9c:92:91:26:a4:2a:
                    b0:c9:cc:98:22:b6:e7:d8:e1:b4:97:0c:c9:54:d6:
                    16:95:b8:bc:84:8d:ff:9b:97:f7:1e:ef:29:88:84:
                    b7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:90:16:FD:72:63:C9:5B:B6:32:52:9D:7F:82:3E:F1:DC:D0:15:BE
            X509v3 Authority Key Identifier:
                keyid:3D:06:F0:A5:D3:F0:CF:D8:4C:F1:A8:1F:12:D5:E3:C7:62:3E:CD:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32362e302f32342d3238203d3e20323633383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:b5:95:dc:2d:44:59:19:17:66:85:df:a3:f3:06:15:6c:00:
         7f:40:b2:0c:1b:07:ee:75:10:e3:33:7d:1a:c6:b6:82:6b:f4:
         50:95:50:a8:0c:15:88:4f:b1:16:2b:d3:b2:03:02:a1:29:06:
         7a:48:4d:e2:b3:05:bb:7d:5a:26:a3:5f:35:77:c3:4f:cb:e9:
         bb:b5:b9:8b:79:59:50:cf:32:51:9f:5e:6c:45:d1:e4:55:5e:
         d9:28:84:3c:b8:cd:b8:54:91:e8:f5:0a:b9:bc:c3:31:a1:8d:
         aa:48:f3:b9:97:fc:95:27:29:1e:c0:24:91:00:d3:24:9f:0d:
         1d:df:b8:65:05:50:43:0b:41:10:1e:ad:1d:04:d1:0b:2b:e3:
         66:a2:f3:ff:06:68:4c:63:d5:aa:93:ba:c4:b6:cc:36:a3:86:
         20:f8:56:77:44:68:74:46:81:2b:cb:eb:0a:4d:79:a9:68:c5:
         7d:70:b9:67:55:13:0e:e9:e9:e5:ab:43:4e:ab:c3:37:56:05:
         a1:4a:9e:72:e0:c6:61:20:6d:65:3b:23:e8:53:82:30:f9:09:
         4d:fd:37:4c:0b:10:f7:00:1b:10:7f:84:bc:ea:98:dc:3c:0d:
         01:a5:ca:f2:18:07:23:fa:99:78:2c:66:ce:40:ee:65:85:02:
         a5:b4:88:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:28:18 2026 by rpki-client