Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32372e302f32342d3238203d3e203532343235.roa
File:                     3138312e3139312e32372e302f32342d3238203d3e203532343235.roa (raw, json)
Hash identifier:          zkxaY7LrEPcCb1cgiT/xJdbruyR31inGksxIg2/ER8c=
Subject key identifier:   7D:31:A1:EA:68:09:EF:B4:6A:ED:EE:C2:5E:AF:25:F5:23:C0:75:B3
Certificate issuer:       /CN=3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76
Certificate serial:       5F859F897120D86B99C85401129B7F44C6167EA0
Authority key identifier: 3D:06:F0:A5:D3:F0:CF:D8:4C:F1:A8:1F:12:D5:E3:C7:62:3E:CD:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32372e302f32342d3238203d3e203532343235.roa
Signing time:             Mon 06 Apr 2026 12:05:03 +0000
ROA not before:           Mon 06 Apr 2026 12:00:03 +0000
ROA not after:            Mon 05 Apr 2027 12:05:03 +0000
asID:                     52425
IP address blocks:        181.191.27.0/24 maxlen: 28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:85:9f:89:71:20:d8:6b:99:c8:54:01:12:9b:7f:44:c6:16:7e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76
        Validity
            Not Before: Apr  6 12:00:03 2026 GMT
            Not After : Apr  5 12:05:03 2027 GMT
        Subject: CN=7D31A1EA6809EFB46AEDEEC25EAF25F523C075B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:69:6e:6e:09:08:68:ef:d4:ed:97:6e:cf:f5:
                    e1:6f:58:75:18:e8:35:d3:f1:89:c1:ef:5e:d1:3d:
                    20:b3:4f:15:73:28:53:8b:f0:f9:7d:ba:0c:2c:8b:
                    15:3c:01:b2:ba:6d:07:fd:3a:49:a1:e6:62:c3:17:
                    3b:6c:67:b5:78:83:20:4f:fb:4e:1e:8b:1e:cd:74:
                    8a:e9:97:5a:6c:7b:e8:6a:44:19:60:b7:51:70:07:
                    19:94:06:c4:40:e5:3a:3c:08:03:7f:a0:df:23:ed:
                    a0:89:6c:b2:68:4a:c3:a0:f1:67:9e:b0:9c:35:6a:
                    49:79:26:18:88:b2:3c:47:6e:98:8f:b5:71:f9:22:
                    0a:07:10:ed:19:e9:9c:ef:29:72:08:af:ae:0d:4e:
                    39:4b:aa:26:8c:30:86:3b:67:cb:9a:e2:8b:85:53:
                    3a:a9:84:46:77:9f:d9:d9:66:a7:c1:bd:a5:ab:ab:
                    71:39:14:97:c6:3a:f1:25:10:f9:2a:18:db:9d:4a:
                    64:4b:64:d0:22:86:32:db:da:70:bc:77:00:dd:cf:
                    e9:b2:08:a1:00:d3:21:86:b0:f2:60:f2:25:4b:ce:
                    4c:da:ee:1f:95:20:80:2c:86:be:2e:a4:2f:99:2f:
                    35:72:97:6e:d1:7b:b4:36:1b:4b:54:65:7c:f2:d4:
                    1a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:31:A1:EA:68:09:EF:B4:6A:ED:EE:C2:5E:AF:25:F5:23:C0:75:B3
            X509v3 Authority Key Identifier:
                keyid:3D:06:F0:A5:D3:F0:CF:D8:4C:F1:A8:1F:12:D5:E3:C7:62:3E:CD:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32372e302f32342d3238203d3e203532343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:30:ae:db:4f:9b:b8:60:bc:d9:76:f3:4e:79:41:3f:54:5e:
         0c:dd:22:bf:57:98:76:f2:72:00:de:42:b2:53:a1:c8:3d:53:
         ec:e0:c4:7f:53:f6:d0:21:bd:24:06:15:9a:32:69:17:a3:34:
         e0:0f:e1:73:9e:fe:18:3e:ea:07:0d:f5:ff:fc:50:d7:a6:cb:
         94:70:45:ba:31:38:5a:af:38:d0:42:4e:44:de:de:8a:2d:99:
         89:09:36:d0:f5:7b:df:10:88:d9:2c:f2:cd:8f:7f:13:77:cf:
         44:82:0c:0e:1e:fe:68:3c:55:28:ac:3d:b7:c6:60:1a:0a:e2:
         22:20:8d:f7:77:ee:ed:9c:50:78:5d:cc:06:89:6c:50:6e:ca:
         0d:a9:58:4f:3a:14:ba:59:2d:0a:df:24:37:69:d0:50:28:9e:
         d1:06:44:1a:19:06:c3:03:05:97:4c:86:80:42:37:6b:4c:4c:
         3f:b7:c0:59:82:bd:df:7a:58:b5:cb:27:ca:6a:e0:3a:34:f2:
         51:a5:5c:a2:c7:31:78:43:2a:fa:3f:dd:f8:99:2c:b2:46:ba:
         e4:d0:53:6c:a5:d0:71:20:49:65:d2:e2:40:a7:b5:bc:1c:99:
         a6:1f:71:2e:59:6d:14:3f:d1:da:04:93:2b:19:c1:8f:2e:f5:
         ce:e6:75:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:22:12 2026 by rpki-client