Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/3133312e37322e3233342e302f32332d3233203d3e20323633373238.roa
File:                     3133312e37322e3233342e302f32332d3233203d3e20323633373238.roa (raw, json)
Hash identifier:          I5oN24nQhL0dGlCIVO84+kltRsMltb4AmR9MTmrfrB8=
Subject key identifier:   C4:31:51:81:27:6B:96:51:E3:60:D0:1E:F8:57:6C:FD:A3:DB:F9:90
Certificate issuer:       /CN=A046A17FBDC23F220B11EE08ACA1DECE39FE81D8
Certificate serial:       03DDCAE034E705B2F6AABA2AA3F15677F33B5408
Authority key identifier: A0:46:A1:7F:BD:C2:3F:22:0B:11:EE:08:AC:A1:DE:CE:39:FE:81:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/3133312e37322e3233342e302f32332d3233203d3e20323633373238.roa
Signing time:             Thu 08 Oct 2026 22:39:23 +0000
ROA not before:           Thu 08 Oct 2026 22:34:23 +0000
ROA not after:            Thu 07 Oct 2027 22:39:23 +0000
asID:                     263728
IP address blocks:        131.72.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:dd:ca:e0:34:e7:05:b2:f6:aa:ba:2a:a3:f1:56:77:f3:3b:54:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A046A17FBDC23F220B11EE08ACA1DECE39FE81D8
        Validity
            Not Before: Oct  8 22:34:23 2026 GMT
            Not After : Oct  7 22:39:23 2027 GMT
        Subject: CN=C4315181276B9651E360D01EF8576CFDA3DBF990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d0:9e:aa:48:32:56:8e:4a:1d:31:92:ed:91:
                    5e:e5:cd:df:65:c9:83:ae:ec:ea:fd:92:95:73:40:
                    f6:2d:10:5d:a8:ea:42:a1:59:db:77:7b:12:28:32:
                    c2:e1:6a:b9:26:d2:65:48:3d:f2:42:52:44:7b:6e:
                    20:0f:e0:9f:cc:2e:eb:ac:3b:40:dd:0f:38:9e:6b:
                    10:f3:2b:0c:43:b5:9d:17:f5:3e:2c:9f:9a:35:9e:
                    26:a2:9f:d1:4a:14:57:cf:a4:97:29:d7:6a:24:9d:
                    15:f6:89:3e:6e:47:d9:15:01:ea:62:53:9f:68:13:
                    18:b1:d6:21:30:60:3a:9b:3f:1b:ea:78:16:17:fc:
                    cc:20:47:03:96:1b:6c:a9:04:b3:e8:18:35:4a:5d:
                    04:3c:d3:cc:1c:ae:a5:eb:a1:11:93:57:2e:c2:91:
                    74:d8:e1:46:75:f6:02:13:f3:98:db:04:26:9f:44:
                    e9:56:21:d2:f8:b9:c5:ea:7a:a2:35:63:eb:ee:12:
                    df:b1:d4:39:12:bf:92:01:cf:20:8f:a7:3c:d1:b0:
                    97:b1:8e:d0:b9:e0:3c:57:63:bc:91:6d:a3:6e:74:
                    4e:b1:97:54:0b:1a:3f:08:4e:8d:b8:57:c1:87:d9:
                    8e:b1:2e:35:6a:05:bc:50:b9:34:e8:54:a5:a9:88:
                    2a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:31:51:81:27:6B:96:51:E3:60:D0:1E:F8:57:6C:FD:A3:DB:F9:90
            X509v3 Authority Key Identifier:
                keyid:A0:46:A1:7F:BD:C2:3F:22:0B:11:EE:08:AC:A1:DE:CE:39:FE:81:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/3133312e37322e3233342e302f32332d3233203d3e20323633373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:d6:9f:c1:06:f3:c6:56:45:7a:7c:2f:9f:32:92:b3:c7:db:
         d6:c8:a6:70:37:0b:37:40:54:61:f8:bd:4d:33:59:ba:3c:e8:
         c7:e9:32:6b:ff:94:69:19:f1:ec:a2:49:0d:01:36:64:40:d2:
         52:74:47:a2:55:d8:50:53:2d:03:ad:95:21:d0:42:61:2f:48:
         53:6d:32:f3:c0:29:09:81:3f:29:1c:34:57:2a:30:2f:c6:a3:
         7a:16:46:45:ea:b6:99:b8:92:97:37:e0:52:64:c3:e1:4d:66:
         63:11:23:67:c0:a6:52:e4:d4:41:ce:3c:8f:f6:68:97:eb:a8:
         bd:6c:d1:f2:d6:19:4f:66:15:8d:40:1f:7a:2d:e7:86:28:3d:
         15:7e:33:58:12:66:92:67:4f:7a:2b:27:18:b9:6f:3f:a1:7b:
         38:01:67:ea:30:1d:cb:60:b7:76:7b:5b:62:a3:1c:6b:f8:53:
         cc:23:1c:3d:c4:1b:87:33:07:95:6b:99:12:cf:65:3c:17:04:
         23:48:8a:da:21:ef:b4:d7:a3:b3:00:14:f3:54:2b:20:90:26:
         ca:ad:b5:42:02:68:fc:38:81:9c:0e:4c:2a:72:12:87:c9:d3:
         d1:7f:c5:71:ed:9f:56:09:04:87:40:31:05:5a:82:93:c5:05:
         17:04:a1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 08:13:10 2026 by rpki-client