Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3133382e39372e35362e302f32322d3232203d3e203133343839.roa
File:                     3133382e39372e35362e302f32322d3232203d3e203133343839.roa (raw, json)
Hash identifier:          AdslncP6mLK8BuGWFfIlSp0RxW19EcYK4Xp111Qm0XI=
Subject key identifier:   76:F5:B3:F2:34:F8:AF:94:DC:43:0C:B6:5C:3E:3A:C3:D7:7D:B8:AF
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       4BB3CD973B7466CE44B814682E54DD036FBAEFFF
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3133382e39372e35362e302f32322d3232203d3e203133343839.roa
Signing time:             Thu 19 Mar 2026 20:35:10 +0000
ROA not before:           Thu 19 Mar 2026 20:30:10 +0000
ROA not after:            Thu 18 Mar 2027 20:35:10 +0000
asID:                     13489
IP address blocks:        138.97.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b3:cd:97:3b:74:66:ce:44:b8:14:68:2e:54:dd:03:6f:ba:ef:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar 19 20:30:10 2026 GMT
            Not After : Mar 18 20:35:10 2027 GMT
        Subject: CN=76F5B3F234F8AF94DC430CB65C3E3AC3D77DB8AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:43:31:7f:70:c6:3b:86:bc:bd:42:53:b6:6c:
                    3a:7e:b9:bb:d0:3c:bb:df:99:c5:58:ae:1f:9a:b1:
                    87:8b:c9:84:51:f6:e5:96:4c:40:89:c8:32:38:b0:
                    28:f9:81:08:5c:d6:bf:49:ac:b6:a6:6d:2b:04:05:
                    9b:bc:2c:25:78:95:d5:5a:27:ae:40:c0:f7:64:e9:
                    0c:c1:1f:be:4d:d1:61:83:66:52:8a:6c:0e:8f:61:
                    ba:00:68:29:fa:ba:db:16:d9:48:f6:32:19:53:d3:
                    f6:e0:71:cc:1c:88:2a:80:cd:c6:fd:bb:f3:2b:10:
                    3d:ea:e9:f9:29:0e:6b:d3:a9:4e:b1:c5:f6:1b:60:
                    89:ae:70:db:96:ed:60:ea:d5:5e:b7:ab:a6:71:72:
                    ce:e1:41:22:d7:91:ce:44:23:ee:51:f4:00:1c:17:
                    47:81:6c:fe:1d:16:2f:fd:d3:c6:d9:93:f6:1c:3d:
                    cb:ce:75:ab:c9:a3:47:f9:27:4d:39:4b:27:61:43:
                    26:d6:a0:48:a6:44:4b:ca:19:84:bf:c2:d6:cd:91:
                    79:b4:0b:8f:87:cd:1b:34:61:dc:38:2d:12:26:4a:
                    0f:53:f0:a1:2a:0f:d7:f7:f1:7e:ae:fd:fc:97:c1:
                    22:02:13:01:84:4c:47:e5:e3:6c:1c:44:c2:ed:28:
                    4c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F5:B3:F2:34:F8:AF:94:DC:43:0C:B6:5C:3E:3A:C3:D7:7D:B8:AF
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3133382e39372e35362e302f32322d3232203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:1f:8f:d9:9c:42:18:a7:dc:23:41:a8:1c:c1:5d:57:86:ab:
         36:93:35:85:e4:ec:10:2d:07:72:f8:81:1e:a3:6a:4a:b5:42:
         f1:44:55:b1:13:d1:ec:1c:e1:86:59:37:16:e2:40:f8:d8:b1:
         c0:ab:2c:f1:fb:a4:ef:33:c3:db:9d:cc:14:33:6a:03:e6:7c:
         f5:59:26:dd:b4:3d:ed:82:65:51:17:81:f1:42:5f:c7:a7:14:
         fb:7c:c4:0e:f9:2b:64:ce:4a:81:11:22:98:83:b4:78:21:f6:
         b6:65:94:5a:ae:06:67:94:c5:b8:cf:85:64:37:f3:05:07:ad:
         a3:15:f8:d1:c0:41:54:32:d1:e9:9b:10:24:26:fe:65:47:5b:
         7e:6a:60:a4:e3:7f:f3:1d:ba:76:b2:6c:b1:73:9c:04:a2:89:
         ec:c2:71:5d:48:f2:7a:c6:57:0c:cf:19:a9:0b:ef:53:22:18:
         35:2a:48:15:27:b1:86:1b:18:10:cd:2e:af:81:43:57:2d:39:
         4b:5d:70:35:bc:89:33:de:60:67:db:d1:90:e7:bf:72:bf:32:
         21:cc:74:29:56:cc:b8:2e:f3:c0:6a:25:6c:c6:53:d5:f1:d5:
         85:aa:cf:16:cd:20:69:86:59:53:26:3a:f9:07:a9:9f:25:18:
         e1:dc:90:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:09:21 2026 by rpki-client