Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3133312e3130382e34302e302f32322d3234203d3e203532343338.roa
File:                     3133312e3130382e34302e302f32322d3234203d3e203532343338.roa (raw, json)
Hash identifier:          OGhisSCsQ3bcF/EVZvhPaPaAoMfTFnkn9ckeHSWrw5w=
Subject key identifier:   5C:5A:49:68:00:E4:29:56:2D:DA:A7:CC:95:2E:51:87:07:40:1F:76
Certificate issuer:       /CN=A537F8449EAA5150B4958CB0F49E0C2358347988
Certificate serial:       517E52BD6DB59EE35A9B2A42A621DB76A57A4B74
Authority key identifier: A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3133312e3130382e34302e302f32322d3234203d3e203532343338.roa
Signing time:             Sun 10 May 2026 15:41:56 +0000
ROA not before:           Sun 10 May 2026 15:36:56 +0000
ROA not after:            Sun 09 May 2027 15:41:56 +0000
asID:                     52438
IP address blocks:        131.108.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl
                          rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7e:52:bd:6d:b5:9e:e3:5a:9b:2a:42:a6:21:db:76:a5:7a:4b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A537F8449EAA5150B4958CB0F49E0C2358347988
        Validity
            Not Before: May 10 15:36:56 2026 GMT
            Not After : May  9 15:41:56 2027 GMT
        Subject: CN=5C5A496800E429562DDAA7CC952E518707401F76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:41:9a:33:85:d4:8b:1f:25:74:5e:b3:ed:b2:
                    4d:5f:ec:3c:1e:46:b0:56:0e:32:db:23:5b:30:cc:
                    ec:41:92:4a:0f:0b:31:09:0f:e3:6d:c7:9b:59:60:
                    a7:de:d6:56:0e:08:29:61:25:87:97:18:27:27:58:
                    93:d0:06:3a:bc:0e:b9:46:2c:30:4f:77:80:18:a6:
                    d1:4c:de:42:2a:f6:c2:66:3e:a6:db:32:49:15:0b:
                    77:8a:47:ec:5a:76:f5:01:cf:2b:a0:67:9c:4b:c5:
                    2e:1d:e9:6e:d2:1a:fd:db:a2:10:20:7e:88:f6:a1:
                    5a:ef:e4:5a:39:07:11:fe:14:9e:60:66:28:46:4d:
                    b3:b6:d5:18:01:2b:dd:82:ea:1c:84:c4:83:37:e5:
                    9f:4e:1a:5e:62:c2:ab:ec:96:63:01:5a:14:b9:16:
                    33:6c:60:ac:6c:24:55:ce:9e:cb:10:9d:d5:2d:f7:
                    cb:a3:ce:2e:63:76:cd:56:c2:cc:b1:32:28:fc:a2:
                    4b:c1:e8:74:ff:ce:eb:33:37:53:52:df:e8:81:a1:
                    f7:bd:24:df:63:91:58:a2:3d:06:a6:fe:11:12:e9:
                    c4:70:7f:01:2a:b8:6b:4f:93:a0:38:bc:32:fa:78:
                    90:87:73:c4:da:a8:c8:0b:85:58:61:57:ac:8e:8a:
                    18:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5A:49:68:00:E4:29:56:2D:DA:A7:CC:95:2E:51:87:07:40:1F:76
            X509v3 Authority Key Identifier:
                keyid:A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3133312e3130382e34302e302f32322d3234203d3e203532343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:1e:06:89:ad:c6:ef:41:cc:38:5c:26:0c:51:46:cd:e0:2f:
         12:5c:b1:ac:db:a4:68:56:6c:16:d2:00:2f:00:ee:ec:00:5a:
         1b:fe:c2:2c:ce:c9:0d:2e:26:d3:e5:29:5d:8b:f4:68:5c:ba:
         80:01:17:70:46:88:75:b7:ef:34:75:56:e7:f1:4b:ec:46:85:
         5d:70:1c:cd:bf:2c:fb:05:d2:eb:79:4c:5b:45:97:e0:03:01:
         cc:35:9e:a5:5d:e1:62:d6:1a:89:97:93:e4:bc:33:09:3e:a6:
         f1:10:82:ab:74:34:5f:27:f1:19:ed:33:49:84:6d:42:fd:f7:
         14:1d:5f:37:90:1d:6c:17:52:d5:c0:38:e2:d0:c9:f1:56:a0:
         f9:c3:b9:3d:5d:b3:e5:4d:29:09:b0:c6:a9:2d:d2:53:4e:69:
         ab:f1:0d:f1:90:de:1f:1c:bb:5c:d8:8f:82:1a:59:2b:7b:97:
         47:c3:e0:dd:3b:c9:7c:4e:48:83:d1:0b:03:ce:ba:2d:70:27:
         18:d8:8a:59:84:8b:51:40:c1:fc:e6:56:20:64:b4:ea:9c:ab:
         88:b4:ca:d9:6b:df:8e:82:66:c1:21:89:31:0d:ba:84:a5:72:
         1f:8a:ad:55:cb:40:8e:18:c1:a2:f2:89:84:a2:50:a0:3e:9c:
         43:76:84:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:58:18 2026 by rpki-client