Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/3133312e3232312e342e302f32322d3234203d3e20323633373330.roa
File:                     3133312e3232312e342e302f32322d3234203d3e20323633373330.roa (raw, json)
Hash identifier:          IlU94aJDXNkmHtqshCtth7wpZooAIJQ48K9mc3dRHII=
Subject key identifier:   FF:9C:AB:82:A7:05:05:49:FA:E8:63:E6:57:DA:57:C4:53:2E:8E:99
Certificate issuer:       /CN=BA1555F56F1EE9CECA76B3AD5D23EE829D006D98
Certificate serial:       57C6BF1699B0FA7795053D9D9DDF2F5D4AE29CA6
Authority key identifier: BA:15:55:F5:6F:1E:E9:CE:CA:76:B3:AD:5D:23:EE:82:9D:00:6D:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/3133312e3232312e342e302f32322d3234203d3e20323633373330.roa
Signing time:             Fri 03 Jul 2026 14:50:48 +0000
ROA not before:           Fri 03 Jul 2026 14:45:48 +0000
ROA not after:            Fri 02 Jul 2027 14:50:48 +0000
asID:                     263730
IP address blocks:        131.221.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c6:bf:16:99:b0:fa:77:95:05:3d:9d:9d:df:2f:5d:4a:e2:9c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA1555F56F1EE9CECA76B3AD5D23EE829D006D98
        Validity
            Not Before: Jul  3 14:45:48 2026 GMT
            Not After : Jul  2 14:50:48 2027 GMT
        Subject: CN=FF9CAB82A7050549FAE863E657DA57C4532E8E99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:49:62:0c:a0:42:bb:3a:93:12:d4:3e:1a:d3:
                    e9:c6:a4:ae:ca:9e:f7:7a:d7:98:c6:06:04:1e:da:
                    32:a2:9e:b7:ba:3d:9b:14:f2:74:20:bc:64:e1:5f:
                    07:fc:10:4a:bd:59:59:a3:0e:b4:96:1b:06:71:23:
                    d2:d3:00:f0:e3:91:70:6b:de:0c:53:87:93:18:44:
                    49:df:9c:60:37:c0:f4:b9:3e:3d:15:dc:2c:85:eb:
                    22:45:9f:bb:3d:5f:1e:89:d1:98:a2:8f:fc:97:1e:
                    7e:d5:05:c9:66:9b:6a:7c:b4:65:22:83:96:c0:e9:
                    df:9f:05:7e:6d:16:56:2c:26:1d:61:a2:a0:b3:98:
                    27:1e:8e:91:0d:eb:39:3a:02:54:94:2d:5e:e0:6f:
                    bb:b1:bd:65:d7:6e:1f:80:44:d8:29:de:b7:2d:33:
                    99:ba:6a:be:84:4d:cb:da:7d:9a:06:c6:fd:2b:33:
                    4d:e5:78:1d:83:b8:11:d9:a6:ce:54:8d:42:62:c8:
                    0b:3f:58:87:4d:af:b0:79:44:0c:1c:ae:6f:c4:65:
                    af:5b:b0:a4:4a:8e:aa:84:24:ca:ba:12:11:d5:f0:
                    39:bc:52:71:96:10:20:4e:02:97:43:5e:8e:32:33:
                    7c:e0:bc:57:04:5d:07:27:ee:52:31:77:3e:5e:5b:
                    de:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9C:AB:82:A7:05:05:49:FA:E8:63:E6:57:DA:57:C4:53:2E:8E:99
            X509v3 Authority Key Identifier:
                keyid:BA:15:55:F5:6F:1E:E9:CE:CA:76:B3:AD:5D:23:EE:82:9D:00:6D:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/3133312e3232312e342e302f32322d3234203d3e20323633373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:82:45:ed:f6:b5:bd:02:72:5d:d6:11:10:2d:4a:95:82:f7:
         fb:30:3c:d7:76:0c:fb:97:07:e5:49:62:34:73:be:a8:9c:4d:
         73:78:aa:1e:04:ee:4f:e6:c8:1e:6b:36:49:da:98:b7:cc:c1:
         fd:7b:b2:f9:1a:14:c7:32:dc:69:88:7e:13:ac:cf:5e:6a:60:
         fc:d6:a7:53:05:21:aa:31:c0:ae:db:49:4b:ce:47:a0:e0:2f:
         aa:e5:de:b9:a2:eb:2e:d8:38:2f:31:d7:7a:e7:6e:06:1a:6a:
         50:85:db:86:0b:e2:1e:0f:53:86:d4:d3:b3:ea:59:72:29:0b:
         57:30:a7:17:32:b9:26:76:00:0f:e2:9f:8c:5b:19:6c:5c:fb:
         c4:7d:76:c9:bd:a6:a7:b4:1d:92:66:2e:32:39:37:3a:98:c5:
         07:98:fa:c4:3d:5f:30:73:93:0e:f1:0e:1f:62:fb:6f:a7:52:
         cb:44:d0:83:d2:85:e8:91:1b:a7:91:ca:6d:45:d9:68:0e:20:
         29:e0:08:2a:0e:60:16:1a:2c:62:65:3d:01:b8:0d:44:b2:ed:
         47:fa:76:42:c9:8c:f4:39:17:af:3b:0b:8b:e6:17:93:e8:be:
         b9:d3:b5:d4:97:95:e5:61:2d:fa:fc:9a:59:ab:ec:4a:de:89:
         1f:7f:9f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:59:24 2026 by rpki-client