Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/3133312e3235352e3133362e302f32342d3234203d3e20323731383631.roa
File:                     3133312e3235352e3133362e302f32342d3234203d3e20323731383631.roa (raw, json)
Hash identifier:          IkiyFooVTWdDNXaKwXaoNxVhjCigrqaUfRySu9Lc08M=
Subject key identifier:   6D:54:1F:1F:01:9A:43:BB:A7:8C:94:59:C1:21:6D:89:A9:9C:88:0C
Certificate issuer:       /CN=8CECD8998683594E93B9972D95397E3623CDB7A8
Certificate serial:       104921F2586711812EDCA238536F6C62F2E11757
Authority key identifier: 8C:EC:D8:99:86:83:59:4E:93:B9:97:2D:95:39:7E:36:23:CD:B7:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8CECD8998683594E93B9972D95397E3623CDB7A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/3133312e3235352e3133362e302f32342d3234203d3e20323731383631.roa
Signing time:             Mon 27 Apr 2026 14:40:00 +0000
ROA not before:           Mon 27 Apr 2026 14:35:00 +0000
ROA not after:            Mon 26 Apr 2027 14:40:00 +0000
asID:                     271861
IP address blocks:        131.255.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8CECD8998683594E93B9972D95397E3623CDB7A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:49:21:f2:58:67:11:81:2e:dc:a2:38:53:6f:6c:62:f2:e1:17:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CECD8998683594E93B9972D95397E3623CDB7A8
        Validity
            Not Before: Apr 27 14:35:00 2026 GMT
            Not After : Apr 26 14:40:00 2027 GMT
        Subject: CN=6D541F1F019A43BBA78C9459C1216D89A99C880C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c8:f2:a7:14:6f:d1:33:48:31:64:21:fa:81:
                    74:9d:8e:69:10:1a:95:7b:8a:f8:3d:1d:c4:15:56:
                    a9:5a:8e:ca:9b:76:8c:a6:0e:21:17:eb:60:2a:68:
                    b7:e8:d2:60:a1:df:bd:dd:6c:d4:24:02:b9:95:44:
                    b5:17:e5:9e:cf:55:b7:85:67:c7:92:d4:81:17:0c:
                    b6:06:97:e2:60:a2:cd:37:d2:c2:70:ec:e9:9f:84:
                    93:d4:50:fe:1c:44:00:51:9b:77:f9:47:43:19:e7:
                    32:33:8a:31:17:51:5f:d2:8e:94:9f:ff:da:04:4d:
                    f6:3c:84:d6:f0:d2:d0:e4:f6:88:dc:63:44:51:6a:
                    a7:b2:44:23:36:2c:87:43:f4:d7:d9:66:e5:ca:dc:
                    44:2c:15:6c:b5:0b:4a:70:e5:45:16:42:a1:cd:60:
                    dc:7f:93:87:d5:41:2b:aa:d3:4b:b1:47:2c:91:99:
                    d8:78:8e:bd:e0:bb:3f:ad:52:08:81:ec:90:13:de:
                    bf:e3:64:be:ce:d6:37:37:97:ad:99:12:f9:86:96:
                    93:b4:2b:ef:2d:cd:4d:b9:18:7e:de:7c:65:af:3e:
                    da:e7:45:1b:6e:40:7a:16:c5:d9:25:58:9a:91:af:
                    cf:77:ea:4e:a0:ce:99:52:9e:59:9e:ff:b5:d1:8d:
                    c8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:54:1F:1F:01:9A:43:BB:A7:8C:94:59:C1:21:6D:89:A9:9C:88:0C
            X509v3 Authority Key Identifier:
                keyid:8C:EC:D8:99:86:83:59:4E:93:B9:97:2D:95:39:7E:36:23:CD:B7:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8CECD8998683594E93B9972D95397E3623CDB7A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/3133312e3235352e3133362e302f32342d3234203d3e20323731383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:e8:70:a4:97:b2:e6:8b:40:39:aa:cb:56:16:2f:2b:96:95:
         48:19:35:dd:59:e2:29:09:6d:9b:bc:47:df:39:ea:91:45:56:
         ad:41:41:2c:7b:f5:f0:64:a4:4f:23:d4:f8:3a:72:df:73:58:
         b5:85:bf:7b:ed:39:a0:3b:e5:1e:db:ed:a9:2f:bf:87:fa:5c:
         a1:15:4c:34:a4:a2:fa:5e:28:f0:48:4e:4d:51:eb:88:e0:9c:
         5a:74:55:26:12:b0:e0:5a:bc:47:4f:d6:7d:9c:b2:ae:fc:b9:
         5e:83:4e:e1:4a:11:41:ef:21:cd:e9:80:fa:f5:fe:9d:c2:93:
         19:61:d0:4f:5b:f6:36:f7:39:9e:b0:e4:f8:04:12:6a:b7:59:
         20:1e:c5:04:74:4d:d6:04:d5:e3:f1:73:c2:16:5f:02:7b:6f:
         91:a9:4f:e6:20:2d:dc:ab:f5:b9:0a:c1:10:08:8c:49:cd:1b:
         6b:0d:67:ca:2d:e7:08:05:af:bc:80:c4:9e:d3:4b:68:b5:da:
         8f:45:a4:aa:31:d4:92:91:9f:31:00:ae:ec:a2:26:21:70:98:
         12:0e:81:ee:57:84:50:88:7e:16:91:d9:22:d9:94:ba:9e:56:
         d7:e8:f9:31:4a:2e:57:fc:50:79:01:dd:0d:3f:7e:f0:ad:9f:
         b6:19:7c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:04:27 2026 by rpki-client