Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/3133312e3235352e3133382e302f32342d3234203d3e20323731383631.roa
File:                     3133312e3235352e3133382e302f32342d3234203d3e20323731383631.roa (raw, json)
Hash identifier:          qkvyI54UDboW3F0VWzM2EohidnBb0E4CmepOLSe37A4=
Subject key identifier:   FF:9B:44:C4:7C:7F:E5:8C:7E:A4:43:5E:CE:2A:4C:76:A1:8C:80:99
Certificate issuer:       /CN=8CECD8998683594E93B9972D95397E3623CDB7A8
Certificate serial:       3BBC0FAF335707468CB2D4DC676875E060B94D7E
Authority key identifier: 8C:EC:D8:99:86:83:59:4E:93:B9:97:2D:95:39:7E:36:23:CD:B7:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8CECD8998683594E93B9972D95397E3623CDB7A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/3133312e3235352e3133382e302f32342d3234203d3e20323731383631.roa
Signing time:             Mon 27 Apr 2026 14:40:00 +0000
ROA not before:           Mon 27 Apr 2026 14:35:00 +0000
ROA not after:            Mon 26 Apr 2027 14:40:00 +0000
asID:                     271861
IP address blocks:        131.255.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8CECD8998683594E93B9972D95397E3623CDB7A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:bc:0f:af:33:57:07:46:8c:b2:d4:dc:67:68:75:e0:60:b9:4d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CECD8998683594E93B9972D95397E3623CDB7A8
        Validity
            Not Before: Apr 27 14:35:00 2026 GMT
            Not After : Apr 26 14:40:00 2027 GMT
        Subject: CN=FF9B44C47C7FE58C7EA4435ECE2A4C76A18C8099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:62:e3:e1:a0:54:d0:5c:3c:01:0b:d3:d2:a0:
                    71:1a:6d:c1:72:e9:76:33:55:09:3c:a7:bd:9f:d8:
                    f7:f0:fb:a8:09:84:98:3d:5c:38:6a:bd:fd:f7:9d:
                    30:e6:de:dc:eb:ea:e9:5c:e3:1f:72:3d:51:68:4f:
                    c6:79:c8:80:5a:7f:b8:48:bd:f1:74:ee:3e:58:c8:
                    2f:f5:3b:06:a1:24:18:e6:b9:af:1e:a8:79:7b:11:
                    30:17:27:b3:1a:ec:f3:b5:cb:d0:e4:22:68:b1:22:
                    06:25:23:ae:27:85:6a:1e:a7:93:f6:17:91:e5:27:
                    2f:fd:e8:31:82:51:88:af:35:5f:20:2b:65:d4:6e:
                    60:0c:31:11:e3:67:d4:ae:39:a1:61:6a:58:e0:98:
                    4b:7a:85:1f:39:8a:1e:b8:e9:bd:35:c3:55:80:a4:
                    40:61:47:42:0a:7d:88:14:63:51:3a:87:78:8d:78:
                    bc:11:21:d8:f3:19:fb:b1:77:5b:46:82:72:9d:ce:
                    3c:26:2c:5f:ad:30:2c:0e:20:6c:f9:ac:d4:75:59:
                    e9:a6:0a:9e:bc:f5:b3:37:9f:86:6b:78:51:cf:d4:
                    e6:1b:ca:6b:16:29:18:b0:77:f3:74:e8:d8:c2:4b:
                    47:54:87:40:9d:10:97:f4:56:60:44:54:c4:a4:9f:
                    6c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9B:44:C4:7C:7F:E5:8C:7E:A4:43:5E:CE:2A:4C:76:A1:8C:80:99
            X509v3 Authority Key Identifier:
                keyid:8C:EC:D8:99:86:83:59:4E:93:B9:97:2D:95:39:7E:36:23:CD:B7:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8CECD8998683594E93B9972D95397E3623CDB7A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/3133312e3235352e3133382e302f32342d3234203d3e20323731383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:a3:f4:f7:05:35:0b:82:7e:1e:09:73:bd:78:82:e3:e1:11:
         ec:b1:96:77:b8:d2:34:76:0b:9f:23:a8:62:c3:14:5c:45:97:
         a7:7c:dd:32:c1:db:95:c3:7a:23:d6:81:a9:ab:4a:b6:b7:c4:
         bd:46:74:b7:64:93:87:c2:59:3a:c9:99:16:51:63:9d:f6:ad:
         5c:9d:ff:57:1d:c5:3f:4f:c0:10:4f:09:cc:1d:45:d4:b5:6b:
         48:2f:59:a0:5d:44:5f:92:72:83:8c:ae:e1:3b:be:9e:81:c9:
         93:d9:14:3c:db:89:e5:89:73:b2:13:be:e4:44:e6:41:b4:42:
         fe:17:e8:c4:ac:79:c3:ba:66:90:bd:5c:f9:37:ad:83:27:b0:
         29:d8:3d:a7:34:9e:ee:3f:c2:97:ef:8e:f7:f7:cd:1d:17:c7:
         99:76:09:7c:0e:3d:07:25:c6:03:9d:48:05:1a:b8:d2:45:53:
         4a:41:1e:a8:7e:a7:32:56:ed:c4:0d:57:0d:e9:8e:d8:d9:3f:
         49:63:29:05:ca:1f:77:94:70:bd:e9:f3:f5:3c:82:d9:55:44:
         ea:f7:29:5f:e7:fe:cf:bd:87:4d:81:7d:a6:ae:df:c6:63:de:
         80:0d:bb:44:11:10:d5:70:04:a0:a9:59:3f:94:81:14:f5:48:
         9f:f2:49:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:03:57 2026 by rpki-client