Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/3133312e3235352e3133392e302f32342d3234203d3e20323731383631.roa
File:                     3133312e3235352e3133392e302f32342d3234203d3e20323731383631.roa (raw, json)
Hash identifier:          RMMthWE5hmmERVF01KmUdWF1oaQ5BPJ/mlsJu4TE+FI=
Subject key identifier:   60:EA:F0:76:0C:8D:EB:40:0A:61:6B:01:95:2A:10:47:14:A0:4E:05
Certificate issuer:       /CN=8CECD8998683594E93B9972D95397E3623CDB7A8
Certificate serial:       50F5CB8025DB71455BC69B62F042E22BD25E8AA1
Authority key identifier: 8C:EC:D8:99:86:83:59:4E:93:B9:97:2D:95:39:7E:36:23:CD:B7:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8CECD8998683594E93B9972D95397E3623CDB7A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/3133312e3235352e3133392e302f32342d3234203d3e20323731383631.roa
Signing time:             Wed 18 Mar 2026 15:34:26 +0000
ROA not before:           Wed 18 Mar 2026 15:29:26 +0000
ROA not after:            Wed 17 Mar 2027 15:34:26 +0000
asID:                     271861
IP address blocks:        131.255.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8CECD8998683594E93B9972D95397E3623CDB7A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f5:cb:80:25:db:71:45:5b:c6:9b:62:f0:42:e2:2b:d2:5e:8a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CECD8998683594E93B9972D95397E3623CDB7A8
        Validity
            Not Before: Mar 18 15:29:26 2026 GMT
            Not After : Mar 17 15:34:26 2027 GMT
        Subject: CN=60EAF0760C8DEB400A616B01952A104714A04E05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0a:22:fd:c1:61:05:1c:d7:93:06:cc:c7:9f:
                    15:22:3b:a7:ff:e9:1e:59:b4:38:2c:1f:5d:d2:26:
                    7b:55:a3:9b:10:06:20:dc:0f:6d:85:40:30:b2:ce:
                    a3:7d:ae:b7:47:f6:02:49:d2:3a:59:16:3d:8f:c0:
                    47:61:64:6e:70:5f:7a:85:dc:7f:0e:d4:3d:f4:89:
                    92:1a:bd:4c:ca:0a:3d:e1:93:be:9c:47:ac:70:43:
                    0f:eb:34:e3:3f:0a:7d:24:97:29:dd:1a:1f:67:93:
                    dc:f3:8c:5c:f7:90:22:2f:9c:a5:ac:a9:53:b6:5d:
                    7b:17:e2:f1:f5:b0:97:60:09:64:c3:45:d5:48:e2:
                    ba:5f:3d:e5:76:5a:f6:6f:8f:03:c4:6e:77:e5:92:
                    44:23:45:4c:46:54:60:3f:d3:31:69:77:e1:3e:6b:
                    a4:67:04:c6:cc:45:a3:77:01:ab:08:1a:43:bc:ce:
                    6d:54:8c:07:73:7a:aa:d0:a4:94:42:fa:12:52:c6:
                    65:2e:74:76:8b:8d:05:9d:21:5d:8e:8b:42:10:a6:
                    29:c4:b1:52:6f:c6:f4:de:04:bb:33:84:2d:b1:3e:
                    f6:45:58:e6:87:83:8f:66:3f:53:1e:51:13:43:2d:
                    97:3b:13:7d:78:1b:aa:61:89:00:bc:fa:43:52:9d:
                    19:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EA:F0:76:0C:8D:EB:40:0A:61:6B:01:95:2A:10:47:14:A0:4E:05
            X509v3 Authority Key Identifier:
                keyid:8C:EC:D8:99:86:83:59:4E:93:B9:97:2D:95:39:7E:36:23:CD:B7:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8CECD8998683594E93B9972D95397E3623CDB7A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/3133312e3235352e3133392e302f32342d3234203d3e20323731383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:7a:fa:19:ca:e8:72:dc:dd:00:72:06:8e:a1:4f:bd:db:b2:
         06:e5:0c:bd:67:9d:79:bd:7c:27:fd:5d:6c:7a:44:ce:03:8c:
         b9:a4:95:f4:76:06:36:b2:3c:c1:b0:d0:bc:07:cb:65:f1:4a:
         d6:33:a2:20:1c:da:47:c4:3e:52:84:2c:54:43:eb:83:05:61:
         e1:35:5a:83:51:ad:50:93:a2:02:9f:d1:51:53:c5:b0:0f:d0:
         84:6c:40:a0:39:11:2d:73:64:8c:28:fb:20:3f:1d:57:5c:66:
         c9:23:5b:44:e5:7b:f3:fd:06:1c:10:bc:80:55:86:40:76:12:
         b2:7e:c8:c6:90:28:c6:9b:d1:be:c9:2e:15:00:de:15:f1:55:
         27:91:75:59:84:0f:c6:58:16:30:ec:b3:5a:6b:2c:58:98:a5:
         94:ab:80:0d:29:86:e8:f5:83:09:e4:e2:27:31:d2:d6:de:ef:
         b6:8f:de:58:00:36:dc:2b:11:e5:5b:7e:3a:39:03:c9:a2:53:
         59:a0:61:26:5d:a3:f1:db:e2:86:db:3e:e1:32:19:1d:3f:ff:
         07:e5:af:00:f7:26:cf:53:28:1a:b8:23:31:c9:d4:7b:8f:b1:
         41:4b:24:92:42:07:fa:57:32:23:0b:8a:f8:c9:60:19:83:74:
         c9:b8:af:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:38:21 2026 by rpki-client