Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B09DDFECDFE971650CB211880BDF132ECCC565945625A373C0E558AB3B9C5CFA/0/3230312e3133312e3131392e302f32342d3234203d3e20323633383235.roa
File:                     3230312e3133312e3131392e302f32342d3234203d3e20323633383235.roa (raw, json)
Hash identifier:          UnxO9VJEQAt/9HkNcui7bgPUkeIs9/41ykaI0WLOsUg=
Subject key identifier:   E7:E1:34:BB:B9:96:97:B8:2E:8B:41:43:A4:B5:FD:A1:71:1E:4E:83
Certificate issuer:       /CN=386B8BAEFE6F1051BFF297F2929E4BD1065BA949
Certificate serial:       53FC5949C5E5150CFAA64DBED7EA8966C5781C09
Authority key identifier: 38:6B:8B:AE:FE:6F:10:51:BF:F2:97:F2:92:9E:4B:D1:06:5B:A9:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/386B8BAEFE6F1051BFF297F2929E4BD1065BA949.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B09DDFECDFE971650CB211880BDF132ECCC565945625A373C0E558AB3B9C5CFA/0/3230312e3133312e3131392e302f32342d3234203d3e20323633383235.roa
Signing time:             Fri 01 May 2026 20:40:42 +0000
ROA not before:           Fri 01 May 2026 20:35:42 +0000
ROA not after:            Fri 30 Apr 2027 20:40:42 +0000
asID:                     263825
IP address blocks:        201.131.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B09DDFECDFE971650CB211880BDF132ECCC565945625A373C0E558AB3B9C5CFA/0/386B8BAEFE6F1051BFF297F2929E4BD1065BA949.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B09DDFECDFE971650CB211880BDF132ECCC565945625A373C0E558AB3B9C5CFA/0/386B8BAEFE6F1051BFF297F2929E4BD1065BA949.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/386B8BAEFE6F1051BFF297F2929E4BD1065BA949.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fc:59:49:c5:e5:15:0c:fa:a6:4d:be:d7:ea:89:66:c5:78:1c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=386B8BAEFE6F1051BFF297F2929E4BD1065BA949
        Validity
            Not Before: May  1 20:35:42 2026 GMT
            Not After : Apr 30 20:40:42 2027 GMT
        Subject: CN=E7E134BBB99697B82E8B4143A4B5FDA1711E4E83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9a:6c:82:c6:86:8a:fb:78:10:2f:f6:aa:8a:
                    bb:19:ad:fe:bb:e1:b0:d3:9f:13:d9:0d:e7:fa:91:
                    c8:65:99:f0:73:3a:57:c4:00:8f:e2:60:a6:f5:00:
                    3a:30:20:47:e5:36:25:2a:91:d6:db:ab:7c:9d:2f:
                    2e:19:fc:7d:49:d5:97:38:52:47:1c:c6:ff:78:20:
                    64:a3:6b:74:e5:3c:c8:c8:6e:17:50:32:e3:1c:e5:
                    4d:52:56:0c:ac:88:8c:92:ba:1e:0c:a8:e5:2b:e9:
                    a7:d1:c0:ab:1e:69:cb:ee:d6:c5:8e:53:19:4f:f6:
                    26:d2:da:b8:59:6d:9d:bf:ba:ba:03:81:e2:37:63:
                    01:7e:38:dd:62:04:f3:97:2e:d2:aa:ba:9e:b2:65:
                    0c:f1:bd:20:9e:39:8e:18:d4:31:a7:2b:ee:bf:7b:
                    fe:9b:8c:07:4f:fc:95:59:d2:dc:39:5e:a9:6c:30:
                    a9:8f:6c:60:91:32:f3:40:ea:b6:16:65:9f:ea:fc:
                    5a:a5:8d:bb:7d:3e:31:ee:03:fc:47:1e:18:05:b6:
                    65:21:a5:17:c9:12:c6:b1:d5:4c:4c:52:69:df:16:
                    f8:1b:ba:b4:d8:5e:0d:43:4f:20:15:5a:12:f7:33:
                    2b:1d:b6:8c:f0:1e:9b:3e:96:79:05:5b:6e:ce:9e:
                    fc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E1:34:BB:B9:96:97:B8:2E:8B:41:43:A4:B5:FD:A1:71:1E:4E:83
            X509v3 Authority Key Identifier:
                keyid:38:6B:8B:AE:FE:6F:10:51:BF:F2:97:F2:92:9E:4B:D1:06:5B:A9:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B09DDFECDFE971650CB211880BDF132ECCC565945625A373C0E558AB3B9C5CFA/0/386B8BAEFE6F1051BFF297F2929E4BD1065BA949.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/386B8BAEFE6F1051BFF297F2929E4BD1065BA949.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B09DDFECDFE971650CB211880BDF132ECCC565945625A373C0E558AB3B9C5CFA/0/3230312e3133312e3131392e302f32342d3234203d3e20323633383235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:35:a1:55:b6:11:84:57:3c:3f:48:f5:e3:24:c0:12:78:c2:
         33:2d:0e:4e:4f:a2:5f:24:f2:2c:0d:ff:67:a8:da:e0:84:5a:
         b5:51:ee:33:92:2a:f9:de:17:b7:fe:04:eb:ef:84:f8:f3:f3:
         41:43:bc:10:72:d5:51:b8:b6:1d:d5:ce:f4:5c:34:4b:1b:fe:
         20:4b:ba:0b:1b:b3:db:54:68:79:e8:5f:ae:5f:ea:ac:3d:d7:
         0b:94:de:c2:a6:99:08:5d:c4:39:9d:91:f2:9e:ef:85:d5:91:
         be:5f:b8:67:82:50:df:fb:d3:31:18:de:eb:e7:8f:e7:74:b3:
         f2:27:19:94:9d:d3:93:79:05:9b:b5:6f:48:ce:17:05:c3:3c:
         80:a3:c3:79:41:a8:67:08:71:94:a8:a2:e5:67:ba:76:36:f9:
         a2:44:5e:77:64:ca:73:fe:6f:69:5f:84:a8:81:a4:2a:a3:c1:
         f1:44:9e:f1:e1:53:5c:e8:e0:ca:29:42:c0:82:98:de:8f:68:
         99:ad:2a:59:34:8a:4d:d7:69:b9:0a:cb:f0:d1:a2:9e:c0:27:
         4e:0b:7e:38:de:27:5c:d8:6c:aa:9f:c3:85:9c:65:27:91:d6:
         37:8b:a9:67:02:4c:12:de:9c:8a:78:89:ff:c7:1c:fb:d4:94:
         07:1b:da:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:26:25 2026 by rpki-client