Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233382e302f32342d3234203d3e203238333937.roa
File:                     3133312e302e3233382e302f32342d3234203d3e203238333937.roa (raw, json)
Hash identifier:          3oTr2fjTUKB9Mra6ZL37SjAfbAeXA+vFicUtxr9gsrg=
Subject key identifier:   81:9D:31:EA:56:DA:0E:2E:A3:4E:19:28:E0:BA:4A:01:BB:3E:BC:5A
Certificate issuer:       /CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
Certificate serial:       2A243A67D5256A8E37BF4AFB6FFF0BA38054E014
Authority key identifier: 9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233382e302f32342d3234203d3e203238333937.roa
Signing time:             Mon 23 Mar 2026 23:35:45 +0000
ROA not before:           Mon 23 Mar 2026 23:30:45 +0000
ROA not after:            Mon 22 Mar 2027 23:35:45 +0000
asID:                     28397
IP address blocks:        131.0.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:24:3a:67:d5:25:6a:8e:37:bf:4a:fb:6f:ff:0b:a3:80:54:e0:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
        Validity
            Not Before: Mar 23 23:30:45 2026 GMT
            Not After : Mar 22 23:35:45 2027 GMT
        Subject: CN=819D31EA56DA0E2EA34E1928E0BA4A01BB3EBC5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:02:1a:93:7e:33:7c:83:a1:a2:51:1d:46:3f:
                    af:9b:21:80:39:44:5e:fb:84:69:fa:02:60:bc:cc:
                    53:af:81:50:8a:e8:e6:38:0a:f8:f8:73:0e:a1:08:
                    5a:b5:dd:79:1b:1a:ef:15:c2:c1:13:ec:15:8b:c8:
                    da:6e:19:c5:ff:25:d8:26:9f:0f:55:23:38:7a:35:
                    97:5a:b8:44:63:80:30:65:43:2f:16:43:c3:4d:82:
                    f7:fa:fb:02:dc:b7:53:28:56:c9:07:2b:5c:d1:e3:
                    23:9d:5d:16:7e:6d:61:fe:6b:b2:59:1e:aa:50:de:
                    58:a2:f0:16:66:3f:c2:cb:77:ad:be:b7:4f:85:00:
                    85:4a:dd:d2:52:08:ae:be:b2:01:c2:89:aa:29:de:
                    7b:2f:2f:65:30:1c:b3:35:06:a5:37:ee:7e:43:f3:
                    ff:c9:3a:05:91:54:9f:03:3f:a5:a7:4d:c1:a8:1d:
                    c1:34:23:b9:3f:f0:33:2e:42:19:71:f4:61:3e:d8:
                    53:aa:0d:ce:b1:ff:85:50:08:25:c2:3d:1e:6e:81:
                    bb:46:3d:15:d6:8f:1a:23:62:8c:11:14:71:59:16:
                    17:21:a5:97:f3:2b:0c:f9:91:78:41:48:1f:e4:45:
                    20:27:a4:3f:67:ed:fd:41:75:be:2d:59:6f:a8:e5:
                    5b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9D:31:EA:56:DA:0E:2E:A3:4E:19:28:E0:BA:4A:01:BB:3E:BC:5A
            X509v3 Authority Key Identifier:
                keyid:9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233382e302f32342d3234203d3e203238333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:16:eb:8e:2b:dc:27:01:b5:e6:5e:c8:8d:40:2c:cc:92:fb:
         93:52:12:d2:36:66:c0:fe:0c:c8:60:59:06:2e:83:7c:c1:a2:
         e3:df:33:1b:14:c7:13:ad:a7:cf:c2:57:17:be:00:f7:7f:f3:
         3b:81:55:d2:bc:e2:7c:6f:0f:67:3e:7a:cb:b3:54:30:e7:27:
         90:4e:df:44:73:bc:0f:b3:fd:49:be:80:9d:14:84:ec:5f:42:
         ce:c3:f1:61:1d:04:31:20:3f:ea:76:9c:dc:7e:85:38:ff:8b:
         0b:46:6b:42:5f:cf:97:88:23:71:c5:06:6a:d1:c6:ba:ae:62:
         9f:c3:a0:e2:30:cf:f4:55:5d:5b:e2:1d:d7:cd:e6:d6:58:e1:
         c3:6d:79:7c:0e:54:48:7c:8f:4e:cf:a5:06:bf:52:45:c3:3a:
         f7:6e:cc:74:6b:1e:74:63:bd:f2:c3:4b:70:e0:17:31:27:6e:
         19:44:1c:e2:76:07:c7:fb:74:f5:6c:ea:30:fa:0e:54:be:81:
         ed:82:32:08:45:31:2a:14:20:c4:4d:9b:6a:d3:50:bc:33:f8:
         9a:b2:80:ce:72:f6:60:bc:aa:6a:6a:ee:bd:97:26:71:70:3f:
         97:5c:ac:fc:ad:6a:92:90:fe:7f:63:92:f7:a4:3f:94:dd:1e:
         24:c4:1b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:17:12 2026 by rpki-client