Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233392e302f32342d3234203d3e203238333937.roa
File:                     3133312e302e3233392e302f32342d3234203d3e203238333937.roa (raw, json)
Hash identifier:          /bqKSvQEf6/3Wmvy2Y6FGNBTBXD/mQTej0jDZiij2sY=
Subject key identifier:   35:53:BB:B7:DE:8D:F3:60:21:F5:A6:71:CB:9F:EA:A2:00:1F:52:60
Certificate issuer:       /CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
Certificate serial:       6E0157260E9B27F37A5701B4EB3A4C6296F2B661
Authority key identifier: 9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233392e302f32342d3234203d3e203238333937.roa
Signing time:             Mon 23 Mar 2026 23:35:45 +0000
ROA not before:           Mon 23 Mar 2026 23:30:45 +0000
ROA not after:            Mon 22 Mar 2027 23:35:45 +0000
asID:                     28397
IP address blocks:        131.0.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:01:57:26:0e:9b:27:f3:7a:57:01:b4:eb:3a:4c:62:96:f2:b6:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
        Validity
            Not Before: Mar 23 23:30:45 2026 GMT
            Not After : Mar 22 23:35:45 2027 GMT
        Subject: CN=3553BBB7DE8DF36021F5A671CB9FEAA2001F5260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:99:c3:ef:c5:47:5c:7e:36:72:22:19:f8:33:
                    70:be:25:50:ab:d1:d0:fe:b3:41:a2:04:7e:4c:b3:
                    7c:c2:e9:34:fa:12:6f:54:1e:b7:b0:df:b1:88:54:
                    f8:9b:89:97:5a:1a:8f:d9:46:72:db:9c:40:fc:4e:
                    90:b1:a1:ec:0a:92:12:f8:4d:f6:65:83:51:00:10:
                    98:8e:62:56:22:f8:26:e2:20:b6:c6:d6:6c:94:51:
                    6a:12:de:f5:f0:1f:23:a2:99:e4:66:50:e2:83:6b:
                    3c:c2:a6:58:af:14:5d:98:a7:9e:f2:31:96:b8:ea:
                    5d:0d:ba:dd:e1:4e:2a:15:0a:09:a6:9f:23:c4:c6:
                    4a:ad:83:4f:fc:2f:ec:75:6d:c7:6b:1b:b2:eb:20:
                    1d:f0:db:d1:a7:c7:71:9c:0d:be:80:d1:1b:51:3c:
                    a6:46:58:6d:01:07:6d:3f:4d:02:5b:08:b6:3c:70:
                    86:27:49:69:3a:15:18:fb:6b:e4:53:6d:be:c0:8c:
                    b1:de:30:e0:2d:0a:f7:d2:55:c0:52:6c:f3:17:52:
                    a4:98:96:9a:8f:a7:9d:a0:37:9f:a4:92:8d:b3:16:
                    69:49:b1:55:09:5c:3b:7f:73:57:fd:54:32:50:97:
                    fc:44:60:d1:8b:50:e9:c2:1a:76:30:d7:4d:24:72:
                    d9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:53:BB:B7:DE:8D:F3:60:21:F5:A6:71:CB:9F:EA:A2:00:1F:52:60
            X509v3 Authority Key Identifier:
                keyid:9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233392e302f32342d3234203d3e203238333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:26:90:93:fc:91:0b:21:5c:b6:a9:29:f0:73:39:e0:94:b6:
         76:5e:7a:c4:71:2a:69:89:7d:df:99:11:e9:6b:7f:81:5f:64:
         0a:a2:39:0f:2e:4d:ed:e4:8f:fd:06:ed:c3:50:79:77:50:22:
         7b:c0:6a:ea:14:d3:bd:86:a1:b0:2b:6f:4e:ac:92:15:da:e8:
         35:d9:e9:74:2b:46:ed:0f:17:aa:42:4f:02:17:75:36:15:14:
         64:3d:ac:43:55:ac:93:11:d7:70:2d:43:8b:de:dc:47:25:53:
         2d:e7:0b:72:23:27:57:21:d5:1d:ff:a9:d0:77:54:1c:35:62:
         68:0a:ed:8f:49:01:17:c0:22:5a:2d:61:3c:94:4b:72:f4:66:
         bb:0a:4b:f7:22:d2:1f:3a:a9:13:b4:c2:a8:07:08:4b:ce:5c:
         61:9b:58:ba:cc:31:ac:9c:d0:45:b0:34:ae:43:6f:3b:54:59:
         5f:89:a1:1f:6d:bd:0a:71:56:58:db:fd:af:c6:9e:8e:69:38:
         b8:c6:9e:b0:56:a6:63:17:c2:81:98:0a:41:c2:7a:30:f9:e0:
         a8:ca:16:62:a0:1f:1e:8c:af:57:5c:5a:9c:ac:b6:48:19:e7:
         af:d9:a3:5a:45:6b:44:1d:d0:26:3b:27:4d:47:04:fb:1f:3f:
         39:69:89:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:16:55 2026 by rpki-client