Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3133382e3131372e3232392e302f32342d3234203d3e203238343631.roa
File:                     3133382e3131372e3232392e302f32342d3234203d3e203238343631.roa (raw, json)
Hash identifier:          drrsM66MY3V6po4e9uVi922WdwpCvGL0xYLObXXL0iQ=
Subject key identifier:   98:15:BC:1E:6A:88:9F:60:4E:11:86:B9:E1:AD:0D:0F:DF:E5:11:C8
Certificate issuer:       /CN=3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6
Certificate serial:       07355F1E0E0D605057ABF73D33886F1090CAC86E
Authority key identifier: 36:32:90:0A:5F:3F:72:A0:6C:F6:EC:B7:B9:D3:B1:E3:35:6D:A9:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3133382e3131372e3232392e302f32342d3234203d3e203238343631.roa
Signing time:             Mon 23 Mar 2026 19:35:41 +0000
ROA not before:           Mon 23 Mar 2026 19:30:41 +0000
ROA not after:            Mon 22 Mar 2027 19:35:41 +0000
asID:                     28461
IP address blocks:        138.117.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 05:14:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:35:5f:1e:0e:0d:60:50:57:ab:f7:3d:33:88:6f:10:90:ca:c8:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6
        Validity
            Not Before: Mar 23 19:30:41 2026 GMT
            Not After : Mar 22 19:35:41 2027 GMT
        Subject: CN=9815BC1E6A889F604E1186B9E1AD0D0FDFE511C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:65:61:80:af:ff:a2:b8:90:82:e2:b1:37:f5:
                    31:34:61:a3:cc:01:cd:eb:db:a0:7d:6f:36:a5:1c:
                    00:0f:44:67:bb:8a:e0:8a:a0:0f:c1:ee:03:60:16:
                    c8:32:52:3e:f2:03:4d:94:fb:16:8e:23:44:7b:a5:
                    d1:b3:63:07:84:9f:71:49:d0:91:ab:b9:94:a8:2f:
                    2f:a4:66:43:32:cb:ba:ea:98:23:d9:5c:41:96:be:
                    47:ec:8a:96:1d:7b:93:f8:fc:0a:f8:a4:0a:32:10:
                    a8:e0:0d:b6:e6:f5:0a:e6:a3:c3:d9:23:3e:af:87:
                    e1:7a:1f:71:87:cd:67:f9:35:4b:5a:e1:86:9d:5d:
                    b4:d3:a3:87:23:2a:45:f9:a9:57:f3:38:78:dd:fb:
                    8d:df:1c:7f:4b:3e:bd:5f:23:b7:ad:0f:0d:5b:ac:
                    8e:1e:5a:1d:2d:9c:74:ff:cd:56:67:df:63:38:c6:
                    98:4e:bd:d3:5a:d6:ce:2f:1b:0d:35:24:09:3f:7e:
                    7d:6c:e2:08:30:f7:21:7c:26:c1:39:d8:fc:cd:59:
                    d3:18:ab:7f:7e:26:a1:c8:21:fb:2a:7c:94:77:51:
                    48:1e:07:96:f2:8f:0a:f8:db:b3:cd:e8:3c:54:d9:
                    31:60:43:12:88:a6:7c:52:da:9d:fe:17:65:f4:3f:
                    a5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:15:BC:1E:6A:88:9F:60:4E:11:86:B9:E1:AD:0D:0F:DF:E5:11:C8
            X509v3 Authority Key Identifier:
                keyid:36:32:90:0A:5F:3F:72:A0:6C:F6:EC:B7:B9:D3:B1:E3:35:6D:A9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3133382e3131372e3232392e302f32342d3234203d3e203238343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:8b:5c:bc:cc:e5:37:c6:a5:94:10:83:57:12:e2:ea:54:1c:
         de:4b:5c:19:53:39:2f:ae:2e:c6:24:4e:f0:24:94:7d:da:20:
         f5:a3:12:06:c6:67:ab:41:10:8f:a1:52:4e:b1:ce:0c:3c:ac:
         52:3e:8e:57:69:10:98:b5:46:95:56:de:99:3f:11:5a:86:75:
         28:9b:0e:1f:8e:6a:ee:6d:6b:bf:d0:58:24:ed:cc:37:1f:3a:
         17:4f:3c:94:f4:e7:23:12:1b:08:e2:91:19:3e:23:d8:82:30:
         cf:1e:15:64:19:24:ac:02:53:19:00:67:f1:55:40:37:7c:0c:
         6a:c4:77:a8:c7:cd:ef:1a:20:72:8f:8c:18:08:1d:ae:5d:a2:
         f3:8b:58:ca:9d:c3:9f:a3:cd:11:d6:24:37:05:89:5d:80:d1:
         63:8e:80:cb:95:c7:9c:27:d0:b6:42:03:91:a2:bb:c0:a8:20:
         04:0e:1d:e1:3d:73:b8:d4:9a:95:e6:54:ff:24:3b:12:37:bb:
         d3:6b:15:bd:43:94:fa:24:2e:1e:47:40:21:09:d4:58:c0:4e:
         28:b1:fd:b0:e7:9f:53:7f:80:e0:e1:5e:89:74:17:d6:ca:b1:
         54:42:2d:db:bf:26:4a:9b:95:c8:84:7f:01:b3:fb:f0:be:bb:
         3a:26:ca:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:42:17 2026 by rpki-client