Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3133382e33362e31362e302f32322d3232203d3e2036393339.roa
File:                     3133382e33362e31362e302f32322d3232203d3e2036393339.roa (raw, json)
Hash identifier:          X2/lo6s0duLjBgho+JBOYMEaQ0Irtb4y0tdz3MiNb9I=
Subject key identifier:   56:E5:3F:85:4A:99:2D:5B:95:40:2F:88:FF:47:22:A7:B6:5F:33:60
Certificate issuer:       /CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E
Certificate serial:       216588D1ED4604A604068FF4D150C1F0C7195F18
Authority key identifier: BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3133382e33362e31362e302f32322d3232203d3e2036393339.roa
Signing time:             Thu 26 Mar 2026 17:25:01 +0000
ROA not before:           Thu 26 Mar 2026 17:20:01 +0000
ROA not after:            Thu 25 Mar 2027 17:25:01 +0000
asID:                     6939
IP address blocks:        138.36.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:65:88:d1:ed:46:04:a6:04:06:8f:f4:d1:50:c1:f0:c7:19:5f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E
        Validity
            Not Before: Mar 26 17:20:01 2026 GMT
            Not After : Mar 25 17:25:01 2027 GMT
        Subject: CN=56E53F854A992D5B95402F88FF4722A7B65F3360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4a:f2:7c:87:b8:18:2e:b3:ea:31:3e:70:87:
                    d1:f8:70:75:39:ef:f6:c8:d1:88:46:86:0f:ac:ec:
                    96:38:61:1f:ae:e6:aa:51:a2:d1:f2:1e:01:a2:21:
                    fb:11:70:49:84:90:17:25:db:51:20:ec:2d:55:f6:
                    cb:a8:bb:38:b6:77:03:31:ee:fe:bc:26:79:07:65:
                    99:25:f7:e3:8c:0f:45:e1:3c:06:b1:bd:07:72:4f:
                    27:dd:b0:7e:c9:f1:8c:e9:c7:84:3c:9d:0d:80:7e:
                    cc:70:94:b2:a3:24:50:73:88:1f:8d:a1:50:ba:50:
                    37:39:b1:37:1c:6d:99:c4:83:17:27:08:91:18:c7:
                    4e:19:ce:a5:ae:d9:84:4e:e1:14:2f:96:26:49:39:
                    e2:11:da:2b:18:f0:5d:b2:f8:c9:2f:a9:d5:b3:b6:
                    9c:30:bc:dc:fc:73:f8:30:73:83:cd:05:b5:e4:8e:
                    2f:2c:c0:8c:e5:77:ae:88:8c:10:19:92:39:2f:e2:
                    1f:ea:0e:94:73:70:a4:65:5c:40:37:c0:6f:31:5b:
                    2f:35:fb:8b:77:8f:25:e7:2d:22:ec:46:3a:d5:7e:
                    dd:b9:9d:2d:0b:13:38:ef:d5:0a:70:54:f6:5a:40:
                    17:6b:9f:c5:f4:a5:cc:c3:d3:ce:ce:ea:85:bc:f4:
                    dc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E5:3F:85:4A:99:2D:5B:95:40:2F:88:FF:47:22:A7:B6:5F:33:60
            X509v3 Authority Key Identifier:
                keyid:BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3133382e33362e31362e302f32322d3232203d3e2036393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:f2:bb:cc:15:3e:bf:7a:83:05:ae:aa:18:e3:51:d9:2c:5e:
         5a:a9:3b:ba:e4:b9:fd:11:af:4d:c0:d3:0b:0e:c2:e7:04:d0:
         a8:b1:4e:d8:28:40:ca:ce:c4:e0:60:94:29:62:4a:e6:5b:f6:
         20:f0:3a:fd:d1:97:28:65:fa:98:cd:9b:73:90:3b:20:dc:9f:
         77:a0:22:e6:8d:70:3f:d5:ea:bf:91:a5:e0:54:a3:be:a4:d9:
         7c:fe:aa:e2:b2:25:09:24:bd:d7:6b:83:7c:ba:b2:cb:ea:b0:
         a7:73:01:b5:3b:f4:a6:7a:dc:0c:97:e9:1b:89:31:31:fd:9f:
         ff:48:92:1b:3d:ea:a3:52:29:d9:25:d5:b2:34:c7:79:7f:e4:
         99:9e:b6:0a:cd:ae:39:4e:fe:a2:ff:67:89:97:6b:cb:2d:3f:
         df:a4:c4:86:41:29:b4:24:ee:54:a0:00:ed:aa:09:01:17:af:
         a0:84:15:47:88:50:42:d3:04:4c:fd:50:70:20:27:88:c1:84:
         89:4b:93:de:ba:1d:b7:bc:f6:b5:35:b7:2b:4a:8e:4e:53:dd:
         9e:14:b1:d1:a6:09:f9:98:08:af:9b:cc:17:f1:ae:4a:4d:21:
         85:45:a8:a4:8d:39:99:2d:4c:28:b9:c4:a9:ca:2d:28:16:67:
         dc:1b:bc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:36:57 2026 by rpki-client