Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/3133312e3130302e36342e302f32322d3232203d3e2030.roa
File:                     3133312e3130302e36342e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          9zE7JhqGzMbEE6+zePFltvJHoHmnktZKyUB59Bxm+gE=
Subject key identifier:   8F:F6:1A:76:23:19:3E:C8:D8:E3:EC:8E:B2:B1:DE:44:08:5B:69:EC
Certificate issuer:       /CN=4C1381453502913CB38DA6219251958EE6E0F09E
Certificate serial:       62A857C3BCD5C30DDB7F10BEB1CB68409E671AA9
Authority key identifier: 4C:13:81:45:35:02:91:3C:B3:8D:A6:21:92:51:95:8E:E6:E0:F0:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C1381453502913CB38DA6219251958EE6E0F09E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/3133312e3130302e36342e302f32322d3232203d3e2030.roa
Signing time:             Mon 20 Jul 2026 16:15:03 +0000
ROA not before:           Mon 20 Jul 2026 16:10:03 +0000
ROA not after:            Mon 19 Jul 2027 16:15:03 +0000
asID:                     0
IP address blocks:        131.100.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/4C1381453502913CB38DA6219251958EE6E0F09E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/4C1381453502913CB38DA6219251958EE6E0F09E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C1381453502913CB38DA6219251958EE6E0F09E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a8:57:c3:bc:d5:c3:0d:db:7f:10:be:b1:cb:68:40:9e:67:1a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C1381453502913CB38DA6219251958EE6E0F09E
        Validity
            Not Before: Jul 20 16:10:03 2026 GMT
            Not After : Jul 19 16:15:03 2027 GMT
        Subject: CN=8FF61A7623193EC8D8E3EC8EB2B1DE44085B69EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1f:15:21:9a:73:5f:18:99:9e:b9:97:96:d6:
                    74:55:43:5b:55:78:da:57:1d:da:8d:6a:64:9c:ec:
                    17:8a:43:f4:ca:73:43:32:ae:eb:73:ff:1a:78:ad:
                    8f:6c:f1:47:bc:8f:5a:68:71:7b:6f:65:33:ac:01:
                    1d:19:8c:39:a0:b0:79:46:48:48:ee:ff:31:18:5a:
                    7a:88:be:26:13:ef:23:59:94:54:77:ab:8a:fc:c4:
                    a6:e2:63:3f:44:65:6a:76:4d:ec:12:00:1f:e3:fa:
                    50:c0:91:58:c9:7b:91:5a:79:c6:1d:93:5b:d5:cd:
                    32:b7:72:2e:22:03:0d:b4:bf:da:50:d8:5b:e6:26:
                    5f:0f:42:2d:e3:a3:19:30:3d:f2:6e:72:91:e2:79:
                    c6:84:2e:65:08:1e:0f:39:b9:8d:23:95:d7:2f:de:
                    90:4c:18:e0:09:94:8a:96:53:2b:d3:89:aa:ef:63:
                    98:a3:01:2b:be:fb:47:e2:68:b1:4c:e5:01:6d:e0:
                    0c:a2:08:c8:f7:6c:64:78:97:f1:0f:44:f9:6d:54:
                    d1:9d:1b:10:83:75:9e:43:d8:86:ff:7c:e7:f2:3f:
                    a3:13:b9:92:fd:2d:8b:e0:b1:0d:06:55:cd:aa:1e:
                    1a:5c:42:ec:7b:d4:c5:cb:8a:b8:ef:38:db:37:e2:
                    4d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F6:1A:76:23:19:3E:C8:D8:E3:EC:8E:B2:B1:DE:44:08:5B:69:EC
            X509v3 Authority Key Identifier:
                keyid:4C:13:81:45:35:02:91:3C:B3:8D:A6:21:92:51:95:8E:E6:E0:F0:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/4C1381453502913CB38DA6219251958EE6E0F09E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C1381453502913CB38DA6219251958EE6E0F09E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/3133312e3130302e36342e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:fb:88:9e:3e:d7:01:b0:46:f2:26:24:8e:5e:8b:42:e1:08:
         11:7b:66:8d:49:1b:a3:1f:b2:99:53:db:e3:9a:59:14:bf:5a:
         aa:49:b3:a7:8f:be:54:73:25:33:9f:15:e3:b7:17:2d:4a:5a:
         07:25:fd:cb:50:99:25:4d:fc:3b:bf:c2:ad:57:88:a0:b8:1e:
         93:b7:5d:e8:52:72:d0:1a:20:15:0a:30:20:08:84:51:41:18:
         7c:b3:11:85:dc:4b:75:69:f3:0b:f8:5a:91:83:4f:5d:f5:33:
         ac:ae:c2:ca:85:c0:75:b7:52:ac:05:e0:a3:65:79:d9:9c:16:
         93:f2:89:e3:56:be:d3:5b:82:40:e1:dd:eb:44:4b:77:54:a7:
         8b:23:fb:9e:08:75:b9:54:4e:cf:8c:20:f9:21:5e:41:9c:30:
         c2:3a:19:9b:72:46:28:00:17:4d:79:4a:1b:75:ad:f6:c6:30:
         10:e8:a6:81:d5:35:93:15:7d:d7:b1:20:26:36:da:c1:d2:d8:
         2b:2e:23:34:95:b9:47:dd:2f:11:d7:0d:52:e9:d8:3a:74:5e:
         9a:23:ca:f8:4a:75:ef:83:a4:13:bc:5e:fd:2b:97:90:6e:06:
         d9:d0:50:50:28:d7:be:99:d5:a9:71:c0:67:79:5a:e2:cb:09:
         de:86:3c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:43:39 2026 by rpki-client