Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233362e302f32322d3234203d3e20323730323230.roa
File:                     3133312e302e3233362e302f32322d3234203d3e20323730323230.roa (raw, json)
Hash identifier:          Md1Ctic5yC2HzvkQZXsNkkwjSoQZfATWvXF/62Bkngg=
Subject key identifier:   52:A0:C7:2C:C2:25:5E:17:CE:2F:03:6B:63:D6:A0:04:6C:3C:DE:F4
Certificate issuer:       /CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
Certificate serial:       0D8FF79234D1C123CE7558BD587D3CC9FA6E97FE
Authority key identifier: 9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233362e302f32322d3234203d3e20323730323230.roa
Signing time:             Thu 03 Sep 2026 01:25:00 +0000
ROA not before:           Thu 03 Sep 2026 01:20:00 +0000
ROA not after:            Thu 02 Sep 2027 01:25:00 +0000
asID:                     270220
IP address blocks:        131.0.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Sep 2026 22:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8f:f7:92:34:d1:c1:23:ce:75:58:bd:58:7d:3c:c9:fa:6e:97:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
        Validity
            Not Before: Sep  3 01:20:00 2026 GMT
            Not After : Sep  2 01:25:00 2027 GMT
        Subject: CN=52A0C72CC2255E17CE2F036B63D6A0046C3CDEF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4c:7f:6b:d7:e0:88:36:c1:03:1e:87:5c:6d:
                    83:e2:a2:e0:58:f9:dd:e5:84:14:2c:f8:c4:ad:32:
                    45:7f:28:91:4e:bc:8d:dc:11:0f:76:51:35:24:f4:
                    44:7a:74:a9:94:44:02:73:dc:bd:37:5e:53:b1:f5:
                    2a:02:f8:ba:eb:07:5a:4f:90:8f:df:d0:63:fc:61:
                    de:20:71:27:55:e3:b9:ba:2c:b4:b9:1e:8b:3a:45:
                    18:e8:e9:54:9c:08:0d:2d:f0:5c:98:26:0f:73:d4:
                    c1:29:18:68:f2:dc:6c:98:93:0b:ef:7f:33:b5:db:
                    d8:bd:52:4e:3a:20:88:70:77:41:98:d3:5a:a7:10:
                    af:4c:66:01:a7:66:85:32:df:52:ab:e3:b5:78:4e:
                    96:ec:77:c6:71:35:e8:eb:45:e6:91:77:6e:4e:3f:
                    41:dc:61:3c:bd:a4:d4:ec:35:b2:ce:bd:ed:f2:68:
                    ab:66:7f:38:32:c6:20:67:ee:d0:0a:2b:e9:4d:29:
                    fb:23:38:92:1f:72:ee:e5:ee:7f:5b:44:2f:4b:ed:
                    e6:64:2a:58:31:f0:04:01:e4:a4:8d:5e:ef:eb:b4:
                    51:24:95:66:61:05:e3:6e:8c:12:0b:cb:6b:f4:1a:
                    70:a0:b2:1b:b9:a4:6f:42:53:83:23:29:eb:e8:54:
                    93:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A0:C7:2C:C2:25:5E:17:CE:2F:03:6B:63:D6:A0:04:6C:3C:DE:F4
            X509v3 Authority Key Identifier:
                keyid:9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233362e302f32322d3234203d3e20323730323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:61:9c:6c:f9:14:e0:bb:e7:6d:5f:ed:07:29:f8:21:f3:a7:
         11:b2:ea:b0:dc:71:9c:d6:3d:53:10:a6:3e:ce:23:63:ae:69:
         0f:32:18:6f:8b:29:3f:7a:f1:3d:df:a8:48:6f:60:14:e0:df:
         b9:fe:af:a6:f4:aa:19:83:9b:af:db:1f:04:43:18:05:8b:13:
         c0:72:f4:f5:d0:3a:5e:c8:58:b4:f6:56:32:f5:60:72:bd:f5:
         41:74:f1:ba:2b:f9:c8:49:d6:a4:22:fc:7f:69:6d:47:e1:26:
         20:42:ed:21:9d:51:92:44:b0:af:11:f7:73:69:3e:39:b5:9b:
         15:77:8e:2d:29:9f:2c:fb:a0:4b:a0:a7:bf:83:8d:50:2d:21:
         10:60:44:2c:ed:9c:bf:b0:d8:c3:17:56:61:a9:ec:7e:b4:1b:
         f4:f0:6c:f8:56:c4:08:9b:45:8a:8c:a8:e0:27:79:6c:7a:10:
         7d:65:ac:d2:d6:09:3f:26:7a:65:30:f5:66:b7:df:7b:46:b9:
         13:1a:37:c6:6e:72:8f:9f:09:76:fe:a3:78:1b:1b:de:a5:dc:
         61:2f:7f:04:90:b5:34:90:c0:4a:32:ae:f6:18:b8:c3:5a:82:
         a6:2a:38:a0:9e:d0:94:31:ad:39:3b:df:9d:0a:88:d9:ba:50:
         6e:1f:85:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 19:33:17 2026 by rpki-client