Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233392e302f32342d3234203d3e2033333536.roa
File:                     3133312e302e3233392e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          Qln7HiChrr6C78fkpg6tLJQnX6NL/KG5CeF/Yc5n3H4=
Subject key identifier:   68:A0:8C:C5:7B:19:00:18:4A:0B:B5:D7:D1:E1:BB:B8:43:62:83:BE
Certificate issuer:       /CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
Certificate serial:       0665513D8836AD626963E390D300D90D4197059B
Authority key identifier: 9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233392e302f32342d3234203d3e2033333536.roa
Signing time:             Fri 22 May 2026 02:10:00 +0000
ROA not before:           Fri 22 May 2026 02:05:00 +0000
ROA not after:            Fri 21 May 2027 02:10:00 +0000
asID:                     3356
IP address blocks:        131.0.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jun 2026 13:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:65:51:3d:88:36:ad:62:69:63:e3:90:d3:00:d9:0d:41:97:05:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
        Validity
            Not Before: May 22 02:05:00 2026 GMT
            Not After : May 21 02:10:00 2027 GMT
        Subject: CN=68A08CC57B1900184A0BB5D7D1E1BBB8436283BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1d:91:34:20:ce:fe:63:da:30:b5:b2:5f:0f:
                    9a:54:37:28:46:1c:38:c8:dc:5c:13:1f:94:02:3d:
                    f4:23:2c:1f:48:67:21:dc:7a:6b:50:cf:80:9d:4d:
                    b1:e3:4c:36:85:f4:47:91:a8:72:64:ef:50:90:c8:
                    21:cb:ef:f9:28:1e:69:32:f0:37:60:54:8b:12:bc:
                    cf:09:64:93:ab:be:50:1d:07:a9:12:e7:cf:ee:21:
                    8d:6f:98:9a:97:4c:3f:0f:11:c0:b3:41:7a:a1:da:
                    4f:5c:1b:ab:b5:81:e2:fb:b3:f0:c9:02:6e:e1:34:
                    90:81:26:d5:85:58:aa:ce:0c:4a:9d:f3:5d:5c:a6:
                    f6:6d:fe:b0:55:46:b2:22:83:0d:d5:3a:d5:2e:ae:
                    3e:35:eb:b2:2b:18:25:7b:41:61:b2:8c:29:bb:0b:
                    75:dd:85:5a:bc:56:17:4a:ab:50:1a:bb:ad:dd:67:
                    11:64:cd:e0:e1:10:0a:82:f2:c2:f7:08:1d:4a:12:
                    c2:6b:b9:9c:2b:1e:f0:5d:5d:72:12:4d:5f:be:5c:
                    ed:a7:11:2c:85:13:0e:47:28:72:34:a4:ae:89:f0:
                    87:d1:f5:d6:ea:c5:18:42:a7:59:28:50:99:1e:1b:
                    8d:b9:27:2b:b3:1c:ad:9a:ef:9f:af:7b:fe:0a:ce:
                    a4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A0:8C:C5:7B:19:00:18:4A:0B:B5:D7:D1:E1:BB:B8:43:62:83:BE
            X509v3 Authority Key Identifier:
                keyid:9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233392e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:95:62:9f:6c:f8:ec:55:fc:84:77:8e:44:cd:05:52:39:1d:
         15:c0:54:c4:72:17:56:a0:f9:9e:b4:c7:07:59:00:9e:e5:b3:
         70:17:f6:eb:fd:7c:37:92:99:4d:94:22:19:c7:0b:35:5f:cb:
         87:5b:f2:66:b7:a7:01:e0:75:d2:be:ca:69:a8:82:47:67:4d:
         c6:be:c1:41:31:ec:62:5c:9a:6a:a1:27:5b:e3:e2:2a:bf:70:
         8a:d6:de:7a:a9:03:a4:40:37:ba:7d:06:0c:0b:7e:99:66:a9:
         37:2a:04:35:5f:87:f2:ec:02:90:97:ee:e0:f0:c3:56:fd:9f:
         85:2d:6e:4d:6b:71:f2:c1:51:b7:66:32:a7:60:ce:73:c9:51:
         f7:f7:52:10:a4:b8:0a:5e:d2:2a:ed:63:79:cd:7f:9e:71:01:
         23:57:e8:d4:ca:c4:40:a4:2f:01:74:f1:f2:4d:24:4b:8c:f0:
         6b:05:82:9b:1e:dd:50:2e:d9:3e:b8:77:0a:5b:55:24:c6:f3:
         5c:e4:6e:0b:40:af:73:a6:61:2c:59:76:d5:84:ad:f3:f8:bc:
         8c:84:3f:d6:58:a7:a5:57:d0:59:e2:1e:7f:53:98:ae:8b:3f:
         64:6e:ec:4c:7b:9b:76:2e:64:29:17:25:ef:4e:39:9a:3e:fd:
         f7:17:5f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:01:59 2026 by rpki-client