Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136382e302f32342d3234203d3e20323639393138.roa
File:                     3133312e37322e3136382e302f32342d3234203d3e20323639393138.roa (raw, json)
Hash identifier:          2sphR+/aGmnV2JnSDVUr2JID7n7okCRuodAh+1dYyRw=
Subject key identifier:   64:90:F4:DF:B7:C5:EE:F7:A1:55:CE:22:60:D0:8A:E6:D8:18:D6:17
Certificate issuer:       /CN=94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395
Certificate serial:       3117347192D7DF11E73F5BFD40C6C5892FF30F12
Authority key identifier: 94:D9:2E:DB:BD:4E:B9:AC:D1:A6:7B:58:FD:CB:19:00:48:B1:D3:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136382e302f32342d3234203d3e20323639393138.roa
Signing time:             Fri 21 Aug 2026 03:25:00 +0000
ROA not before:           Fri 21 Aug 2026 03:20:00 +0000
ROA not after:            Fri 20 Aug 2027 03:25:00 +0000
asID:                     269918
IP address blocks:        131.72.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 10:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:17:34:71:92:d7:df:11:e7:3f:5b:fd:40:c6:c5:89:2f:f3:0f:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395
        Validity
            Not Before: Aug 21 03:20:00 2026 GMT
            Not After : Aug 20 03:25:00 2027 GMT
        Subject: CN=6490F4DFB7C5EEF7A155CE2260D08AE6D818D617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b3:4c:03:5c:fb:ea:d7:dc:72:0b:17:41:e2:
                    fb:1a:67:fb:3a:70:9b:ff:78:d7:25:5e:15:c2:a7:
                    aa:b5:68:38:c7:fd:77:a3:a8:e3:79:a5:7b:26:e8:
                    0d:6b:ca:ef:61:10:1f:11:93:54:35:8c:2e:9f:a9:
                    0f:b3:c5:61:d6:11:58:eb:62:2e:6b:01:08:e3:df:
                    c0:cb:72:7b:d8:67:22:09:3a:32:f7:e5:69:a8:3f:
                    62:2a:d7:f9:b9:64:e9:80:94:b0:4d:77:1a:ab:12:
                    5b:44:2e:31:96:4a:d5:23:46:e7:3c:8c:8b:b0:48:
                    cd:f7:0d:2c:36:1c:e0:44:2e:da:0f:d4:0e:43:a0:
                    70:ef:e9:80:ab:61:eb:25:e5:03:84:22:5b:a2:c3:
                    63:f6:05:23:b5:b9:a4:ee:fb:3a:c3:69:85:16:b4:
                    5b:ce:02:b2:df:32:1c:16:9b:9a:a2:03:03:3a:06:
                    c7:ea:01:7d:14:81:a8:97:df:7c:83:02:fd:65:68:
                    ac:0a:d0:ad:b7:a8:6a:ab:9e:54:75:99:7a:34:e5:
                    71:7f:2b:e6:7e:32:79:4a:a7:58:74:db:2c:a7:a0:
                    9b:54:3a:46:1f:6d:bc:48:5b:d5:7f:95:4b:45:61:
                    b7:c7:28:cf:8d:4f:8e:32:59:6c:f4:ea:91:53:2b:
                    7a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:90:F4:DF:B7:C5:EE:F7:A1:55:CE:22:60:D0:8A:E6:D8:18:D6:17
            X509v3 Authority Key Identifier:
                keyid:94:D9:2E:DB:BD:4E:B9:AC:D1:A6:7B:58:FD:CB:19:00:48:B1:D3:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136382e302f32342d3234203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:80:81:50:12:49:80:6e:f6:a9:9e:32:87:35:ac:74:09:0d:
         db:82:0b:d3:57:c9:04:64:bf:12:8f:61:4d:b7:ed:4e:df:3b:
         c3:a8:29:96:38:ad:2a:4d:ea:07:a5:b0:30:00:85:3e:55:63:
         83:e0:6e:0b:e8:2c:cc:08:4d:b6:a4:4b:4b:f9:49:b2:a4:7f:
         e3:95:bf:a1:df:35:5a:71:ee:9a:86:0e:da:a7:b3:ae:1b:f2:
         21:ca:fd:5b:34:39:af:5f:09:d9:c2:75:e5:34:62:d9:ba:7c:
         00:a8:91:8d:9b:5b:a0:67:49:55:38:df:02:f6:d2:e2:db:da:
         e1:05:e9:f1:7d:bf:66:10:b8:38:78:5b:36:7c:bb:cc:b0:75:
         1f:e8:da:18:bc:c1:07:0d:d7:1c:f8:ed:13:d5:75:5a:a1:e8:
         8e:4c:54:e2:63:0f:f3:75:5c:d9:f5:ae:6b:b6:fa:42:ca:d9:
         0a:da:bb:62:58:3f:e7:dd:71:72:8c:5e:34:85:31:1b:b3:ca:
         51:5b:fa:53:05:6d:b2:2f:6b:25:96:b6:53:83:69:29:b7:91:
         6f:99:be:d9:e7:60:44:07:1e:fc:e6:3a:32:1e:73:be:b4:b2:
         64:c4:32:23:1b:aa:68:4e:43:61:b9:84:71:9e:1c:01:53:9c:
         e5:09:36:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:15:27 2026 by rpki-client