Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3133382e3235352e3235322e302f32342d3234203d3e20323634363435.roa
File:                     3133382e3235352e3235322e302f32342d3234203d3e20323634363435.roa (raw, json)
Hash identifier:          ikDbMXCTylv6GPqFaYUMe5VdmqmU60tg1dJYEi0j78E=
Subject key identifier:   FB:01:BF:78:0E:80:73:ED:A7:7E:E9:26:4B:C5:6D:7B:B8:AF:21:A9
Certificate issuer:       /CN=11731D6A881F91008CAFED3BA0E6AEC61E625CF2
Certificate serial:       61597444F77FB3A64944429A9699079054374D1C
Authority key identifier: 11:73:1D:6A:88:1F:91:00:8C:AF:ED:3B:A0:E6:AE:C6:1E:62:5C:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3133382e3235352e3235322e302f32342d3234203d3e20323634363435.roa
Signing time:             Tue 26 May 2026 16:44:09 +0000
ROA not before:           Tue 26 May 2026 16:39:09 +0000
ROA not after:            Tue 25 May 2027 16:44:09 +0000
asID:                     264645
IP address blocks:        138.255.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:59:74:44:f7:7f:b3:a6:49:44:42:9a:96:99:07:90:54:37:4d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11731D6A881F91008CAFED3BA0E6AEC61E625CF2
        Validity
            Not Before: May 26 16:39:09 2026 GMT
            Not After : May 25 16:44:09 2027 GMT
        Subject: CN=FB01BF780E8073EDA77EE9264BC56D7BB8AF21A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bf:4f:d8:c9:26:6b:2e:ef:8d:8e:d2:9c:06:
                    84:d0:f9:d8:2f:da:df:f9:ef:1b:9e:8c:2a:66:21:
                    3d:43:3d:97:d4:7e:fc:d4:54:99:a3:36:41:2a:6a:
                    96:1d:07:db:4d:2f:3a:d0:3a:b6:12:36:ee:13:aa:
                    8d:b1:4e:98:d3:ed:e4:9d:14:b7:46:35:da:46:0e:
                    f6:76:46:60:11:f7:42:71:04:83:42:47:1c:b9:e7:
                    62:98:cd:d9:65:ef:ff:eb:7f:96:f8:10:92:9f:32:
                    27:14:66:ea:0a:0a:6a:5a:75:59:55:84:5e:93:49:
                    b7:24:57:a3:81:52:69:8c:05:26:90:77:75:63:19:
                    30:2d:41:7a:1e:f7:ee:77:1f:c1:9e:e6:44:b6:a7:
                    d2:02:8b:a5:c4:f1:9b:be:5d:d0:56:98:5e:3b:97:
                    f1:65:2d:bd:87:b8:87:55:41:35:57:a6:04:20:0d:
                    0c:e5:5b:4f:c6:54:61:e5:f9:c8:bb:1b:87:12:b7:
                    db:21:e5:92:6b:a9:92:48:6b:31:43:5b:bc:58:92:
                    2f:2d:44:3e:e5:7e:00:f1:73:55:15:c8:f2:bd:4f:
                    8b:0b:ae:4d:19:13:c2:f7:23:f5:92:1c:7a:fa:12:
                    89:d1:4e:92:d0:30:5c:eb:3e:17:1d:0d:4d:ba:09:
                    76:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:01:BF:78:0E:80:73:ED:A7:7E:E9:26:4B:C5:6D:7B:B8:AF:21:A9
            X509v3 Authority Key Identifier:
                keyid:11:73:1D:6A:88:1F:91:00:8C:AF:ED:3B:A0:E6:AE:C6:1E:62:5C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3133382e3235352e3235322e302f32342d3234203d3e20323634363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:a1:9d:9b:3c:40:09:93:fa:c8:4c:9b:40:44:df:4f:4c:99:
         aa:c6:68:d8:04:06:ea:d6:2d:e9:94:f7:17:55:1a:15:c0:9e:
         c9:2a:6d:90:a6:f2:08:97:0b:8f:61:a8:76:c6:e3:b1:9a:0f:
         31:16:77:3c:fc:c3:b9:11:e3:e1:74:9a:ae:c4:6a:86:0b:86:
         ed:6a:30:d1:47:fc:fd:f3:de:f7:36:67:87:ae:51:66:b1:f7:
         84:43:74:c5:e2:43:dc:11:56:15:45:64:2e:0c:10:0c:82:63:
         ea:88:e2:76:02:a2:4b:40:43:b8:0b:ca:3b:0d:80:50:72:e8:
         f9:06:ef:01:f1:16:a7:bd:6f:ae:93:aa:5e:7a:88:b1:a3:4b:
         d4:f2:1e:82:2b:b2:41:ba:69:91:c0:60:bd:61:e6:e8:24:ef:
         57:de:ff:e2:59:54:c1:e2:8a:b7:da:5d:ef:df:8c:a8:31:48:
         be:ea:1e:9c:61:d4:83:3a:5a:03:0b:1d:b2:3f:37:cf:de:d6:
         af:27:04:62:a1:58:46:ee:1f:06:1b:6b:43:a3:3e:95:66:14:
         98:96:d9:33:51:82:34:31:7f:48:ca:ca:3a:c4:a2:c4:27:0f:
         c8:4a:50:f9:b6:3a:da:01:63:96:dc:6a:52:35:29:b0:28:2a:
         4b:6f:8f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:37:44 2026 by rpki-client