Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3133382e3235352e3235332e302f32342d3234203d3e203237363630.roa
File:                     3133382e3235352e3235332e302f32342d3234203d3e203237363630.roa (raw, json)
Hash identifier:          fHuNo1xEexIC7GNSYa/J+h0wpi9l4TrMgBKWqCKNU4g=
Subject key identifier:   5D:24:CB:BC:B2:D3:6B:F4:24:4A:4E:2E:AB:8D:CE:16:9A:CD:93:5B
Certificate issuer:       /CN=11731D6A881F91008CAFED3BA0E6AEC61E625CF2
Certificate serial:       732D0157B6E925070904190C682D7BA5BEC96763
Authority key identifier: 11:73:1D:6A:88:1F:91:00:8C:AF:ED:3B:A0:E6:AE:C6:1E:62:5C:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3133382e3235352e3235332e302f32342d3234203d3e203237363630.roa
Signing time:             Tue 26 May 2026 16:44:10 +0000
ROA not before:           Tue 26 May 2026 16:39:10 +0000
ROA not after:            Tue 25 May 2027 16:44:10 +0000
asID:                     27660
IP address blocks:        138.255.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:2d:01:57:b6:e9:25:07:09:04:19:0c:68:2d:7b:a5:be:c9:67:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11731D6A881F91008CAFED3BA0E6AEC61E625CF2
        Validity
            Not Before: May 26 16:39:10 2026 GMT
            Not After : May 25 16:44:10 2027 GMT
        Subject: CN=5D24CBBCB2D36BF4244A4E2EAB8DCE169ACD935B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cb:23:23:db:e8:2e:42:06:fc:64:34:4c:57:
                    eb:4f:2d:16:48:c8:33:f3:7a:67:4f:b0:de:26:fd:
                    83:28:c4:b4:51:b3:a8:c6:23:14:65:01:d7:45:49:
                    d2:92:f6:81:49:85:a3:c1:5f:68:a6:26:86:fc:c0:
                    bb:85:4e:74:54:db:c2:0d:b6:9d:cf:5f:76:93:d6:
                    84:c5:64:d5:73:b8:50:58:a9:08:82:a4:3b:bd:41:
                    74:a7:6d:7e:9f:68:48:60:eb:a7:39:a3:bf:14:5b:
                    19:d6:8f:f1:31:71:a2:4d:69:55:b4:24:c0:be:fe:
                    73:70:91:4e:81:d9:97:5d:5f:60:c5:52:6c:39:23:
                    18:49:07:51:83:fc:d4:8e:14:c7:4c:7d:61:2e:c6:
                    28:bf:66:48:db:c3:f9:8a:c2:47:57:52:d2:e6:2d:
                    2c:a7:53:89:eb:3f:0a:de:8b:95:2f:e7:85:3f:7a:
                    07:3d:85:fb:39:c5:62:69:03:64:89:7c:f5:42:93:
                    fd:f5:0e:da:a4:c4:77:e8:4c:48:07:fb:8c:ab:c4:
                    a9:ce:c1:45:cd:54:ff:6d:ba:bd:ba:94:f1:19:be:
                    92:d5:82:a7:cb:e4:64:ab:58:c4:66:a7:fe:bb:d9:
                    51:2f:e5:22:0d:2b:37:be:72:2e:db:b2:ee:35:61:
                    9c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:24:CB:BC:B2:D3:6B:F4:24:4A:4E:2E:AB:8D:CE:16:9A:CD:93:5B
            X509v3 Authority Key Identifier:
                keyid:11:73:1D:6A:88:1F:91:00:8C:AF:ED:3B:A0:E6:AE:C6:1E:62:5C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3133382e3235352e3235332e302f32342d3234203d3e203237363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:2a:95:03:20:be:13:ab:27:59:1a:38:ce:5c:91:ab:2c:96:
         99:03:b2:53:2c:67:54:fb:fe:6f:59:6e:1e:76:3b:de:57:c1:
         b7:f0:ea:f7:eb:db:45:b8:54:bf:33:60:38:bc:f1:2d:34:30:
         40:d8:56:65:c0:88:d2:2c:7f:cf:f8:d9:2b:9f:55:2b:b3:d7:
         74:d0:f0:26:6c:8b:d6:20:19:12:8d:f8:ab:f6:f4:d3:c2:5c:
         38:e0:6b:2b:34:5d:e2:1c:56:eb:bb:78:d2:db:c6:f5:40:d6:
         df:47:31:a2:af:77:cb:46:88:e0:f2:de:cf:dd:c2:2f:e9:0d:
         15:ed:c8:6d:07:a2:e8:15:39:03:ac:4d:25:eb:e9:e9:c7:fa:
         11:dc:c6:01:82:71:61:67:fe:50:41:fb:af:72:a3:c6:95:7d:
         c9:81:08:a7:95:f5:1d:2f:9f:3b:e6:c0:83:57:5e:30:76:62:
         06:0f:f3:20:39:88:dd:51:5c:cd:e8:50:d1:65:0a:98:87:aa:
         2b:c1:de:ce:84:09:22:f7:cc:71:92:b2:fd:58:ba:86:65:f9:
         18:27:9f:1c:2f:e9:94:c7:8c:8e:c2:3e:f9:28:cf:03:1d:73:
         02:59:e8:28:53:2f:13:b5:37:9c:55:47:5d:54:cf:40:54:53:
         f0:54:79:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:37:52 2026 by rpki-client