Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5091486708AB1FB132B0C178CFE4702A6DBCC377AEA985CA5E1A917DB4685DBA/0/3230302e33382e31382e302f32342d3234203d3e203139333733.roa
File:                     3230302e33382e31382e302f32342d3234203d3e203139333733.roa (raw, json)
Hash identifier:          EuFYpyj81zKKMdyP7n48eHXZ3r/zUzZofWUCNECWT/M=
Subject key identifier:   11:A4:3A:68:D1:CC:31:60:97:F9:45:E7:EA:B9:E3:D7:11:BF:BB:7B
Certificate issuer:       /CN=338A5424690E40148DA439BAEF78AA15FD581BED
Certificate serial:       05555893D8A560FD15CADD76929E0987AD098EEC
Authority key identifier: 33:8A:54:24:69:0E:40:14:8D:A4:39:BA:EF:78:AA:15:FD:58:1B:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/338A5424690E40148DA439BAEF78AA15FD581BED.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5091486708AB1FB132B0C178CFE4702A6DBCC377AEA985CA5E1A917DB4685DBA/0/3230302e33382e31382e302f32342d3234203d3e203139333733.roa
Signing time:             Fri 21 Aug 2026 18:00:00 +0000
ROA not before:           Fri 21 Aug 2026 17:55:00 +0000
ROA not after:            Fri 20 Aug 2027 18:00:00 +0000
asID:                     19373
IP address blocks:        200.38.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5091486708AB1FB132B0C178CFE4702A6DBCC377AEA985CA5E1A917DB4685DBA/0/338A5424690E40148DA439BAEF78AA15FD581BED.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5091486708AB1FB132B0C178CFE4702A6DBCC377AEA985CA5E1A917DB4685DBA/0/338A5424690E40148DA439BAEF78AA15FD581BED.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/338A5424690E40148DA439BAEF78AA15FD581BED.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Sep 2026 10:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:55:58:93:d8:a5:60:fd:15:ca:dd:76:92:9e:09:87:ad:09:8e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=338A5424690E40148DA439BAEF78AA15FD581BED
        Validity
            Not Before: Aug 21 17:55:00 2026 GMT
            Not After : Aug 20 18:00:00 2027 GMT
        Subject: CN=11A43A68D1CC316097F945E7EAB9E3D711BFBB7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:12:ee:5d:a7:65:ed:dd:ce:dd:14:43:74:
                    79:70:0f:62:80:d2:67:21:6f:19:74:cd:e4:09:25:
                    53:e1:cc:9e:25:c7:7c:b7:58:3d:de:38:69:01:f0:
                    2e:cc:4e:cf:69:8e:5b:4a:20:4a:ff:ff:13:c2:69:
                    d2:9c:ca:b7:00:43:48:ee:b4:0a:84:0e:aa:06:fd:
                    72:0b:98:b2:a5:a9:11:ca:e6:5d:cb:a2:fc:ec:95:
                    fc:e1:10:cd:54:76:be:03:dd:81:43:23:28:ce:e2:
                    c1:19:0c:03:d9:e1:1d:ef:db:4b:1e:b6:25:65:f0:
                    a4:f3:26:cf:54:f3:ae:54:de:4e:a7:1e:14:d6:e9:
                    23:a9:8f:c4:ee:0e:a4:bc:e5:33:44:f5:eb:6d:86:
                    70:25:16:d8:5b:e6:65:97:41:0d:be:61:88:fa:a1:
                    9e:84:35:85:af:0b:3f:f0:05:31:c8:d1:1c:8a:5d:
                    2a:b9:ad:1e:31:1a:29:18:b1:84:c7:38:ee:6a:b2:
                    c7:13:11:2b:d1:36:c5:a8:e9:f8:11:02:75:b2:7d:
                    64:98:b5:2e:6d:94:50:c2:20:90:e6:55:e4:e1:e6:
                    71:82:18:4b:3e:f4:da:f6:c5:a8:7b:47:cb:b0:92:
                    12:42:ec:31:5b:ac:db:07:ef:47:f6:ed:d2:0a:91:
                    34:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A4:3A:68:D1:CC:31:60:97:F9:45:E7:EA:B9:E3:D7:11:BF:BB:7B
            X509v3 Authority Key Identifier:
                keyid:33:8A:54:24:69:0E:40:14:8D:A4:39:BA:EF:78:AA:15:FD:58:1B:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5091486708AB1FB132B0C178CFE4702A6DBCC377AEA985CA5E1A917DB4685DBA/0/338A5424690E40148DA439BAEF78AA15FD581BED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/338A5424690E40148DA439BAEF78AA15FD581BED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5091486708AB1FB132B0C178CFE4702A6DBCC377AEA985CA5E1A917DB4685DBA/0/3230302e33382e31382e302f32342d3234203d3e203139333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.38.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:cf:5b:c9:6c:bf:22:3a:79:a6:f3:db:6d:3b:3d:ee:83:bc:
         12:92:2e:86:59:02:b8:9a:ed:9b:b0:28:1d:fb:27:25:d5:3a:
         f2:6f:d3:c4:90:a4:b9:a0:6d:65:c7:46:3c:3b:0e:b3:e5:ca:
         65:7f:33:c6:bf:e8:97:ad:c5:db:00:39:dd:d4:08:6c:05:9b:
         42:64:37:21:21:19:29:d7:cc:40:16:e5:ad:47:de:c8:20:c7:
         10:03:a5:2d:49:30:5f:23:7a:41:46:2e:f0:0d:e8:94:e8:e8:
         88:f0:ea:e3:5c:16:67:63:72:2d:ab:1d:55:9c:53:e3:5d:df:
         95:a1:84:9a:00:b1:c5:e4:a0:45:fa:a4:24:54:f1:92:79:cc:
         99:1a:fb:44:25:0d:a7:ae:bc:88:e5:ae:52:ea:c3:da:bd:c5:
         8c:c1:bb:5f:d7:4f:98:e6:9a:f3:df:d2:b9:1e:26:aa:6b:f5:
         7c:84:ef:4d:81:4a:e8:73:85:4f:a9:9c:09:9c:8a:ad:ea:4c:
         8f:9b:05:59:63:87:aa:05:43:11:d8:91:6b:08:25:c6:95:73:
         d1:84:22:08:47:c7:a9:63:1a:00:77:d7:1e:81:58:0e:ad:98:
         92:73:a1:d3:c1:90:ce:c7:66:a7:93:be:2b:6b:57:2b:c1:e6:
         70:04:ec:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 09:05:46 2026 by rpki-client