Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/51169484359850E866522C27E98830832EC800D291C612201434BDD0506A73E8/0/3133382e3231392e3232382e302f32322d3234203d3e20323733383836.roa
File:                     3133382e3231392e3232382e302f32322d3234203d3e20323733383836.roa (raw, json)
Hash identifier:          azG8bRb6ygRWcl/WWKBOe+3KblSiOoGnVVpEfIXsSq4=
Subject key identifier:   E8:6A:ED:06:EF:7C:B3:F8:1A:D0:A0:A9:52:14:DE:72:EA:11:5E:FA
Certificate issuer:       /CN=4E3267FAB0006558F96FC153AC65738471EF0825
Certificate serial:       28D30E642D1883F64631B1F6ADA0218E2CC061AB
Authority key identifier: 4E:32:67:FA:B0:00:65:58:F9:6F:C1:53:AC:65:73:84:71:EF:08:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E3267FAB0006558F96FC153AC65738471EF0825.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51169484359850E866522C27E98830832EC800D291C612201434BDD0506A73E8/0/3133382e3231392e3232382e302f32322d3234203d3e20323733383836.roa
Signing time:             Mon 27 Jul 2026 22:51:09 +0000
ROA not before:           Mon 27 Jul 2026 22:46:09 +0000
ROA not after:            Mon 26 Jul 2027 22:51:09 +0000
asID:                     273886
IP address blocks:        138.219.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51169484359850E866522C27E98830832EC800D291C612201434BDD0506A73E8/0/4E3267FAB0006558F96FC153AC65738471EF0825.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51169484359850E866522C27E98830832EC800D291C612201434BDD0506A73E8/0/4E3267FAB0006558F96FC153AC65738471EF0825.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E3267FAB0006558F96FC153AC65738471EF0825.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d3:0e:64:2d:18:83:f6:46:31:b1:f6:ad:a0:21:8e:2c:c0:61:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E3267FAB0006558F96FC153AC65738471EF0825
        Validity
            Not Before: Jul 27 22:46:09 2026 GMT
            Not After : Jul 26 22:51:09 2027 GMT
        Subject: CN=E86AED06EF7CB3F81AD0A0A95214DE72EA115EFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:a2:ec:44:11:c9:92:6a:76:ab:0e:05:13:
                    cd:d1:b9:eb:51:69:67:7b:7c:d8:cb:5b:d3:1f:ff:
                    27:b2:9c:ca:96:86:67:77:cd:e0:37:73:a5:12:62:
                    ea:4a:3a:9b:32:3d:47:88:a1:06:34:f9:96:01:7c:
                    ad:5a:97:6d:1f:dd:f3:bc:d4:43:b5:d2:f0:06:95:
                    72:6f:33:03:90:a4:09:b5:a6:69:c9:1f:28:16:1c:
                    a7:6a:d2:52:ab:2a:4f:b4:97:f1:33:37:07:c1:19:
                    29:d1:36:8c:2a:26:2c:08:ad:ce:9c:06:b6:2f:74:
                    d5:48:5f:8a:12:df:ad:4e:ad:6e:dc:8c:6d:5d:8e:
                    e2:13:69:d6:9c:6b:98:03:c9:2b:d2:f1:49:10:2d:
                    e3:93:fd:3f:55:55:72:cf:8a:56:c1:5b:f6:93:61:
                    7d:34:25:04:c8:5a:e6:ea:1d:19:c7:a1:8e:86:7a:
                    38:74:a5:1a:6e:8f:bc:72:b7:c8:a7:b8:24:4a:4b:
                    f0:1a:1b:7a:75:0e:e9:ed:50:34:2d:ac:30:72:49:
                    7b:71:50:cd:98:19:2e:53:05:eb:c2:96:17:93:a8:
                    02:8f:d1:db:78:91:84:85:e5:ae:a0:48:49:6f:ee:
                    40:7d:ad:5f:22:86:41:83:da:3a:d8:75:ae:0e:66:
                    3c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6A:ED:06:EF:7C:B3:F8:1A:D0:A0:A9:52:14:DE:72:EA:11:5E:FA
            X509v3 Authority Key Identifier:
                keyid:4E:32:67:FA:B0:00:65:58:F9:6F:C1:53:AC:65:73:84:71:EF:08:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51169484359850E866522C27E98830832EC800D291C612201434BDD0506A73E8/0/4E3267FAB0006558F96FC153AC65738471EF0825.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E3267FAB0006558F96FC153AC65738471EF0825.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51169484359850E866522C27E98830832EC800D291C612201434BDD0506A73E8/0/3133382e3231392e3232382e302f32322d3234203d3e20323733383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:9b:bd:b5:5d:c9:c3:b5:04:5b:96:2c:27:bc:94:f8:42:02:
         c8:29:5a:f9:47:47:ef:68:a0:2a:0d:22:93:81:9c:7f:86:06:
         4a:99:ca:70:37:b6:e7:fa:a2:4b:94:2e:d3:4e:3a:63:03:17:
         3f:f8:2d:44:ba:b7:60:96:1a:85:2e:1a:d0:0a:48:4a:b3:23:
         aa:34:de:92:b4:ac:a0:af:29:a3:b6:ce:e2:4b:91:98:ea:dc:
         ea:80:b2:c1:fa:e2:44:57:a1:51:42:da:ed:14:bd:c4:d5:f5:
         03:b2:59:06:26:7a:84:af:26:10:60:d9:d6:28:92:99:ca:3a:
         5d:15:5a:fa:ce:d2:00:c5:db:0d:bf:fa:c1:d4:d4:2e:ba:14:
         14:26:29:64:11:c7:57:e5:7b:79:31:30:00:86:d5:23:b7:31:
         52:8c:a5:03:6c:d5:ce:9d:c4:5c:1f:c5:3c:8c:bc:0a:e4:69:
         54:10:41:7d:83:c8:48:c6:f9:c7:12:4a:00:12:bc:58:f8:32:
         06:4b:9b:39:f7:89:38:f6:84:e2:2f:f3:f9:db:da:03:2e:b9:
         65:d0:80:0a:d7:99:d2:e8:d8:45:41:14:39:10:41:b2:58:d1:
         34:e0:5e:63:53:ea:9d:78:c4:42:9b:0d:69:ef:37:c8:f5:73:
         9b:0b:11:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:21:04 2026 by rpki-client