Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3133312e3130382e34302e302f32322d3234203d3e20343032303230.roa
File:                     3133312e3130382e34302e302f32322d3234203d3e20343032303230.roa (raw, json)
Hash identifier:          9NzF0NBm/O1oNXt85f63S59dvfgTBvuY/ep/Xxsm/NA=
Subject key identifier:   AF:EF:0F:73:5F:AD:74:2E:8E:0C:3C:F1:35:F2:36:CE:60:9F:DE:64
Certificate issuer:       /CN=A537F8449EAA5150B4958CB0F49E0C2358347988
Certificate serial:       6E02D94ED685ED1FECF79DA76C92CE696CB542B4
Authority key identifier: A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3133312e3130382e34302e302f32322d3234203d3e20343032303230.roa
Signing time:             Tue 11 Aug 2026 18:50:00 +0000
ROA not before:           Tue 11 Aug 2026 18:45:00 +0000
ROA not after:            Tue 10 Aug 2027 18:50:00 +0000
asID:                     402020
IP address blocks:        131.108.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl
                          rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Sep 2026 03:24:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:02:d9:4e:d6:85:ed:1f:ec:f7:9d:a7:6c:92:ce:69:6c:b5:42:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A537F8449EAA5150B4958CB0F49E0C2358347988
        Validity
            Not Before: Aug 11 18:45:00 2026 GMT
            Not After : Aug 10 18:50:00 2027 GMT
        Subject: CN=AFEF0F735FAD742E8E0C3CF135F236CE609FDE64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:69:bf:29:e7:2a:18:94:0a:32:27:de:87:80:
                    f8:e0:fb:43:23:ee:cc:57:d7:6f:a3:24:10:97:15:
                    24:6d:c7:56:4b:3a:8f:0a:b7:ba:9c:69:6e:d5:8d:
                    5a:eb:10:52:3c:31:08:6d:43:8a:98:2e:00:81:d4:
                    d4:0d:38:4c:b1:f2:30:14:5e:75:0c:fa:d6:5f:41:
                    3b:65:db:9d:79:39:ea:08:50:a3:7d:79:52:bd:3b:
                    53:d7:aa:6e:12:24:85:b5:e2:64:33:2b:16:2e:b4:
                    81:09:00:59:ff:37:9d:f4:a7:2a:b3:a8:8e:dc:87:
                    9d:ad:f5:ae:1a:84:df:77:7f:aa:4c:5e:87:0c:01:
                    41:39:6d:5a:a2:a1:88:f3:47:bf:bc:98:27:e9:eb:
                    47:97:51:7f:a4:ca:70:1d:33:2a:7f:e0:5f:82:9f:
                    74:30:b4:87:42:4e:19:90:2a:2f:a8:ec:24:6b:cb:
                    f7:72:94:33:69:3c:3f:ac:70:ea:f8:2c:f7:a7:6c:
                    6b:d2:77:d0:b7:6f:2c:ea:92:3a:ba:97:f1:a2:66:
                    a3:b3:23:7c:41:a3:e2:86:50:47:53:30:38:b0:3b:
                    8d:60:8a:83:55:48:33:0b:17:d2:46:5b:27:10:2b:
                    86:e7:d9:b5:13:0b:8c:b5:93:00:bd:57:1d:b9:1b:
                    b4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EF:0F:73:5F:AD:74:2E:8E:0C:3C:F1:35:F2:36:CE:60:9F:DE:64
            X509v3 Authority Key Identifier:
                keyid:A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3133312e3130382e34302e302f32322d3234203d3e20343032303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:fa:01:91:39:c1:b8:99:ac:7c:43:f4:d5:71:43:d2:20:6f:
         07:81:9f:4a:ed:2a:58:4a:7d:e0:f8:3a:fc:d5:05:cc:75:cf:
         2e:2a:b4:b5:ec:be:f8:1b:b2:5f:4c:d7:15:b5:ef:85:65:a8:
         f0:a9:ab:bb:8e:70:09:8f:76:f9:43:d6:ee:85:88:a3:c5:70:
         bf:ca:82:6f:7e:32:fb:41:3f:29:61:b1:6c:cf:76:ea:1a:71:
         fd:6a:ed:3f:ae:d5:6e:d7:32:7b:c8:90:21:92:50:e7:bc:18:
         a5:65:5e:63:a6:ec:36:0f:67:c2:1f:66:c4:86:a6:dd:25:c3:
         87:f4:8d:2e:a2:0d:f2:85:c2:7c:41:84:e9:77:0a:20:a5:e5:
         f2:16:e8:7c:5c:cf:a3:bc:cb:55:a4:78:5f:bb:af:74:d1:86:
         0b:05:1f:89:8a:3c:ea:2d:8a:96:84:94:31:3d:2b:c9:90:e2:
         13:e0:1d:07:85:65:29:09:b9:d4:20:3c:5f:2b:83:55:a8:ba:
         a7:ae:76:61:45:e8:82:bc:ca:1a:17:8e:d2:75:01:6a:0f:58:
         b2:45:70:91:cd:6b:25:03:8c:d7:8b:06:e9:1e:e6:2f:6e:ef:
         44:7c:71:ec:7d:6b:68:09:e1:b9:8c:7d:1f:b0:de:b1:92:99:
         8f:94:b7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:48:02 2026 by rpki-client