Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EC0712409FF3985D8DA642C03FA35D64D622B4C2DA6B59D7B18CC08B5ACE601/0/3132382e3230312e3133332e302f32342d3234203d3e20323635373434.roa
File:                     3132382e3230312e3133332e302f32342d3234203d3e20323635373434.roa (raw, json)
Hash identifier:          So1HBa8rpNHm8YQGfwUUyeg04hWeqCFPMxY6QdaGumM=
Subject key identifier:   9A:91:D3:8D:D7:32:AB:C9:EE:8D:CB:D0:88:60:1E:27:B8:0F:24:82
Certificate issuer:       /CN=CDC1946824603CDCD1A987658D89AF548BEE0551
Certificate serial:       3D8379549BE2A347A271F8611EEC0C39F311A295
Authority key identifier: CD:C1:94:68:24:60:3C:DC:D1:A9:87:65:8D:89:AF:54:8B:EE:05:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC1946824603CDCD1A987658D89AF548BEE0551.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6EC0712409FF3985D8DA642C03FA35D64D622B4C2DA6B59D7B18CC08B5ACE601/0/3132382e3230312e3133332e302f32342d3234203d3e20323635373434.roa
Signing time:             Thu 12 Mar 2026 14:35:01 +0000
ROA not before:           Thu 12 Mar 2026 14:30:01 +0000
ROA not after:            Thu 11 Mar 2027 14:35:01 +0000
asID:                     265744
IP address blocks:        128.201.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6EC0712409FF3985D8DA642C03FA35D64D622B4C2DA6B59D7B18CC08B5ACE601/0/CDC1946824603CDCD1A987658D89AF548BEE0551.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6EC0712409FF3985D8DA642C03FA35D64D622B4C2DA6B59D7B18CC08B5ACE601/0/CDC1946824603CDCD1A987658D89AF548BEE0551.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC1946824603CDCD1A987658D89AF548BEE0551.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:83:79:54:9b:e2:a3:47:a2:71:f8:61:1e:ec:0c:39:f3:11:a2:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC1946824603CDCD1A987658D89AF548BEE0551
        Validity
            Not Before: Mar 12 14:30:01 2026 GMT
            Not After : Mar 11 14:35:01 2027 GMT
        Subject: CN=9A91D38DD732ABC9EE8DCBD088601E27B80F2482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:44:a6:53:0a:23:55:6e:1c:bf:ba:09:1b:4e:
                    6a:96:23:e6:f9:8b:19:e2:ed:f2:ca:25:17:bf:61:
                    32:27:64:30:0b:d9:a7:ac:f6:1c:74:2f:be:10:63:
                    b2:c9:49:59:d5:ec:bd:75:92:9a:da:52:74:f0:d6:
                    a4:dd:be:4e:51:2a:f9:74:84:12:4a:b4:27:c0:ca:
                    53:b9:c9:60:c4:a6:85:24:87:eb:c6:c2:35:dd:3c:
                    33:86:79:7e:5c:d8:a7:8f:e4:38:1c:ab:4c:b1:8a:
                    67:3a:e1:25:b6:91:4f:07:f0:cc:04:0a:dd:f6:a6:
                    6e:49:c2:fc:43:f0:c1:67:56:f6:02:70:98:32:d4:
                    c7:ce:47:c6:11:f5:eb:81:c1:c1:85:94:5c:25:1c:
                    a1:36:27:d0:2f:be:b7:4a:a1:b6:58:03:a4:1e:23:
                    d5:3f:3f:e8:03:9d:bc:b1:66:e3:e0:01:26:38:ad:
                    36:5e:7f:fa:06:30:4e:23:76:8e:7a:5e:5c:95:15:
                    25:4a:e8:bf:05:dd:aa:a2:e4:96:64:a7:f2:39:0c:
                    40:e3:09:5f:a8:32:f1:00:5e:88:5e:db:10:82:c7:
                    85:b7:a7:10:9b:68:b4:1d:4d:93:b3:06:7d:76:66:
                    c6:ae:77:da:de:67:7d:37:ba:4d:a1:3f:04:1d:3e:
                    56:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:91:D3:8D:D7:32:AB:C9:EE:8D:CB:D0:88:60:1E:27:B8:0F:24:82
            X509v3 Authority Key Identifier:
                keyid:CD:C1:94:68:24:60:3C:DC:D1:A9:87:65:8D:89:AF:54:8B:EE:05:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6EC0712409FF3985D8DA642C03FA35D64D622B4C2DA6B59D7B18CC08B5ACE601/0/CDC1946824603CDCD1A987658D89AF548BEE0551.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC1946824603CDCD1A987658D89AF548BEE0551.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EC0712409FF3985D8DA642C03FA35D64D622B4C2DA6B59D7B18CC08B5ACE601/0/3132382e3230312e3133332e302f32342d3234203d3e20323635373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:a9:b6:74:a7:83:5f:40:1c:0e:44:2c:b2:4c:83:11:9c:b3:
         30:5d:3e:9f:dc:af:72:47:11:64:21:86:aa:9e:75:db:2d:d0:
         ac:4d:b6:36:56:b7:f3:f7:2a:56:97:39:24:a0:01:a5:3a:c2:
         e5:74:48:88:c0:d7:8a:57:af:8d:b2:71:e0:74:5e:e6:68:54:
         22:3c:00:72:24:59:20:a1:0e:b5:91:29:c3:73:a2:53:0e:90:
         24:b8:bf:7f:e0:9e:c3:cc:69:14:70:09:1d:ad:04:b1:59:49:
         b8:ac:7b:cd:4d:01:09:95:91:cf:3c:bb:60:35:5b:45:36:d4:
         49:03:b9:bf:f3:47:41:25:df:09:c4:02:04:e0:5b:06:9e:e5:
         aa:ef:31:e4:af:28:8c:2f:f6:f6:84:0d:36:12:6e:87:24:b8:
         92:d2:35:48:48:47:0a:25:80:99:0a:26:a3:4e:83:19:ec:9a:
         e6:7f:47:45:81:89:5b:55:b7:a4:c1:5e:7d:8a:f6:3c:7c:f5:
         83:3a:27:84:7a:61:bc:1c:ea:c3:3d:33:7d:2e:91:d4:ea:6b:
         c6:c3:0c:56:4c:6f:5a:40:50:a4:e1:a0:da:66:20:0d:4e:17:
         d4:1d:d0:4c:6f:f6:4b:ef:d5:f0:ea:a7:b6:e5:75:36:82:81:
         80:68:ce:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 04:53:03 2026 by rpki-client