Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e32382e302f32322d3234203d3e203532333339.roa
File:                     3133312e37322e32382e302f32322d3234203d3e203532333339.roa (raw, json)
Hash identifier:          dA0TMfAIMwkaYStzgW7eWE5h1rWeycUY6GbyBKwt3sI=
Subject key identifier:   B8:F0:52:14:C1:29:D2:27:35:30:89:C0:62:C8:0E:A6:D3:39:AD:85
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       75E7663C8AB8AF812CE574C9EED690B5FC01A9A7
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e32382e302f32322d3234203d3e203532333339.roa
Signing time:             Tue 07 Apr 2026 18:00:00 +0000
ROA not before:           Tue 07 Apr 2026 17:55:00 +0000
ROA not after:            Tue 06 Apr 2027 18:00:00 +0000
asID:                     52339
IP address blocks:        131.72.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 04 May 2026 02:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e7:66:3c:8a:b8:af:81:2c:e5:74:c9:ee:d6:90:b5:fc:01:a9:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Apr  7 17:55:00 2026 GMT
            Not After : Apr  6 18:00:00 2027 GMT
        Subject: CN=B8F05214C129D227353089C062C80EA6D339AD85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7d:ee:d6:11:a7:e2:c4:33:f3:0b:f4:29:aa:
                    f7:d1:55:b6:2a:d3:3c:6f:21:2a:bd:28:31:f7:48:
                    3d:b2:c0:cd:4d:3d:af:33:d5:3f:b9:b9:44:fd:b9:
                    b6:50:5f:43:ef:50:09:b1:94:82:06:d4:02:dd:c6:
                    82:de:a0:8d:8f:60:2f:5b:aa:48:51:0f:03:12:91:
                    8f:8b:6d:3d:cb:e4:15:d0:df:b1:4a:cd:9b:6d:5f:
                    72:5d:af:8a:39:57:9d:7e:e0:a1:df:33:42:57:58:
                    a6:95:a3:4e:be:e6:e0:ef:e7:b6:9d:fb:3f:5a:d2:
                    93:43:7e:ff:2c:be:38:e3:1d:a9:14:58:3a:34:19:
                    60:11:8c:80:24:15:64:cc:9f:64:e3:8a:de:0f:f8:
                    8a:62:4d:d3:40:12:5a:0c:ee:19:9e:d4:59:e0:15:
                    ab:76:d2:cd:37:c2:7a:81:44:2d:c2:b5:da:c1:1c:
                    2d:8e:ed:8f:46:d3:cf:40:ac:48:14:62:7d:dd:4f:
                    11:bd:bf:9d:b7:8e:19:ca:34:d3:8a:8e:a2:a1:56:
                    1d:87:84:3f:5b:da:5c:f6:f8:05:78:0a:b7:fa:2d:
                    18:93:b4:db:af:90:56:7b:be:fa:61:91:5a:6e:08:
                    9e:f8:09:f5:98:d5:8f:ef:d5:52:9c:9a:9c:7b:d9:
                    bc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F0:52:14:C1:29:D2:27:35:30:89:C0:62:C8:0E:A6:D3:39:AD:85
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e32382e302f32322d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:bd:33:b6:18:15:4c:28:e4:4a:24:93:4e:80:e4:38:13:e1:
         34:5a:0c:cf:7c:81:0b:32:c4:f3:64:94:56:39:b4:27:9e:f4:
         a3:c7:01:4f:7a:35:a6:28:ec:c7:bc:bb:bd:63:db:0b:a6:f5:
         91:df:ae:83:df:3d:8a:d5:f0:57:3e:fe:6a:2f:20:f5:91:c9:
         31:84:2e:39:7a:a2:d5:f3:ac:d0:99:26:b7:61:04:54:a3:c7:
         6e:8a:61:e1:70:c6:c2:3e:c1:8c:a6:f3:e7:ec:04:b8:92:0e:
         a9:27:30:14:cf:a6:c0:6e:3b:cd:4c:07:c7:cd:4d:d1:d6:2f:
         a9:dd:a1:f4:28:75:f5:62:9c:27:73:f6:7d:84:56:cc:31:04:
         ab:86:f0:03:b5:10:64:5c:94:cd:ff:7a:c7:ba:72:a5:41:ef:
         31:84:35:a9:11:54:ef:c4:fb:d1:a3:1e:71:4b:cd:00:78:70:
         a7:5b:75:6a:de:02:81:db:ab:7e:63:5e:fe:66:00:f7:55:b0:
         86:20:2c:9d:6d:fb:3d:1e:76:e7:d4:7d:6f:36:a0:54:76:17:
         40:c8:fe:64:36:c2:88:52:3f:d9:31:16:d3:12:13:a6:42:db:
         91:3f:f0:8f:02:09:15:bf:a1:30:8c:6b:a7:63:8a:d0:8a:17:
         c4:47:7d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 08:28:10 2026 by rpki-client