Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/A0CC8854BF9FDABC6034F4CDF49CE683A05BE0B1D60EDAF3F598FA4BBD008CA3/0/3133312e3139362e35332e302f32342d3234203d3e203534303034.roa
File:                     3133312e3139362e35332e302f32342d3234203d3e203534303034.roa (raw, json)
Hash identifier:          Fuk+7Xmmfej6yH8wORGtqnkk7z6ER2v+mgzR+H3Ghs8=
Subject key identifier:   C2:BC:8A:10:B2:FC:8F:FA:AE:09:F4:9A:DA:2C:C4:47:B0:7B:6E:73
Certificate issuer:       /CN=0E6B8732ACC8901032F35F351C4375807259D052
Certificate serial:       7CDEFDA23A74BC38AB839EF7DDCFF7D23D9F5121
Authority key identifier: 0E:6B:87:32:AC:C8:90:10:32:F3:5F:35:1C:43:75:80:72:59:D0:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E6B8732ACC8901032F35F351C4375807259D052.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0CC8854BF9FDABC6034F4CDF49CE683A05BE0B1D60EDAF3F598FA4BBD008CA3/0/3133312e3139362e35332e302f32342d3234203d3e203534303034.roa
Signing time:             Tue 20 Oct 2026 14:25:00 +0000
ROA not before:           Tue 20 Oct 2026 14:20:00 +0000
ROA not after:            Tue 19 Oct 2027 14:25:00 +0000
asID:                     54004
IP address blocks:        131.196.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0CC8854BF9FDABC6034F4CDF49CE683A05BE0B1D60EDAF3F598FA4BBD008CA3/0/0E6B8732ACC8901032F35F351C4375807259D052.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0CC8854BF9FDABC6034F4CDF49CE683A05BE0B1D60EDAF3F598FA4BBD008CA3/0/0E6B8732ACC8901032F35F351C4375807259D052.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E6B8732ACC8901032F35F351C4375807259D052.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 02:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:de:fd:a2:3a:74:bc:38:ab:83:9e:f7:dd:cf:f7:d2:3d:9f:51:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E6B8732ACC8901032F35F351C4375807259D052
        Validity
            Not Before: Oct 20 14:20:00 2026 GMT
            Not After : Oct 19 14:25:00 2027 GMT
        Subject: CN=C2BC8A10B2FC8FFAAE09F49ADA2CC447B07B6E73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:86:ff:07:76:78:4c:b7:df:c3:2f:c2:64:70:
                    da:1f:df:7a:3f:99:b0:fa:0c:fc:85:3d:97:37:74:
                    94:7b:d6:3e:2a:70:79:cc:90:1e:c7:d9:c0:4b:f8:
                    64:c3:b5:a5:d3:23:98:a4:eb:a1:6d:eb:8a:58:ea:
                    bf:ed:1d:66:76:81:dc:2f:d4:dc:9a:1b:97:04:4c:
                    f9:c3:6a:41:83:56:21:4a:ad:f4:db:8e:c5:d1:a6:
                    dc:b1:b7:2d:58:95:ad:22:0f:c8:c0:a5:21:46:b8:
                    68:bf:7f:b7:09:60:3e:04:1d:fe:a8:87:24:e9:48:
                    bb:4e:49:da:01:dc:f9:64:3e:d6:a2:bb:ae:d5:ee:
                    f7:bb:05:fa:0c:64:6c:99:f9:f0:34:54:e8:21:37:
                    a8:e6:a4:e0:47:b5:e5:af:79:fc:6d:ea:6b:cf:a8:
                    bf:21:12:0c:04:0c:4d:00:d5:7b:b4:01:ca:a9:13:
                    5b:9e:cd:8c:80:a8:a9:83:12:5f:ff:20:05:77:9c:
                    06:51:b2:cd:1f:0a:dd:05:3b:b7:99:c1:f5:4a:58:
                    79:9b:fd:ee:0b:df:aa:a1:fb:00:7a:93:24:bf:1b:
                    29:a9:45:f7:ff:17:84:97:63:7e:6f:96:1d:a5:c7:
                    4c:49:73:83:b1:ec:33:3c:91:c1:48:57:d0:ca:93:
                    79:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BC:8A:10:B2:FC:8F:FA:AE:09:F4:9A:DA:2C:C4:47:B0:7B:6E:73
            X509v3 Authority Key Identifier:
                keyid:0E:6B:87:32:AC:C8:90:10:32:F3:5F:35:1C:43:75:80:72:59:D0:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0CC8854BF9FDABC6034F4CDF49CE683A05BE0B1D60EDAF3F598FA4BBD008CA3/0/0E6B8732ACC8901032F35F351C4375807259D052.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E6B8732ACC8901032F35F351C4375807259D052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0CC8854BF9FDABC6034F4CDF49CE683A05BE0B1D60EDAF3F598FA4BBD008CA3/0/3133312e3139362e35332e302f32342d3234203d3e203534303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:9e:33:06:45:6a:32:94:3d:e0:04:af:1b:38:35:c6:e4:fe:
         84:60:77:9b:3e:ea:56:61:ee:b5:93:d7:af:9e:90:86:c8:a7:
         d8:cb:b3:f3:55:3e:ec:ee:a9:70:d9:bf:5f:44:1d:25:1e:d6:
         54:a3:68:e4:39:9a:e8:98:2b:97:49:27:16:49:66:bf:74:42:
         c9:19:bc:a4:e8:b7:0c:6b:f4:cb:b4:bb:f4:1c:07:6c:5c:36:
         af:57:05:65:8f:e1:be:88:91:34:0a:10:9b:6b:bb:b2:ff:f5:
         fe:c2:d9:6d:00:ac:67:dd:cc:26:d0:04:f9:b4:24:38:b1:a1:
         14:32:63:ff:76:9e:18:1d:25:44:cd:36:5f:cd:c3:47:e1:a9:
         1a:86:57:79:e8:43:40:96:d4:99:52:95:c6:a7:84:56:ab:e3:
         52:68:66:a9:26:3f:4e:38:ad:86:03:2f:df:69:51:7c:43:f8:
         2c:6d:a2:a3:83:12:f6:71:02:7f:c8:78:a7:73:e8:45:32:fe:
         29:33:5a:c4:03:fa:81:08:42:f5:dc:99:b4:ad:3f:6f:13:92:
         2a:d1:1d:8c:fe:05:72:08:6d:a6:1c:a4:cf:4e:28:00:4f:a0:
         dd:50:c3:3e:8f:33:56:80:89:36:53:87:69:6d:43:09:d2:72:
         32:e4:37:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:51:26 2026 by rpki-client