Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138362e33332e3232342e302f31392d3139203d3e203532333631.roa
File:                     3138362e33332e3232342e302f31392d3139203d3e203532333631.roa (raw, json)
Hash identifier:          Bwl0zzQynVLSlgbeWrwbNNP8mxTs+N7wlTUD4LIHC64=
Subject key identifier:   03:E4:37:1D:0C:0D:79:C3:57:DF:7D:34:85:55:E2:D8:AE:DD:AC:69
Certificate issuer:       /CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
Certificate serial:       30D24466F984C9A92B8877A705955425BBF6FB41
Authority key identifier: 05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138362e33332e3232342e302f31392d3139203d3e203532333631.roa
Signing time:             Thu 11 Jun 2026 19:40:02 +0000
ROA not before:           Thu 11 Jun 2026 19:35:02 +0000
ROA not after:            Thu 10 Jun 2027 19:40:02 +0000
asID:                     52361
IP address blocks:        186.33.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 01:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d2:44:66:f9:84:c9:a9:2b:88:77:a7:05:95:54:25:bb:f6:fb:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
        Validity
            Not Before: Jun 11 19:35:02 2026 GMT
            Not After : Jun 10 19:40:02 2027 GMT
        Subject: CN=03E4371D0C0D79C357DF7D348555E2D8AEDDAC69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:20:cf:92:4a:fa:e0:f8:fa:1e:af:ad:6f:5f:
                    ff:f0:0e:48:d3:aa:67:e6:08:93:c6:e1:5c:50:f9:
                    f4:3d:21:2f:4d:a3:83:b5:80:6c:a3:5b:c2:e2:49:
                    c4:f2:38:6f:a9:be:88:41:fc:56:67:81:4a:ff:2f:
                    6d:9d:46:65:89:a5:67:36:3c:cf:7d:d5:7e:5d:ab:
                    ff:3a:12:be:7c:c2:3b:18:ab:cf:ab:b0:b4:43:4b:
                    8a:cf:31:be:4d:ac:e8:e9:1c:54:b4:70:af:8b:b6:
                    7a:dd:14:fa:56:e4:47:f5:94:5e:9f:14:f2:41:0a:
                    30:61:7b:21:41:71:df:ae:ad:49:e8:33:10:85:37:
                    7c:0e:2a:a4:62:4a:06:15:0a:cb:78:19:7a:d4:29:
                    2f:6f:de:2d:3e:a2:f9:25:4c:9b:cc:71:ad:70:ea:
                    c8:97:36:77:58:c3:f8:d6:01:f7:02:d9:9d:85:bc:
                    84:d5:c8:a4:09:f9:d8:6f:bc:50:27:5f:bc:b1:78:
                    7a:72:85:f0:65:1d:38:03:f8:b6:11:a2:52:3f:c8:
                    fd:96:78:d0:8a:c4:a6:c3:4b:7f:91:b5:7d:23:6b:
                    a3:00:4f:fa:2c:e5:9e:23:65:27:c6:5f:fc:f4:f7:
                    cf:e5:6f:aa:8b:be:ac:69:07:a1:6a:9b:d5:1d:48:
                    ba:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E4:37:1D:0C:0D:79:C3:57:DF:7D:34:85:55:E2:D8:AE:DD:AC:69
            X509v3 Authority Key Identifier:
                keyid:05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138362e33332e3232342e302f31392d3139203d3e203532333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.33.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         72:51:94:ca:59:b0:00:a0:d4:3e:30:5d:59:d4:2f:b9:bd:2b:
         b5:cc:fe:bd:b8:b9:ea:30:ed:7a:63:a1:89:0d:28:c0:33:14:
         e9:a2:0d:8d:42:f2:dd:45:54:40:96:ee:34:5a:9d:e1:fd:78:
         08:0c:fd:a9:61:38:d0:f5:1e:d7:e8:19:ab:83:ca:c3:88:66:
         3b:22:4a:65:ed:b0:a6:96:21:6a:9c:63:23:69:b3:35:bb:6e:
         0c:bd:a4:17:c7:97:b7:4e:34:04:6f:a5:3c:ea:96:cd:ee:b8:
         26:b1:66:80:d7:81:6a:87:e7:96:d7:a2:b4:55:b0:fb:ab:3c:
         22:6a:ec:93:d0:56:c2:4d:16:85:a9:07:95:b6:11:31:8d:0d:
         72:0b:39:98:14:08:3b:15:6d:1c:7d:9c:d3:2f:4c:36:22:64:
         7e:07:b5:9f:b0:bf:c9:de:f6:89:5c:4f:6c:a5:ef:8b:52:61:
         c6:14:60:98:e4:be:06:c4:2e:5a:54:30:ae:c5:77:6e:0c:93:
         4d:28:5a:e1:8e:62:77:e6:c9:8a:9a:c0:96:f8:88:3f:fa:d5:
         8e:de:8d:5c:40:3c:31:36:de:71:8d:56:89:59:c3:3c:18:e5:
         47:ba:99:73:9b:28:20:d4:d7:f1:ed:c7:3d:a9:a8:a3:c0:be:
         c3:84:7b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:25:19 2026 by rpki-client