Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138362e33332e3232382e302f32342d3234203d3e203532333631.roa
File:                     3138362e33332e3232382e302f32342d3234203d3e203532333631.roa (raw, json)
Hash identifier:          ji+X4hyhU5/CEGq/vRh7s5G5ns+9NbH2diok1S4aJCE=
Subject key identifier:   59:AE:8A:7F:3B:1D:08:71:D9:DD:F5:29:B9:7F:74:B4:B9:E8:C8:F0
Certificate issuer:       /CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
Certificate serial:       17B6B58F0DE139AEB175F12A02C13F91EA600834
Authority key identifier: 05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138362e33332e3232382e302f32342d3234203d3e203532333631.roa
Signing time:             Thu 11 Jun 2026 19:40:00 +0000
ROA not before:           Thu 11 Jun 2026 19:35:00 +0000
ROA not after:            Thu 10 Jun 2027 19:40:00 +0000
asID:                     52361
IP address blocks:        186.33.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 01:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b6:b5:8f:0d:e1:39:ae:b1:75:f1:2a:02:c1:3f:91:ea:60:08:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
        Validity
            Not Before: Jun 11 19:35:00 2026 GMT
            Not After : Jun 10 19:40:00 2027 GMT
        Subject: CN=59AE8A7F3B1D0871D9DDF529B97F74B4B9E8C8F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fa:07:69:86:4c:1d:b9:2a:31:c8:e3:73:7a:
                    de:02:bb:6c:27:66:a9:6e:ae:ba:12:08:08:7b:ce:
                    d5:dc:f3:43:da:25:21:38:01:52:84:bb:65:52:a3:
                    e6:2d:56:f8:cc:24:6a:9f:01:46:3e:23:91:de:e8:
                    6f:d6:c8:96:ab:1d:20:c2:c8:50:12:3e:40:3c:66:
                    fe:26:d1:43:3a:1f:4e:76:04:1c:81:0c:29:c4:d4:
                    19:2e:55:8b:55:3b:a0:81:92:52:a0:24:1a:48:be:
                    6c:7d:23:7b:ac:35:ef:67:36:9c:66:2b:33:29:76:
                    85:17:64:fe:be:21:89:43:b7:51:bd:e7:97:64:b0:
                    24:a8:de:5f:93:84:d2:3c:d9:21:40:90:58:f0:92:
                    13:46:96:80:46:b0:66:5b:d7:7c:9c:59:32:db:e4:
                    ca:1b:d4:b9:dc:df:d6:13:f5:69:4c:39:3d:14:6b:
                    e5:0c:59:15:41:60:0b:aa:4d:a4:5b:f7:2d:e6:e8:
                    a5:85:32:36:25:33:8f:10:09:64:10:40:75:e8:ec:
                    2c:19:6b:73:0d:06:64:f9:31:e1:3b:4e:fb:70:2e:
                    04:12:c1:a2:ac:7b:c4:a9:63:44:87:29:c7:46:ba:
                    6c:37:49:70:8b:92:20:1a:39:a1:53:66:e7:7c:8a:
                    c2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AE:8A:7F:3B:1D:08:71:D9:DD:F5:29:B9:7F:74:B4:B9:E8:C8:F0
            X509v3 Authority Key Identifier:
                keyid:05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138362e33332e3232382e302f32342d3234203d3e203532333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.33.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:ca:8e:ad:ac:14:3f:d7:97:c3:96:2c:c8:61:cc:e4:2f:ba:
         ac:df:aa:ca:fc:f5:38:2b:26:d8:9b:2c:c0:8d:20:a0:f8:84:
         c2:3e:57:96:53:46:c9:f4:4d:65:f8:d6:4a:a1:2c:e5:6b:a3:
         45:62:c4:cf:f5:18:18:3e:59:af:60:af:00:fd:91:a0:62:37:
         11:c2:a4:59:d8:af:b1:c8:69:10:72:26:03:cb:cf:71:20:97:
         f3:75:37:ac:bb:1c:b2:4f:ad:7f:56:e0:d7:eb:92:e0:58:37:
         78:2c:81:6e:ad:d2:42:e6:62:79:08:f5:40:22:e7:aa:8d:71:
         50:ff:d4:f2:1c:24:c1:8f:c6:84:58:1e:b0:c2:99:20:cd:ef:
         70:ea:90:c5:2e:48:44:4b:e0:93:e0:8f:ed:b4:34:c0:3b:d7:
         d7:6f:53:72:69:1a:94:40:88:ff:96:ad:f5:02:2f:8f:68:a6:
         f6:30:6d:79:d0:6d:f4:21:e4:8a:0c:1f:df:5b:cb:e6:56:40:
         73:b1:38:18:48:d9:20:8e:82:0c:3e:87:10:70:82:62:7f:4b:
         c0:22:98:c8:97:c2:13:60:18:bd:32:1a:92:46:da:13:3e:cb:
         fe:b5:65:e4:8e:ee:73:6d:4a:9a:c7:3e:b0:08:48:86:51:0f:
         5a:26:17:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:25:17 2026 by rpki-client