Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138362e33332e3235312e302f32342d3234203d3e203532333631.roa
File:                     3138362e33332e3235312e302f32342d3234203d3e203532333631.roa (raw, json)
Hash identifier:          Pvvr98/5/vJjVO1/0xhz8wDgTWF9gtmIfqb+b7n2zcg=
Subject key identifier:   0D:CD:0B:C0:F8:11:3D:FE:E5:1F:F7:E6:5A:EF:3B:FE:50:BC:44:FB
Certificate issuer:       /CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
Certificate serial:       2798C27AA38EF8AAA1D307D37A77FE4EC06A947B
Authority key identifier: 05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138362e33332e3235312e302f32342d3234203d3e203532333631.roa
Signing time:             Thu 11 Jun 2026 19:40:04 +0000
ROA not before:           Thu 11 Jun 2026 19:35:04 +0000
ROA not after:            Thu 10 Jun 2027 19:40:04 +0000
asID:                     52361
IP address blocks:        186.33.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 01:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:98:c2:7a:a3:8e:f8:aa:a1:d3:07:d3:7a:77:fe:4e:c0:6a:94:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
        Validity
            Not Before: Jun 11 19:35:04 2026 GMT
            Not After : Jun 10 19:40:04 2027 GMT
        Subject: CN=0DCD0BC0F8113DFEE51FF7E65AEF3BFE50BC44FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2f:60:3b:14:ac:64:ca:94:88:50:6e:d6:4c:
                    ca:91:4d:5a:bd:9b:fb:63:b7:32:a9:e3:2d:5b:62:
                    c8:b7:34:52:d5:33:2a:c9:db:ee:ab:4f:29:30:24:
                    d7:82:45:93:fb:64:01:b6:5a:7e:ed:c8:93:2e:ed:
                    75:f2:cc:e9:60:b5:a5:1b:aa:e2:76:2d:50:53:c7:
                    33:28:68:a3:49:b8:b5:db:7b:ff:8a:92:07:3d:dc:
                    8c:16:26:50:99:c5:2a:c3:23:96:5e:fc:d4:b1:2d:
                    04:12:48:c5:ca:5e:3f:e6:d7:de:e4:50:91:88:6f:
                    e9:cc:99:5a:bb:3b:cf:82:fe:c3:97:9e:04:21:c9:
                    20:17:82:0d:89:59:e2:57:9b:c9:bd:83:94:f5:09:
                    c3:e5:7c:02:e0:e3:74:74:a6:a7:31:7a:e5:97:37:
                    d5:8a:f1:d3:03:e4:05:81:e3:10:8c:c1:db:f7:7e:
                    62:28:46:0c:3d:9b:21:e0:db:5e:1f:ff:fa:30:fd:
                    07:99:7f:a8:6d:3d:f6:d1:30:f5:5f:8f:bf:e7:69:
                    5e:35:e5:48:5b:aa:48:7c:2b:42:f3:75:a7:f1:bd:
                    74:fb:2b:17:27:82:9f:a5:08:e4:75:b0:10:55:e1:
                    9a:78:b4:6b:2f:a5:9d:0b:30:8b:68:96:c2:a8:70:
                    b9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CD:0B:C0:F8:11:3D:FE:E5:1F:F7:E6:5A:EF:3B:FE:50:BC:44:FB
            X509v3 Authority Key Identifier:
                keyid:05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138362e33332e3235312e302f32342d3234203d3e203532333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.33.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:d1:dc:86:23:92:08:7a:a0:f7:07:ca:14:57:f0:d7:d3:ea:
         6c:2b:93:65:52:02:50:b9:c2:fa:92:b2:32:2a:9e:de:e5:88:
         8f:c2:56:2d:1f:41:98:f7:fc:f1:5c:31:3e:54:a9:72:fe:5a:
         ec:e5:2c:65:94:0b:7c:4a:43:fe:06:e5:12:89:0f:be:f8:2b:
         1a:8b:54:f5:62:1b:e8:f4:c8:5c:1e:80:37:8e:93:d6:e6:bc:
         c8:02:be:17:c5:25:14:af:9f:df:a9:54:6f:50:a4:87:d6:c4:
         65:d4:f3:f8:a4:da:54:f9:2c:27:41:62:10:54:3d:2d:eb:59:
         7d:51:96:fe:bb:c5:0b:d1:f2:62:92:b9:72:e9:f0:15:81:d5:
         15:71:08:56:ad:c4:3f:0b:59:cd:42:43:a2:30:a4:8c:6b:22:
         5e:12:28:2f:8a:3b:e6:b1:05:d8:52:c9:43:a5:3d:a5:68:d3:
         43:dc:72:63:b1:d7:80:bf:dc:53:94:0f:bd:36:75:90:2f:94:
         a5:97:65:d6:cd:be:ee:0b:fd:eb:b5:dd:de:e1:51:f9:20:0e:
         09:b2:cc:50:cf:c7:e9:43:f6:66:92:7d:e3:67:3d:36:71:ab:
         f0:3b:ad:d9:09:a0:73:e3:44:3b:80:69:64:62:be:e1:21:00:
         01:a1:84:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:25:18 2026 by rpki-client