Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136382e302f32322d3234203d3e20323639393138.roa
File:                     3133312e37322e3136382e302f32322d3234203d3e20323639393138.roa (raw, json)
Hash identifier:          rKAVrZ/TF1/UB9Tcg4++zD2NT8Mi2hZem7zFdkVTztQ=
Subject key identifier:   11:47:D5:C9:D6:6A:9A:2B:16:1B:4F:5B:4C:9B:33:99:59:29:6E:00
Certificate issuer:       /CN=94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395
Certificate serial:       26051B7722C8015E915DE8C9DC4CCDC41932A7EE
Authority key identifier: 94:D9:2E:DB:BD:4E:B9:AC:D1:A6:7B:58:FD:CB:19:00:48:B1:D3:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136382e302f32322d3234203d3e20323639393138.roa
Signing time:             Fri 05 Jun 2026 16:40:00 +0000
ROA not before:           Fri 05 Jun 2026 16:35:00 +0000
ROA not after:            Fri 04 Jun 2027 16:40:00 +0000
asID:                     269918
IP address blocks:        131.72.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:05:1b:77:22:c8:01:5e:91:5d:e8:c9:dc:4c:cd:c4:19:32:a7:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395
        Validity
            Not Before: Jun  5 16:35:00 2026 GMT
            Not After : Jun  4 16:40:00 2027 GMT
        Subject: CN=1147D5C9D66A9A2B161B4F5B4C9B339959296E00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:59:95:fc:91:c9:3a:75:e6:87:42:33:e0:f4:
                    51:97:6f:88:e4:61:2e:a1:9c:70:79:1b:f0:4c:2b:
                    32:db:d9:44:f3:35:9b:d9:dc:65:b2:93:db:c8:50:
                    48:b4:90:0c:2a:4a:09:f4:31:18:69:8d:cd:86:3e:
                    6f:70:e1:e6:49:09:99:9b:f1:5b:38:2b:ff:4e:7d:
                    41:5b:f3:82:d0:ed:9a:15:9d:8e:e4:57:cf:c3:cc:
                    65:e5:d7:19:0b:e1:2b:57:31:30:0c:44:ff:65:33:
                    f6:3e:4c:99:b4:15:47:df:be:0e:90:d2:c5:f6:48:
                    83:52:a5:5d:62:f3:1c:06:17:91:53:e8:2f:32:81:
                    70:be:29:6b:1a:48:11:d0:20:a7:0f:87:d8:9d:45:
                    0c:3a:68:74:d7:20:19:db:b7:50:39:30:a8:2a:96:
                    2d:c1:95:29:6a:5a:c7:e6:82:7d:c0:a9:c4:ee:a6:
                    ff:98:37:dd:93:f8:6a:96:0b:44:e0:d5:65:0a:7e:
                    15:59:a0:03:34:b4:63:bb:b2:62:2e:fa:12:fb:e8:
                    ec:4f:88:e5:bb:fc:54:a9:50:9f:83:40:dd:fa:8e:
                    51:ae:0f:f2:62:8d:1d:0c:ef:27:e5:61:dc:4f:94:
                    7f:a3:95:40:6c:d5:1d:62:7b:bc:41:7d:c3:20:09:
                    1e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:47:D5:C9:D6:6A:9A:2B:16:1B:4F:5B:4C:9B:33:99:59:29:6E:00
            X509v3 Authority Key Identifier:
                keyid:94:D9:2E:DB:BD:4E:B9:AC:D1:A6:7B:58:FD:CB:19:00:48:B1:D3:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94D92EDBBD4EB9ACD1A67B58FDCB190048B1D395.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136382e302f32322d3234203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:a9:38:a9:6c:92:f9:07:b6:aa:37:e0:ef:af:ec:8b:db:1c:
         09:77:8a:b8:12:ab:6f:e5:60:ee:1b:f2:76:27:a0:51:53:19:
         97:ba:28:ef:a4:ab:25:3e:eb:5c:87:25:7c:b9:d6:4b:78:c9:
         10:64:7f:f2:bb:a3:48:2b:2f:07:73:37:4c:bf:92:24:5c:e3:
         3b:8c:38:8b:84:0b:8e:07:32:d1:26:33:df:6a:c7:b0:52:42:
         77:24:7c:92:8a:3b:87:06:cc:cf:05:f1:d8:cd:17:29:99:f5:
         f9:67:e5:5a:e1:c0:f2:a5:7a:2b:21:a5:e9:42:68:01:f0:36:
         48:35:fc:f8:4d:e2:74:9e:68:3b:fc:2d:3c:21:eb:d8:92:4e:
         99:5a:e6:10:d1:33:b8:74:bb:8b:cc:0f:0a:c4:61:5c:73:61:
         72:57:77:2f:2f:6d:c2:ed:dc:b4:51:5c:ac:f0:ee:27:e0:3f:
         1b:db:bb:c1:73:17:12:9c:93:a0:09:27:d7:f7:ca:c5:f3:24:
         bd:07:08:80:8a:c8:29:f2:ac:c7:8d:4c:85:8f:5f:5a:40:51:
         c4:ac:9b:f5:df:17:34:53:b2:22:31:e2:19:5b:91:53:99:ef:
         48:e6:37:e4:cb:46:b8:aa:a3:90:ab:46:a5:fa:10:e9:d4:0e:
         7e:53:63:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:06:51 2026 by rpki-client