Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B44A679920186479B0BBA69E86D282AA9766D939396F5262640CF36B6030A1A0/0/3133382e3231392e3233322e302f32342d3234203d3e20323634363131.roa
File:                     3133382e3231392e3233322e302f32342d3234203d3e20323634363131.roa (raw, json)
Hash identifier:          5YO2eDGCA8uVoU4NPDbwtuTuqBFx0CwgucRHS6e780U=
Subject key identifier:   E8:1D:9F:15:F6:17:80:4C:26:5A:5F:30:15:CC:55:5E:B0:11:BF:9B
Certificate issuer:       /CN=6C2EEA30DFF0859D2CBE76AB1913B5283A28ED7D
Certificate serial:       204BEFDAFAFE5F76FCBAD078B0A12FD827B4DC4D
Authority key identifier: 6C:2E:EA:30:DF:F0:85:9D:2C:BE:76:AB:19:13:B5:28:3A:28:ED:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C2EEA30DFF0859D2CBE76AB1913B5283A28ED7D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B44A679920186479B0BBA69E86D282AA9766D939396F5262640CF36B6030A1A0/0/3133382e3231392e3233322e302f32342d3234203d3e20323634363131.roa
Signing time:             Fri 27 Mar 2026 20:35:00 +0000
ROA not before:           Fri 27 Mar 2026 20:30:00 +0000
ROA not after:            Fri 26 Mar 2027 20:35:00 +0000
asID:                     264611
IP address blocks:        138.219.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B44A679920186479B0BBA69E86D282AA9766D939396F5262640CF36B6030A1A0/0/6C2EEA30DFF0859D2CBE76AB1913B5283A28ED7D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B44A679920186479B0BBA69E86D282AA9766D939396F5262640CF36B6030A1A0/0/6C2EEA30DFF0859D2CBE76AB1913B5283A28ED7D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C2EEA30DFF0859D2CBE76AB1913B5283A28ED7D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4b:ef:da:fa:fe:5f:76:fc:ba:d0:78:b0:a1:2f:d8:27:b4:dc:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C2EEA30DFF0859D2CBE76AB1913B5283A28ED7D
        Validity
            Not Before: Mar 27 20:30:00 2026 GMT
            Not After : Mar 26 20:35:00 2027 GMT
        Subject: CN=E81D9F15F617804C265A5F3015CC555EB011BF9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1d:c0:a5:8d:dc:5e:ab:a8:13:ff:47:a2:34:
                    5f:94:cb:0e:16:d3:8a:ba:31:9a:8d:1b:55:0b:ff:
                    b2:ac:28:86:f6:c0:23:dd:32:1d:b9:e0:47:93:9e:
                    13:01:1d:d9:0a:83:3e:62:58:8f:20:f0:04:76:35:
                    d3:3e:f2:0c:54:ca:7c:57:8a:9e:29:0a:37:be:27:
                    14:b8:16:a7:81:ba:da:e0:c4:cc:40:b9:4f:2e:9d:
                    9a:71:81:8c:47:b2:2c:94:e6:77:97:2e:fc:78:0e:
                    12:37:07:7a:56:81:2f:f9:e5:28:07:52:30:1e:c1:
                    b5:c5:7a:b9:6b:bd:c3:f2:cc:8c:8a:15:79:5e:fd:
                    9a:e8:ac:98:69:04:81:80:55:b6:60:a1:c5:6e:40:
                    05:df:14:d3:68:e3:84:9a:97:9b:e2:7b:20:a9:af:
                    54:bf:0a:2d:0a:0a:58:d3:36:24:d9:56:29:8b:bd:
                    bc:a2:55:c2:e8:7e:a3:fd:15:19:dc:fa:4f:38:9f:
                    1d:10:53:6d:d3:99:82:ae:f0:3f:08:b0:5a:ab:c1:
                    50:f5:1c:8b:e2:81:25:c5:b1:f4:e1:bf:87:83:d1:
                    fd:c4:32:27:a3:4a:48:c3:65:51:6b:ca:9b:eb:13:
                    7e:8b:4e:6a:98:ee:61:dd:b1:21:f3:5b:5e:c9:a4:
                    1c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1D:9F:15:F6:17:80:4C:26:5A:5F:30:15:CC:55:5E:B0:11:BF:9B
            X509v3 Authority Key Identifier:
                keyid:6C:2E:EA:30:DF:F0:85:9D:2C:BE:76:AB:19:13:B5:28:3A:28:ED:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B44A679920186479B0BBA69E86D282AA9766D939396F5262640CF36B6030A1A0/0/6C2EEA30DFF0859D2CBE76AB1913B5283A28ED7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C2EEA30DFF0859D2CBE76AB1913B5283A28ED7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B44A679920186479B0BBA69E86D282AA9766D939396F5262640CF36B6030A1A0/0/3133382e3231392e3233322e302f32342d3234203d3e20323634363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:e7:b4:a2:40:02:af:39:7a:2b:ab:9a:1d:c4:76:18:df:a9:
         6a:fb:3d:28:43:ee:04:0b:92:b9:8e:27:a2:07:3b:75:7d:2b:
         06:b6:12:32:c4:88:f4:23:85:17:fd:b4:95:3f:3d:2e:a8:96:
         fb:0a:a3:75:68:9e:c2:df:86:28:c0:5e:2c:f4:eb:ea:97:75:
         f7:7d:b6:96:51:27:91:73:0e:a4:59:91:66:00:80:4b:fb:11:
         a5:11:b3:47:16:8d:33:a3:d6:a5:58:1b:f9:2c:0e:a2:a4:d8:
         d0:2c:5b:3b:ad:50:05:15:80:16:53:51:a2:f6:e7:04:69:70:
         86:4c:be:27:bf:b0:a8:56:ac:2a:46:8d:5d:d1:2f:26:f6:e7:
         0e:d4:12:ab:f7:f1:18:5f:8f:46:28:c1:99:4a:7d:3f:ad:6d:
         0e:c5:1d:f9:a4:c3:d1:b6:d3:97:ce:00:68:ab:08:8c:a3:2b:
         a1:d5:db:69:67:72:c8:fb:e1:4b:d8:b0:fc:fd:90:34:c7:45:
         e1:cc:45:48:7a:ac:38:9e:08:cd:d4:1c:3f:cd:89:33:58:0f:
         24:47:bb:60:41:8c:16:9b:6c:21:76:11:1b:90:04:a7:5c:18:
         8a:a5:a4:8e:0a:3b:30:da:16:db:28:05:41:3e:8b:df:01:a4:
         76:26:51:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:33:01 2026 by rpki-client