Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B44A679920186479B0BBA69E86D282AA9766D939396F5262640CF36B6030A1A0/0/3133382e3231392e3233332e302f32342d3234203d3e20323634363131.roa
File:                     3133382e3231392e3233332e302f32342d3234203d3e20323634363131.roa (raw, json)
Hash identifier:          1V8VokM9GEqWGvzvG5hf+fqJskHHDP9rc3nXIUotKWI=
Subject key identifier:   28:F8:85:C1:3F:4E:0B:1A:B5:9A:6D:6E:8B:9D:30:04:29:8F:E3:DC
Certificate issuer:       /CN=6C2EEA30DFF0859D2CBE76AB1913B5283A28ED7D
Certificate serial:       18CB23CF2A4501079D9F66A8022FE85E4EF71CFC
Authority key identifier: 6C:2E:EA:30:DF:F0:85:9D:2C:BE:76:AB:19:13:B5:28:3A:28:ED:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C2EEA30DFF0859D2CBE76AB1913B5283A28ED7D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B44A679920186479B0BBA69E86D282AA9766D939396F5262640CF36B6030A1A0/0/3133382e3231392e3233332e302f32342d3234203d3e20323634363131.roa
Signing time:             Fri 27 Mar 2026 20:35:00 +0000
ROA not before:           Fri 27 Mar 2026 20:30:00 +0000
ROA not after:            Fri 26 Mar 2027 20:35:00 +0000
asID:                     264611
IP address blocks:        138.219.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B44A679920186479B0BBA69E86D282AA9766D939396F5262640CF36B6030A1A0/0/6C2EEA30DFF0859D2CBE76AB1913B5283A28ED7D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B44A679920186479B0BBA69E86D282AA9766D939396F5262640CF36B6030A1A0/0/6C2EEA30DFF0859D2CBE76AB1913B5283A28ED7D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C2EEA30DFF0859D2CBE76AB1913B5283A28ED7D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:cb:23:cf:2a:45:01:07:9d:9f:66:a8:02:2f:e8:5e:4e:f7:1c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C2EEA30DFF0859D2CBE76AB1913B5283A28ED7D
        Validity
            Not Before: Mar 27 20:30:00 2026 GMT
            Not After : Mar 26 20:35:00 2027 GMT
        Subject: CN=28F885C13F4E0B1AB59A6D6E8B9D3004298FE3DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:25:32:ef:16:10:98:8e:a8:37:d6:2d:44:48:
                    06:3d:58:21:bf:06:c0:b7:c3:b5:d8:30:6f:01:bf:
                    d1:08:1f:48:e9:05:72:84:8f:ed:2c:51:27:04:0f:
                    8d:a4:b8:98:07:a6:61:8f:c3:31:01:4b:6f:f5:7f:
                    e5:66:51:8b:57:4a:47:dd:4a:d0:5c:af:cc:40:82:
                    4f:da:4f:f2:e6:78:9c:f2:f8:7c:f8:a3:cb:16:bb:
                    0a:a7:c5:42:63:35:c3:e5:d8:9c:37:ea:df:86:1e:
                    cb:86:6a:1c:e3:48:79:d8:76:c3:91:d4:ea:e8:5b:
                    67:d7:42:5b:11:11:e8:80:93:35:b6:98:63:80:a9:
                    a6:0b:dc:0f:63:25:fe:03:84:b6:ea:15:5a:8d:f5:
                    cb:1c:75:11:b8:3a:e5:78:fe:30:01:76:4c:5e:49:
                    46:9f:e7:a1:de:87:e8:84:95:c4:1b:b0:5c:a7:8e:
                    92:46:23:f9:59:a8:1b:e2:46:b1:8c:6b:ef:c5:e6:
                    ec:6c:e6:d2:b1:10:35:1d:b6:3b:58:8c:6d:51:43:
                    a6:45:ec:ac:0c:ad:3e:a6:57:f1:82:fa:99:e0:d3:
                    8b:29:11:de:f1:71:5d:14:f8:6b:dc:1d:23:20:0d:
                    56:ec:40:92:02:df:15:21:55:e0:ed:9b:b8:98:70:
                    8a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F8:85:C1:3F:4E:0B:1A:B5:9A:6D:6E:8B:9D:30:04:29:8F:E3:DC
            X509v3 Authority Key Identifier:
                keyid:6C:2E:EA:30:DF:F0:85:9D:2C:BE:76:AB:19:13:B5:28:3A:28:ED:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B44A679920186479B0BBA69E86D282AA9766D939396F5262640CF36B6030A1A0/0/6C2EEA30DFF0859D2CBE76AB1913B5283A28ED7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C2EEA30DFF0859D2CBE76AB1913B5283A28ED7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B44A679920186479B0BBA69E86D282AA9766D939396F5262640CF36B6030A1A0/0/3133382e3231392e3233332e302f32342d3234203d3e20323634363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:af:f0:d0:c2:cd:5b:f3:9d:b4:0b:fb:c0:5b:50:0b:eb:50:
         16:34:86:5f:91:8b:b8:c5:e8:c2:d7:5d:8b:43:95:5b:f2:4c:
         e2:97:e5:53:6f:7b:51:bd:0f:7e:95:c6:0e:dc:be:d6:87:1f:
         bb:18:5a:67:78:e8:87:db:46:6e:0c:8b:31:68:5f:d7:60:4d:
         25:ee:49:8c:75:71:ec:56:ab:c3:18:a3:9b:2a:15:64:4e:31:
         18:e8:93:0a:10:0a:07:a0:bd:5f:8c:e3:4f:85:a7:1b:83:ff:
         04:b7:d3:6a:51:3f:09:15:00:7e:e4:cb:08:83:76:05:d2:8f:
         09:fa:d1:15:cb:e1:12:0a:f2:c8:d9:bb:68:38:11:16:b8:0c:
         2e:dc:7c:62:24:19:32:ab:2c:ab:41:e3:9b:91:b3:e4:ba:85:
         c9:f9:ef:0f:b1:63:fe:7b:4b:22:71:76:48:af:14:13:17:05:
         9e:aa:16:b9:f5:1c:b4:48:08:db:7c:6d:98:40:8a:32:f9:05:
         1b:5c:71:04:7d:58:58:1a:10:8a:fb:f8:ff:18:ae:d2:da:8b:
         96:d8:a0:92:99:48:84:3f:8c:fb:5a:a1:e1:6b:29:31:db:8a:
         79:6b:01:b3:9f:74:4c:5d:15:63:1d:df:ab:5d:64:f8:9d:b3:
         ff:17:92:84
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUGMsjzypFAQedn2aoAi/oXk73HPwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkMyRUVBMzBERkYwODU5RDJDQkU3NkFCMTkxM0I1Mjgz
QTI4RUQ3RDAeFw0yNjAzMjcyMDMwMDBaFw0yNzAzMjYyMDM1MDBaMDMxMTAvBgNV
BAMTKDI4Rjg4NUMxM0Y0RTBCMUFCNTlBNkQ2RThCOUQzMDA0Mjk4RkUzREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrJTLvFhCYjqg31i1ESAY9WCG/
BsC3w7XYMG8Bv9EIH0jpBXKEj+0sUScED42kuJgHpmGPwzEBS2/1f+VmUYtXSkfd
StBcr8xAgk/aT/LmeJzy+Hz4o8sWuwqnxUJjNcPl2Jw36t+GHsuGahzjSHnYdsOR
1OroW2fXQlsREeiAkzW2mGOAqaYL3A9jJf4DhLbqFVqN9cscdRG4OuV4/jABdkxe
SUaf56Heh+iElcQbsFynjpJGI/lZqBviRrGMa+/F5uxs5tKxEDUdtjtYjG1RQ6ZF
7KwMrT6mV/GC+png04spEd7xcV0U+GvcHSMgDVbsQJIC3xUhVeDtm7iYcIpTAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUKPiFwT9OCxq1mm1ui50wBCmP49wwHwYDVR0j
BBgwFoAUbC7qMN/whZ0svnarGRO1KDoo7X0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNDRBNjc5OTIwMTg2NDc5QjBCQkE2OUU4NkQyODJBQTk3
NjZEOTM5Mzk2RjUyNjI2NDBDRjM2QjYwMzBBMUEwLzAvNkMyRUVBMzBERkYwODU5
RDJDQkU3NkFCMTkxM0I1MjgzQTI4RUQ3RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QzJFRUEzMERGRjA4NTlEMkNC
RTc2QUIxOTEzQjUyODNBMjhFRDdELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjQ0QTY3OTkyMDE4NjQ3OUIwQkJBNjlFODZEMjgyQUE5NzY2RDkzOTM5
NkY1MjYyNjQwQ0YzNkI2MDMwQTFBMC8wLzMxMzMzODJlMzIzMTM5MmUzMjMzMzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzNjMxMzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACK
2+kwDQYJKoZIhvcNAQELBQADggEBAEuv8NDCzVvznbQL+8BbUAvrUBY0hl+Ri7jF
6MLXXYtDlVvyTOKX5VNve1G9D36Vxg7cvtaHH7sYWmd46IfbRm4MizFoX9dgTSXu
SYx1cexWq8MYo5sqFWROMRjokwoQCgegvV+M40+FpxuD/wS302pRPwkVAH7kywiD
dgXSjwn60RXL4RIK8sjZu2g4ERa4DC7cfGIkGTKrLKtB45uRs+S6hcn57w+xY/57
SyJxdkivFBMXBZ6qFrn1HLRICNt8bZhAijL5BRtccQR9WFgaEIr7+P8YrtLai5bY
oJKZSIQ/jPtaoeFrKTHbinlrAbOfdExdFWMd36tdZPids/8XkoQ=
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:32:56 2026 by rpki-client