Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233362e302f32342d3234203d3e203238333937.roa
File:                     3133312e302e3233362e302f32342d3234203d3e203238333937.roa (raw, json)
Hash identifier:          80AAxXzPNwcjES0OcAz6u1mwxFj7tvVT5wcMFhkZiU4=
Subject key identifier:   BB:15:06:3A:72:FB:A7:6E:B8:61:72:FE:87:44:15:DF:B2:F7:0E:97
Certificate issuer:       /CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
Certificate serial:       1FFAF6AFCCA85B3310F2E787F5AE5340CE9CA316
Authority key identifier: 9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233362e302f32342d3234203d3e203238333937.roa
Signing time:             Mon 01 Jun 2026 21:44:56 +0000
ROA not before:           Mon 01 Jun 2026 21:39:56 +0000
ROA not after:            Mon 31 May 2027 21:44:56 +0000
asID:                     28397
IP address blocks:        131.0.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fa:f6:af:cc:a8:5b:33:10:f2:e7:87:f5:ae:53:40:ce:9c:a3:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
        Validity
            Not Before: Jun  1 21:39:56 2026 GMT
            Not After : May 31 21:44:56 2027 GMT
        Subject: CN=BB15063A72FBA76EB86172FE874415DFB2F70E97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c1:e0:7c:d5:5e:cf:0e:3a:15:02:8e:7e:d7:
                    5d:8b:01:48:a7:21:f0:ff:9d:be:04:e2:92:42:dc:
                    5d:89:73:ea:01:e7:bb:3f:1e:99:1f:c0:a1:cf:ed:
                    2e:24:03:25:b2:1b:3b:bd:06:d6:e1:99:d2:6b:ad:
                    8e:65:d5:09:b4:31:dc:58:29:d0:ce:b3:6e:05:00:
                    77:c5:7b:02:ee:56:76:cd:37:ac:87:ea:56:6d:59:
                    5c:bd:57:ea:b7:9f:d7:eb:32:da:e7:16:56:2d:3f:
                    e7:e5:40:35:14:72:60:d9:d4:ca:80:97:e3:83:b4:
                    bf:c0:4d:80:5a:86:a4:a3:31:31:e1:0d:6e:67:79:
                    a3:95:0c:0e:e6:c8:cb:b6:ac:6a:ae:e9:33:b4:ce:
                    dc:67:71:94:7f:de:56:ab:5b:b9:c6:4a:5f:2a:86:
                    9b:2e:65:f3:b2:25:eb:eb:8a:fe:08:1f:51:8d:66:
                    cc:58:92:cc:bd:f0:88:93:31:1b:92:c6:b2:4f:4d:
                    e2:b4:01:4c:84:3f:ed:9c:cf:8a:ab:38:9d:90:d1:
                    c1:75:72:09:5b:cf:81:26:9b:df:2c:7c:42:aa:81:
                    6a:a3:40:3e:67:0b:5d:68:7d:ab:33:c0:49:36:22:
                    09:44:c1:08:b1:2b:bb:3a:71:8c:5a:3d:76:bb:e7:
                    e2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:15:06:3A:72:FB:A7:6E:B8:61:72:FE:87:44:15:DF:B2:F7:0E:97
            X509v3 Authority Key Identifier:
                keyid:9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233362e302f32342d3234203d3e203238333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:78:b9:ea:dc:a9:84:a5:17:be:78:b9:40:9f:04:f2:f4:39:
         6e:86:f9:d8:18:24:c8:62:1b:b7:b3:3b:52:44:43:b6:84:dc:
         72:29:06:d0:14:cb:b2:8d:8b:08:f2:9c:7d:f9:ca:3b:c8:e1:
         b1:15:f3:cd:af:c9:ee:3a:52:cf:ac:d4:3f:f8:4e:fe:39:f3:
         9c:fc:7b:a1:d1:4e:1f:cd:8d:4c:cb:f1:1c:d2:cb:b5:1e:28:
         9d:50:15:c8:b5:1e:a8:5e:d5:1c:03:fc:21:12:fb:41:e5:f4:
         9c:0a:41:12:98:8a:09:0e:e5:a6:dc:6e:d9:41:7b:42:0f:db:
         55:c2:96:94:d5:bb:e4:97:f9:46:e7:aa:83:c9:0f:d7:6e:eb:
         45:d6:9e:05:9a:88:a5:25:92:8e:95:dd:b0:b3:6d:11:3e:23:
         d5:fe:e8:ae:a6:85:f6:7f:40:55:58:17:f5:2a:40:35:c8:c2:
         0e:62:41:68:0f:c9:46:6f:ba:17:dc:f2:74:14:2c:d7:23:c6:
         b7:9d:be:c4:73:d5:7e:cf:be:d1:75:5e:c5:24:54:52:23:07:
         64:59:9f:cd:9a:fe:43:5c:7d:c8:b0:40:55:93:26:8a:27:7a:
         47:3d:f1:ac:10:70:42:2b:20:2a:a7:23:61:46:82:05:53:96:
         37:4d:22:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:59:55 2026 by rpki-client