Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3133312e3232312e32382e302f32322d3234203d3e203237363635.roa
File:                     3133312e3232312e32382e302f32322d3234203d3e203237363635.roa (raw, json)
Hash identifier:          bZPm//+BsyPNeLWoKe041LTpug6M2xnfmvf0ivzTb8E=
Subject key identifier:   18:26:33:58:05:A0:7A:D7:7B:9F:57:5C:A0:B1:B3:C9:6A:11:AB:BB
Certificate issuer:       /CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
Certificate serial:       1B56022E43E047941B44A982DC3E11A64808C544
Authority key identifier: 8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3133312e3232312e32382e302f32322d3234203d3e203237363635.roa
Signing time:             Tue 28 Oct 2025 20:20:00 +0000
ROA not before:           Tue 28 Oct 2025 20:15:00 +0000
ROA not after:            Tue 27 Oct 2026 20:20:00 +0000
asID:                     27665
IP address blocks:        131.221.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 11 Nov 2025 10:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:56:02:2e:43:e0:47:94:1b:44:a9:82:dc:3e:11:a6:48:08:c5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
        Validity
            Not Before: Oct 28 20:15:00 2025 GMT
            Not After : Oct 27 20:20:00 2026 GMT
        Subject: CN=1826335805A07AD77B9F575CA0B1B3C96A11ABBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3d:59:8e:2d:bb:e9:6c:7c:ff:86:2e:40:e9:
                    fe:eb:21:9a:ce:be:29:ac:1f:33:b7:1d:3b:9b:8d:
                    71:49:5a:f5:d4:a3:d8:63:10:63:ba:42:5e:c6:01:
                    ee:8f:67:71:07:74:ef:f9:da:c6:3e:21:d8:d8:9e:
                    67:29:ca:68:ba:79:a7:15:95:38:48:95:f0:96:cf:
                    f4:33:6b:47:1b:8e:94:5f:a5:29:69:40:bb:c5:88:
                    64:97:0b:88:e6:49:c7:82:19:fa:89:f0:57:66:b4:
                    ed:8a:f4:bd:51:fc:a1:f3:c9:0a:24:55:a5:3a:34:
                    45:43:fa:e5:a3:28:1f:57:0b:2d:97:1d:1e:7d:34:
                    56:32:21:c8:82:ee:ba:d2:2b:6b:f9:41:6d:9f:69:
                    ed:9a:cd:74:fd:db:30:95:e3:1f:ed:3f:b9:05:db:
                    03:5d:94:2d:9f:03:2e:07:18:64:45:65:35:43:11:
                    37:11:ef:06:71:d0:51:5c:a6:ff:c4:76:8e:2c:7e:
                    ab:7e:5b:d9:7e:5c:bc:07:a7:a9:ac:16:7a:61:42:
                    55:82:f1:73:1d:50:9b:5e:c5:af:ad:f8:6a:a3:9c:
                    1a:36:4d:07:02:4c:f3:f4:e7:21:42:ff:f6:dc:4a:
                    6b:b7:7a:18:ff:6e:ab:d1:94:0c:73:56:43:ad:c1:
                    d1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:26:33:58:05:A0:7A:D7:7B:9F:57:5C:A0:B1:B3:C9:6A:11:AB:BB
            X509v3 Authority Key Identifier:
                keyid:8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3133312e3232312e32382e302f32322d3234203d3e203237363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:b5:ff:47:df:23:e1:33:50:5d:bc:0c:ea:1f:0d:05:ff:e2:
         a7:27:ef:86:5d:66:9f:67:6c:0a:78:6f:95:7c:05:03:d7:f0:
         c0:ce:de:ac:62:27:57:52:51:dc:05:38:cd:74:86:77:0c:34:
         05:16:8b:b8:53:d9:50:5f:77:c3:38:2c:13:e8:03:37:09:97:
         5f:40:bb:7d:94:0c:16:4b:63:49:ee:59:e1:c8:23:09:c8:c4:
         92:6f:11:24:55:73:9e:e2:43:40:4e:16:3e:70:37:f1:31:8c:
         64:83:ab:be:e0:c4:d5:1c:0e:32:e9:8e:38:06:06:e0:0a:22:
         c8:48:a2:9c:f3:83:08:bd:e8:e3:8e:26:f2:10:fd:49:cf:bb:
         2f:0c:2b:92:9f:9f:02:13:4e:d8:03:26:f7:10:bc:77:4c:e5:
         21:e3:2d:18:62:9c:48:54:aa:03:21:04:e8:95:e8:a5:b4:c8:
         fc:20:f7:1e:99:f0:83:ed:01:18:b7:fa:3d:39:32:22:58:82:
         da:97:41:de:96:09:83:0f:0b:b2:05:c4:8a:b2:57:6c:a3:af:
         c6:84:95:77:aa:da:8c:d3:cf:aa:86:f9:53:d6:d5:e0:88:25:
         21:49:2d:21:97:18:2d:9c:74:ef:5b:39:b2:f7:46:12:4e:8a:
         ef:c5:9a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 11:52:05 2025 by rpki-client