Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2425A3DA5C285B75CF197A0499EF67556225BD4EF0032D43F672CE360943F984/0/3133382e3131372e3136382e302f32322d3232203d3e20323731383531.roa
File:                     3133382e3131372e3136382e302f32322d3232203d3e20323731383531.roa (raw, json)
Hash identifier:          aeSgneqolg5DnvvNKRD6cwLKfkqRBKvKEmyHNCj1dc8=
Subject key identifier:   C2:A7:5A:0F:E6:CA:1F:E6:A9:8C:A2:29:17:D0:20:61:A6:01:37:A9
Certificate issuer:       /CN=4F3CDC59713BA78ECEBE5D1D616EDEAA816A00EC
Certificate serial:       74B31AB0BFC23E17CF032C950F46E3020646D109
Authority key identifier: 4F:3C:DC:59:71:3B:A7:8E:CE:BE:5D:1D:61:6E:DE:AA:81:6A:00:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F3CDC59713BA78ECEBE5D1D616EDEAA816A00EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2425A3DA5C285B75CF197A0499EF67556225BD4EF0032D43F672CE360943F984/0/3133382e3131372e3136382e302f32322d3232203d3e20323731383531.roa
Signing time:             Tue 10 Feb 2026 01:15:00 +0000
ROA not before:           Tue 10 Feb 2026 01:10:00 +0000
ROA not after:            Tue 09 Feb 2027 01:15:00 +0000
asID:                     271851
IP address blocks:        138.117.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2425A3DA5C285B75CF197A0499EF67556225BD4EF0032D43F672CE360943F984/0/4F3CDC59713BA78ECEBE5D1D616EDEAA816A00EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2425A3DA5C285B75CF197A0499EF67556225BD4EF0032D43F672CE360943F984/0/4F3CDC59713BA78ECEBE5D1D616EDEAA816A00EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F3CDC59713BA78ECEBE5D1D616EDEAA816A00EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Mar 2026 23:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b3:1a:b0:bf:c2:3e:17:cf:03:2c:95:0f:46:e3:02:06:46:d1:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3CDC59713BA78ECEBE5D1D616EDEAA816A00EC
        Validity
            Not Before: Feb 10 01:10:00 2026 GMT
            Not After : Feb  9 01:15:00 2027 GMT
        Subject: CN=C2A75A0FE6CA1FE6A98CA22917D02061A60137A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:59:be:c9:5f:4e:76:1d:bf:d8:72:6b:77:83:
                    00:0e:4f:15:38:10:46:a0:e5:63:45:f4:d4:aa:0a:
                    05:33:92:47:e8:91:ec:33:fd:4b:df:0f:d8:ff:e1:
                    9e:3b:e0:7b:b2:85:f5:22:d2:37:a1:fb:12:fa:cb:
                    da:37:cb:54:41:21:82:62:e0:2f:7a:c4:41:37:5e:
                    a6:24:08:f0:23:89:9c:bb:1a:3a:e6:91:8f:2f:9d:
                    d2:9b:88:a4:28:c4:eb:13:09:9f:9e:33:3c:2b:d3:
                    0f:f4:6b:10:8f:32:f4:a6:9a:d1:02:7b:3f:22:5a:
                    df:31:ce:17:cb:2f:37:ab:ed:f2:c3:0b:96:7f:eb:
                    7c:42:3d:3d:95:10:ab:4b:08:51:05:16:00:bb:97:
                    1d:25:1d:c8:7f:ff:a4:31:48:50:8a:89:d2:6f:52:
                    39:5f:33:5c:c5:68:00:a8:69:ed:c6:31:0b:48:db:
                    71:07:c4:81:09:ed:5c:44:51:56:40:6b:7c:a8:5d:
                    19:06:53:1c:1d:1e:d6:32:62:d2:a2:fb:96:e5:3f:
                    02:44:12:5f:d5:d7:71:38:7f:f8:4b:cb:6d:da:3e:
                    67:89:4d:4a:6e:9b:d1:b2:ee:1e:21:be:30:a3:6b:
                    92:5b:3c:37:e9:1b:df:ed:9b:6c:5c:9d:5d:fa:30:
                    be:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A7:5A:0F:E6:CA:1F:E6:A9:8C:A2:29:17:D0:20:61:A6:01:37:A9
            X509v3 Authority Key Identifier:
                keyid:4F:3C:DC:59:71:3B:A7:8E:CE:BE:5D:1D:61:6E:DE:AA:81:6A:00:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2425A3DA5C285B75CF197A0499EF67556225BD4EF0032D43F672CE360943F984/0/4F3CDC59713BA78ECEBE5D1D616EDEAA816A00EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F3CDC59713BA78ECEBE5D1D616EDEAA816A00EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2425A3DA5C285B75CF197A0499EF67556225BD4EF0032D43F672CE360943F984/0/3133382e3131372e3136382e302f32322d3232203d3e20323731383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:11:c2:2a:d1:a3:62:66:df:1d:89:6c:59:17:69:cf:14:6d:
         8c:14:a2:e8:87:a9:6d:de:a7:17:6e:4f:0e:7d:34:fc:3e:c8:
         f7:df:f5:ea:c2:7c:43:17:e0:13:a6:e0:e4:ff:f7:e9:46:f0:
         92:76:8c:6b:2b:1d:63:fa:ec:a6:b0:9f:34:15:68:bb:c1:27:
         cc:88:21:5b:28:0f:3e:1d:9f:3d:55:c8:27:91:2c:1e:e6:fc:
         b6:1c:55:46:b5:e8:6a:c6:e6:1c:89:6b:6e:7e:bf:a0:bd:9e:
         45:e6:34:44:cd:92:01:06:ae:72:3a:6c:b9:a0:cb:70:68:0a:
         a6:7d:76:d6:5c:0d:6f:c4:01:6e:28:9a:04:55:96:48:ad:48:
         e7:db:a5:a4:b8:3d:8c:d4:7c:1e:66:78:fe:67:33:f7:55:7c:
         48:27:d8:66:11:13:38:9a:38:1f:69:41:3f:79:0d:43:8f:60:
         15:c8:64:9d:b8:93:4c:6e:e4:24:3e:8c:1e:2f:e8:c3:2e:09:
         1c:6c:3d:43:1e:a5:4d:33:1e:04:08:2c:92:85:08:d7:80:48:
         88:1c:f7:7e:7c:58:f7:e7:af:42:87:fb:d4:9b:61:b8:cf:6a:
         d0:25:ba:8a:fd:eb:cc:36:ea:88:ed:b6:71:86:8e:f4:07:18:
         c3:9f:d0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:38:39 2026 by rpki-client