Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301F196C3EC034EE5857625AFA5548C3F8774A3CE0D5511EA9019F1A3E4E6515/0/3133382e35392e3134302e302f32322d3232203d3e20323633373337.roa
File:                     3133382e35392e3134302e302f32322d3232203d3e20323633373337.roa (raw, json)
Hash identifier:          04JGzs8Oh+6ZB5ATQ4aFxRW066rIe/pne8gh9yWnt9o=
Subject key identifier:   D4:61:5C:5A:B1:CB:35:75:FD:8B:D9:30:04:5C:82:A2:B9:15:42:0A
Certificate issuer:       /CN=869E74EC658810B8C74561739A32C426E77C2A2F
Certificate serial:       7635CC10271A0A4F3CACD152C3447CF81C986095
Authority key identifier: 86:9E:74:EC:65:88:10:B8:C7:45:61:73:9A:32:C4:26:E7:7C:2A:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/869E74EC658810B8C74561739A32C426E77C2A2F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301F196C3EC034EE5857625AFA5548C3F8774A3CE0D5511EA9019F1A3E4E6515/0/3133382e35392e3134302e302f32322d3232203d3e20323633373337.roa
Signing time:             Fri 17 Apr 2026 14:05:00 +0000
ROA not before:           Fri 17 Apr 2026 14:00:00 +0000
ROA not after:            Fri 16 Apr 2027 14:05:00 +0000
asID:                     263737
IP address blocks:        138.59.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301F196C3EC034EE5857625AFA5548C3F8774A3CE0D5511EA9019F1A3E4E6515/0/869E74EC658810B8C74561739A32C426E77C2A2F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301F196C3EC034EE5857625AFA5548C3F8774A3CE0D5511EA9019F1A3E4E6515/0/869E74EC658810B8C74561739A32C426E77C2A2F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/869E74EC658810B8C74561739A32C426E77C2A2F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:35:cc:10:27:1a:0a:4f:3c:ac:d1:52:c3:44:7c:f8:1c:98:60:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=869E74EC658810B8C74561739A32C426E77C2A2F
        Validity
            Not Before: Apr 17 14:00:00 2026 GMT
            Not After : Apr 16 14:05:00 2027 GMT
        Subject: CN=D4615C5AB1CB3575FD8BD930045C82A2B915420A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:50:78:a6:c4:19:62:af:99:ed:dd:97:cf:01:
                    07:70:d3:db:dc:95:c2:a2:7c:04:6b:0f:34:9b:e9:
                    de:30:14:28:fc:b9:77:d7:17:fd:56:11:dc:43:22:
                    82:34:b6:1a:9a:4d:df:a2:d1:9a:3c:84:4d:bd:ac:
                    5e:2d:57:9f:75:bc:6d:62:ae:e7:63:f6:12:2f:8b:
                    c4:c6:f3:aa:a8:9f:8a:72:6c:b0:c3:fd:de:66:31:
                    37:54:08:2c:a3:91:b6:b6:47:ee:56:00:58:f2:c5:
                    16:70:b0:19:33:7e:8a:06:14:cd:4c:9b:0b:6d:52:
                    33:fc:0c:ec:af:91:b1:0e:65:6c:a9:fd:c9:83:a1:
                    cd:8d:b8:43:3f:03:df:83:6a:e1:c0:13:8b:86:e0:
                    3c:4b:25:6c:35:0e:2b:38:e6:50:63:9a:f8:1e:ac:
                    dc:03:7e:09:c9:ca:7a:83:fe:04:4a:55:d5:46:23:
                    b5:32:28:22:48:75:a1:78:9e:5c:9c:03:e5:67:1b:
                    ab:cd:13:4d:93:4f:a6:54:2a:e4:09:3f:c1:dc:24:
                    6e:32:b3:05:ee:fe:7c:a5:c6:35:09:81:7e:a5:d0:
                    47:09:be:e4:13:3d:40:44:4d:d3:00:07:8a:fc:f6:
                    64:fa:8f:63:aa:42:5b:84:19:94:c9:26:85:a6:a0:
                    6a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:61:5C:5A:B1:CB:35:75:FD:8B:D9:30:04:5C:82:A2:B9:15:42:0A
            X509v3 Authority Key Identifier:
                keyid:86:9E:74:EC:65:88:10:B8:C7:45:61:73:9A:32:C4:26:E7:7C:2A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301F196C3EC034EE5857625AFA5548C3F8774A3CE0D5511EA9019F1A3E4E6515/0/869E74EC658810B8C74561739A32C426E77C2A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/869E74EC658810B8C74561739A32C426E77C2A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301F196C3EC034EE5857625AFA5548C3F8774A3CE0D5511EA9019F1A3E4E6515/0/3133382e35392e3134302e302f32322d3232203d3e20323633373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:ac:74:50:6e:0a:13:81:2f:2c:4d:e5:ae:a3:c9:cc:d3:f2:
         77:6d:5c:4c:b6:df:d4:af:18:d2:5e:6f:9b:74:ea:4d:2d:8f:
         fc:2a:19:b4:03:c5:69:21:82:98:d1:9f:43:dc:26:4f:ab:36:
         7a:1b:31:92:71:ed:d3:ee:78:23:4f:3a:53:b6:9e:14:6f:90:
         d3:ab:81:9d:73:20:ef:7f:8a:39:41:e8:be:44:31:3a:41:ae:
         2e:43:53:f5:5d:4c:da:18:5b:ab:9d:da:3b:b8:f8:5b:00:a3:
         3b:ff:9f:28:e2:3e:55:7a:87:e6:3f:fe:a7:4d:f9:4e:91:72:
         b2:18:8c:72:d3:df:53:da:ad:ea:2f:4d:92:66:72:00:f5:d1:
         25:8d:5e:0f:65:f6:ae:d4:ba:28:6c:9e:d8:93:11:ee:e7:e2:
         41:be:c9:3a:04:02:93:4e:c7:68:12:f2:59:5f:9a:a2:55:41:
         25:51:f5:c0:dd:c5:a8:c4:fc:de:6c:05:8b:a7:71:84:d0:35:
         ed:dd:6e:e8:ad:79:73:9b:ed:87:07:a8:d3:52:32:68:d2:7f:
         33:ef:7f:48:bb:ce:d0:56:82:b3:04:ac:9d:c9:0f:99:14:88:
         18:c7:dc:f4:eb:a2:d6:bf:5c:af:ff:0e:2f:9a:98:10:75:27:
         05:cf:da:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:22:12 2026 by rpki-client