Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/3133382e3131372e37362e3234302f32392d3239203d3e20323733393432.roa
File:                     3133382e3131372e37362e3234302f32392d3239203d3e20323733393432.roa (raw, json)
Hash identifier:          WOYTNtmyIldp1MCstEcoWCrOYCBJCsC+HL4T4kcf72Q=
Subject key identifier:   DD:CE:75:29:1A:89:85:0E:0A:2D:BF:0C:9F:8A:60:9D:5A:4E:CC:F8
Certificate issuer:       /CN=4B7687F569E5893215BAF86B72C4274237504316
Certificate serial:       3493371BFC5CBFD5B63DDEC366FAC3F10E74434E
Authority key identifier: 4B:76:87:F5:69:E5:89:32:15:BA:F8:6B:72:C4:27:42:37:50:43:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B7687F569E5893215BAF86B72C4274237504316.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/3133382e3131372e37362e3234302f32392d3239203d3e20323733393432.roa
Signing time:             Wed 22 Oct 2025 18:50:46 +0000
ROA not before:           Wed 22 Oct 2025 18:45:46 +0000
ROA not after:            Wed 21 Oct 2026 18:50:46 +0000
asID:                     273942
IP address blocks:        138.117.76.240/29 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/4B7687F569E5893215BAF86B72C4274237504316.crl
                          rsync://repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/4B7687F569E5893215BAF86B72C4274237504316.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B7687F569E5893215BAF86B72C4274237504316.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 08 Nov 2025 18:59:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:93:37:1b:fc:5c:bf:d5:b6:3d:de:c3:66:fa:c3:f1:0e:74:43:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B7687F569E5893215BAF86B72C4274237504316
        Validity
            Not Before: Oct 22 18:45:46 2025 GMT
            Not After : Oct 21 18:50:46 2026 GMT
        Subject: CN=DDCE75291A89850E0A2DBF0C9F8A609D5A4ECCF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:19:b8:c5:3c:bf:9a:fa:52:0b:ae:a6:2c:2a:
                    5e:c8:26:a1:0a:ab:bd:53:93:17:20:3b:de:6d:8e:
                    5b:4c:3c:98:36:ec:fa:f3:d5:12:6f:86:66:15:6e:
                    61:12:e3:9a:20:62:68:9d:94:3a:f4:4a:2b:db:cf:
                    fe:e1:72:e2:3e:61:82:13:9c:aa:5e:80:94:f3:22:
                    15:62:25:5c:3c:7d:df:cf:74:65:4b:29:c1:8b:d9:
                    40:6a:20:73:7e:23:7c:8f:ac:62:00:f6:06:45:cf:
                    c9:1a:c7:c7:bc:b0:f1:75:e5:b9:53:ca:a8:c5:d0:
                    b8:9e:c9:30:0b:78:41:ce:1a:9f:74:ef:4f:da:4e:
                    b1:df:ff:ed:5f:c5:24:51:4b:b1:48:59:04:75:91:
                    70:89:24:ef:24:e2:7d:28:d0:ff:77:53:5e:83:56:
                    c3:f1:fb:88:d6:06:59:e9:0f:9c:39:fe:11:b1:d1:
                    f2:e7:8a:cc:98:72:50:28:45:7d:ee:b3:47:4b:9b:
                    c2:26:2e:bf:2c:a4:d9:62:87:63:f6:27:72:9a:db:
                    05:43:3f:9e:94:a8:6e:94:7c:3e:a6:89:79:f0:d6:
                    09:3b:1c:67:91:3d:ac:8a:bc:b7:9d:0f:e4:57:80:
                    76:6e:91:2d:ff:b6:00:42:8b:f5:a0:5d:69:d1:bc:
                    44:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:CE:75:29:1A:89:85:0E:0A:2D:BF:0C:9F:8A:60:9D:5A:4E:CC:F8
            X509v3 Authority Key Identifier:
                keyid:4B:76:87:F5:69:E5:89:32:15:BA:F8:6B:72:C4:27:42:37:50:43:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/4B7687F569E5893215BAF86B72C4274237504316.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B7687F569E5893215BAF86B72C4274237504316.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/3133382e3131372e37362e3234302f32392d3239203d3e20323733393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.76.240/29

    Signature Algorithm: sha256WithRSAEncryption
         23:81:0b:ae:32:f8:22:da:1f:8f:c3:91:d7:1d:d6:a6:2e:a5:
         0e:f6:79:12:8a:92:38:68:d1:73:e6:d0:7b:75:39:64:5a:fc:
         47:de:4f:4c:db:f3:34:38:b7:80:fd:d2:37:f4:ee:36:e5:26:
         35:eb:e5:26:b8:b2:3a:1f:1d:3a:26:46:2e:2a:7b:17:c1:c3:
         6e:ca:d0:5c:f1:19:af:29:25:db:28:08:33:d1:01:c3:cb:1f:
         0a:71:96:f9:d1:50:2f:3b:a5:47:31:be:76:fb:f4:93:4e:7a:
         d6:8f:e1:b6:fe:4a:0f:af:20:51:ba:17:b2:47:a0:dd:7e:d5:
         fb:95:06:60:a7:f4:36:f8:ff:be:0f:af:fc:c5:48:e4:30:67:
         88:0d:66:a0:bd:ab:73:9f:8a:ab:94:1d:41:15:40:d3:58:95:
         2f:73:fa:c1:ee:ba:21:ed:05:e9:da:e4:bf:66:2b:7d:55:2b:
         f1:05:84:8c:19:fc:5c:85:87:cd:f4:54:4a:43:83:93:41:5e:
         ed:1b:0e:d2:39:bd:0d:4d:c7:ad:31:96:50:b3:d9:8d:69:3d:
         77:69:12:ef:10:0a:75:20:b2:02:33:60:ba:53:c6:76:82:5e:
         d9:ca:f9:98:6d:1d:b2:25:8d:0c:b3:a6:79:d9:e4:3d:b1:dc:
         da:92:01:ec
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUNJM3G/xcv9W2Pd7DZvrD8Q50Q04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI3Njg3RjU2OUU1ODkzMjE1QkFGODZCNzJDNDI3NDIz
NzUwNDMxNjAeFw0yNTEwMjIxODQ1NDZaFw0yNjEwMjExODUwNDZaMDMxMTAvBgNV
BAMTKEREQ0U3NTI5MUE4OTg1MEUwQTJEQkYwQzlGOEE2MDlENUE0RUNDRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+GbjFPL+a+lILrqYsKl7IJqEK
q71TkxcgO95tjltMPJg27Prz1RJvhmYVbmES45ogYmidlDr0Sivbz/7hcuI+YYIT
nKpegJTzIhViJVw8fd/PdGVLKcGL2UBqIHN+I3yPrGIA9gZFz8kax8e8sPF15blT
yqjF0LieyTALeEHOGp9070/aTrHf/+1fxSRRS7FIWQR1kXCJJO8k4n0o0P93U16D
VsPx+4jWBlnpD5w5/hGx0fLnisyYclAoRX3us0dLm8ImLr8spNlih2P2J3Ka2wVD
P56UqG6UfD6miXnw1gk7HGeRPayKvLedD+RXgHZukS3/tgBCi/WgXWnRvES5AgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQU3c51KRqJhQ4KLb8Mn4pgnVpOzPgwHwYDVR0j
BBgwFoAUS3aH9WnliTIVuvhrcsQnQjdQQxYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MjdGOTA4M0E4RDVDQjNDNjYwMUQxQTMwNDE5MjUyNjAw
OTI3MDQ5QkVFQUI2MDVDNDVFQzg5QjcyQkE5RkRBLzAvNEI3Njg3RjU2OUU1ODkz
MjE1QkFGODZCNzJDNDI3NDIzNzUwNDMxNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Qjc2ODdGNTY5RTU4OTMyMTVC
QUY4NkI3MkM0Mjc0MjM3NTA0MzE2LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTI3RjkwODNBOEQ1Q0IzQzY2MDFEMUEzMDQxOTI1MjYwMDkyNzA0OUJF
RUFCNjA1QzQ1RUM4OUI3MkJBOUZEQS8wLzMxMzMzODJlMzEzMTM3MmUzNzM2MmUz
MjM0MzAyZjMyMzkyZDMyMzkyMDNkM2UyMDMyMzczMzM5MzQzMi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMF
A4p1TPAwDQYJKoZIhvcNAQELBQADggEBACOBC64y+CLaH4/Dkdcd1qYupQ72eRKK
kjho0XPm0Ht1OWRa/EfeT0zb8zQ4t4D90jf07jblJjXr5Sa4sjofHTomRi4qexfB
w27K0FzxGa8pJdsoCDPRAcPLHwpxlvnRUC87pUcxvnb79JNOetaP4bb+Sg+vIFG6
F7JHoN1+1fuVBmCn9Db4/74Pr/zFSOQwZ4gNZqC9q3OfiquUHUEVQNNYlS9z+sHu
uiHtBena5L9mK31VK/EFhIwZ/FyFh830VEpDg5NBXu0bDtI5vQ1Nx60xllCz2Y1p
PXdpEu8QCnUgsgIzYLpTxnaCXtnK+ZhtHbIljQyzpnnZ5D2x3NqSAew=
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:02:50 2025 by rpki-client