Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/3133382e3138362e36362e302f32342d3234203d3e20323635353631.roa
File:                     3133382e3138362e36362e302f32342d3234203d3e20323635353631.roa (raw, json)
Hash identifier:          J7+Qcsi3dMzc8adjDdStLalPa+x/zJtFJzWqMM+1JN8=
Subject key identifier:   62:99:96:66:C5:1D:46:8F:B4:45:F7:7E:A6:EA:89:D4:AC:07:A2:69
Certificate issuer:       /CN=78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7
Certificate serial:       10E73FC908ED84AB419E3C02620523C604A50F6E
Authority key identifier: 78:A6:FD:AE:32:5A:33:5A:2C:C8:9A:8D:2F:CB:2F:98:8B:8A:2C:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/3133382e3138362e36362e302f32342d3234203d3e20323635353631.roa
Signing time:             Mon 21 Sep 2026 16:36:16 +0000
ROA not before:           Mon 21 Sep 2026 16:31:16 +0000
ROA not after:            Mon 20 Sep 2027 16:36:16 +0000
asID:                     265561
IP address blocks:        138.186.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 11:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e7:3f:c9:08:ed:84:ab:41:9e:3c:02:62:05:23:c6:04:a5:0f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7
        Validity
            Not Before: Sep 21 16:31:16 2026 GMT
            Not After : Sep 20 16:36:16 2027 GMT
        Subject: CN=62999666C51D468FB445F77EA6EA89D4AC07A269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ec:8e:4e:5e:5d:10:f9:c3:ef:dd:de:32:db:
                    1f:ca:89:9d:16:00:7f:1d:1f:08:79:1b:93:e0:88:
                    c1:43:64:60:8a:f9:c9:03:22:a2:27:95:d4:34:bd:
                    da:6f:6d:f9:88:d1:14:87:e0:84:64:f9:fe:55:9a:
                    db:ad:80:e8:01:15:86:00:20:be:83:40:5e:c6:6b:
                    14:ad:d8:27:85:77:e5:68:67:f3:a5:96:8c:f0:35:
                    81:3f:47:23:65:d6:8b:fb:1c:96:d8:18:93:e1:61:
                    2d:fa:88:f3:17:e7:52:11:d1:7b:e1:d2:1a:5e:b4:
                    22:7f:58:71:ef:3c:4b:4a:c8:d6:ba:2b:eb:17:b3:
                    a1:0d:80:12:e9:df:b4:38:7c:05:ba:bd:28:3b:7c:
                    96:bd:9e:81:3e:35:4e:a5:ba:c9:e8:ec:c6:cb:31:
                    ac:8a:eb:6a:15:01:78:c2:b1:ec:b9:cf:2f:b5:ef:
                    8a:f4:9f:e6:52:70:62:db:ac:62:a2:23:63:7c:99:
                    8c:93:f6:dc:75:33:a4:94:6c:15:2b:8c:42:7b:01:
                    d0:e4:af:74:a0:40:08:33:e8:87:8c:56:2e:5b:81:
                    20:3a:b8:7f:65:a5:e1:92:23:0c:09:d6:d8:06:ae:
                    a5:cc:7c:cc:02:96:ae:71:e5:da:eb:16:59:14:eb:
                    f8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:99:96:66:C5:1D:46:8F:B4:45:F7:7E:A6:EA:89:D4:AC:07:A2:69
            X509v3 Authority Key Identifier:
                keyid:78:A6:FD:AE:32:5A:33:5A:2C:C8:9A:8D:2F:CB:2F:98:8B:8A:2C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/3133382e3138362e36362e302f32342d3234203d3e20323635353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:d0:c2:57:b8:04:ff:65:b9:93:50:85:70:ab:0b:5d:63:1c:
         a4:b6:46:15:95:95:62:ff:86:4a:94:22:32:4e:36:2e:08:dd:
         bf:22:60:df:7f:94:60:12:2e:e5:c8:b7:33:69:fc:57:17:70:
         96:bb:dd:53:b6:c3:ed:69:06:a0:93:71:ed:ab:84:8d:10:d6:
         b0:36:b2:65:f5:00:e1:c7:7b:7c:b7:f6:f4:86:a5:7f:64:e4:
         65:6d:ab:78:ea:f4:24:09:4b:04:a1:68:03:f6:9e:8b:87:6a:
         f0:03:eb:52:ed:94:fc:6c:fb:8c:2c:25:f4:5b:bd:54:78:40:
         d9:4d:64:f1:00:08:f7:a8:5c:c6:56:25:72:5b:c5:63:47:c7:
         38:85:f8:c2:96:03:09:89:2d:29:32:c5:15:e5:c0:31:ee:2e:
         a1:99:94:64:d5:f1:f3:95:56:8e:84:7a:91:0c:cd:9b:94:e6:
         db:66:4a:34:11:4a:74:d3:d3:ba:63:2e:29:9c:5e:af:42:40:
         21:0d:c6:03:6e:b1:a1:91:39:f2:f0:a7:26:0f:58:7d:01:34:
         1c:a0:65:69:e6:d9:d4:39:5f:42:06:57:03:51:c2:f0:bc:92:
         68:0c:0a:79:1c:e3:ad:26:18:44:1d:73:94:57:07:58:06:8f:
         61:cb:84:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:45:06 2026 by rpki-client