Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31332e302f32342d3234203d3e20323732393634.roa
File:                     3133382e3131372e31332e302f32342d3234203d3e20323732393634.roa (raw, json)
Hash identifier:          LsL1jr/OSJfOV4F6ojBgqf/gKTHssGB8DOeUM6OYSco=
Subject key identifier:   8C:E6:CD:3C:DB:DD:EF:D2:AE:AB:32:FC:FC:73:48:7F:1A:72:94:4D
Certificate issuer:       /CN=D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03
Certificate serial:       0F6F0C9A5F166C9A653F318D894C97F6178ECE9F
Authority key identifier: D2:E6:A8:AF:32:26:50:1D:8C:0A:E8:9B:31:A7:8E:36:9B:CD:BC:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31332e302f32342d3234203d3e20323732393634.roa
Signing time:             Fri 10 Apr 2026 13:38:20 +0000
ROA not before:           Fri 10 Apr 2026 13:33:20 +0000
ROA not after:            Fri 09 Apr 2027 13:38:20 +0000
asID:                     272964
IP address blocks:        138.117.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:6f:0c:9a:5f:16:6c:9a:65:3f:31:8d:89:4c:97:f6:17:8e:ce:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03
        Validity
            Not Before: Apr 10 13:33:20 2026 GMT
            Not After : Apr  9 13:38:20 2027 GMT
        Subject: CN=8CE6CD3CDBDDEFD2AEAB32FCFC73487F1A72944D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:84:a1:62:cd:b3:ad:6c:77:c5:1d:e7:e6:f1:
                    dd:8e:83:e5:cc:98:58:84:4a:1d:3b:0e:b5:33:ed:
                    b8:94:fb:a3:27:11:c9:48:3a:5a:3d:94:8e:4c:fc:
                    6c:fb:f4:ff:24:fa:f1:13:7c:30:e4:8e:ae:3d:11:
                    eb:ab:61:7f:d8:12:4d:d8:d0:5d:c7:35:71:95:e7:
                    37:a9:51:85:64:85:9d:21:85:b7:9e:d7:f1:2b:51:
                    28:44:8a:f5:c2:48:e2:b7:09:1b:c8:b5:9c:47:f2:
                    19:77:dd:d5:f0:96:29:4c:1c:6d:d4:ac:6d:03:bd:
                    d3:8e:7a:4c:fb:8a:6b:e2:0d:8b:83:a7:96:9e:80:
                    7e:16:59:a4:66:38:de:af:bb:f2:ab:66:c2:e0:e9:
                    18:81:14:a1:eb:1e:26:84:11:a1:bb:ba:6f:18:cd:
                    5d:c1:f6:25:f2:79:81:e9:c4:dd:ac:39:6e:bb:8e:
                    10:1d:f5:97:60:70:ff:75:ef:1b:d1:c6:ce:6f:26:
                    97:a1:69:b3:14:3a:00:46:30:71:44:dd:93:c8:a4:
                    13:a1:5a:37:16:f4:c9:48:8f:36:97:57:4c:8c:1c:
                    d3:4d:9a:26:59:ce:e0:cf:90:01:f5:85:80:97:5b:
                    09:dc:2c:16:92:14:5d:89:6e:77:ef:bf:e7:0a:58:
                    41:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E6:CD:3C:DB:DD:EF:D2:AE:AB:32:FC:FC:73:48:7F:1A:72:94:4D
            X509v3 Authority Key Identifier:
                keyid:D2:E6:A8:AF:32:26:50:1D:8C:0A:E8:9B:31:A7:8E:36:9B:CD:BC:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31332e302f32342d3234203d3e20323732393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:10:07:e9:76:da:7f:e6:b5:9c:9f:bb:c0:25:a6:00:9e:95:
         60:0b:18:9f:5f:98:77:99:ee:08:ad:9f:49:57:22:3f:d8:03:
         4d:36:b5:e2:3f:f8:4e:d9:0a:ef:89:df:fd:be:46:7f:15:4d:
         08:15:3a:71:0a:bb:ca:70:82:0b:69:52:47:61:bf:85:db:cf:
         e4:f1:4d:54:38:0f:77:aa:08:c2:3b:ad:9d:07:fc:e3:38:3b:
         32:ff:54:ae:ec:ae:26:c3:da:ea:e3:c2:c6:02:70:4a:62:7c:
         fb:e9:14:69:6f:5e:d4:8b:c4:e4:47:3c:ca:81:e8:22:8b:81:
         c2:c4:ee:e5:32:2d:a7:3b:f5:22:9b:23:0b:ef:ce:a6:61:ec:
         29:d2:46:cd:bd:c8:9a:ad:a7:c1:44:99:ce:74:0c:c6:2e:79:
         cd:77:40:22:16:9e:03:f8:c2:6f:50:ae:63:46:18:11:9e:1a:
         68:72:db:e2:1e:09:7e:0d:2d:1f:0d:e3:5d:6b:5e:7c:63:dd:
         37:9f:a2:85:61:08:cf:d5:f4:14:b9:5e:f5:08:66:84:8c:32:
         59:68:3d:23:cc:51:9c:cc:22:c2:f6:7e:6b:b2:47:7c:f7:1f:
         3e:42:a6:2e:72:42:45:d7:31:77:a4:fb:78:33:f0:20:89:c3:
         35:8f:9a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:11:32 2026 by rpki-client