Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3133382e39392e3137392e302f32342d3234203d3e20323733393134.roa
File:                     3133382e39392e3137392e302f32342d3234203d3e20323733393134.roa (raw, json)
Hash identifier:          8kYOi8hHAWhHTj0YIe782hcXoyxuD6i5P810GZuzNA4=
Subject key identifier:   40:32:CD:8A:1F:DB:76:FD:F7:7A:F2:7F:4E:70:0E:8C:AE:69:13:D1
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       4D1E4DF0B6EF9E5B433F4DAE9977579244519D4A
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3133382e39392e3137392e302f32342d3234203d3e20323733393134.roa
Signing time:             Thu 30 Oct 2025 18:30:00 +0000
ROA not before:           Thu 30 Oct 2025 18:25:00 +0000
ROA not after:            Thu 29 Oct 2026 18:30:00 +0000
asID:                     273914
IP address blocks:        138.99.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1e:4d:f0:b6:ef:9e:5b:43:3f:4d:ae:99:77:57:92:44:51:9d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Oct 30 18:25:00 2025 GMT
            Not After : Oct 29 18:30:00 2026 GMT
        Subject: CN=4032CD8A1FDB76FDF77AF27F4E700E8CAE6913D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:39:12:66:d2:13:2d:9b:98:9c:94:49:17:fc:
                    02:5d:4e:05:c0:bd:4a:b6:03:af:3b:b7:6e:96:b7:
                    d3:fa:1a:c7:79:79:46:82:13:ae:91:ba:9a:b1:0b:
                    c3:59:e1:f0:ea:a3:7f:07:5d:b2:2e:89:5b:23:37:
                    69:6a:f5:89:0c:6c:85:6b:d5:ba:b3:71:43:69:dc:
                    95:8d:58:6c:46:87:1f:51:c4:c6:0b:41:82:d0:a3:
                    b1:3f:43:76:74:f5:f7:db:8e:ad:0d:1c:db:ee:a9:
                    f0:2b:3e:c3:91:7e:e2:c1:0e:64:af:2c:42:fc:43:
                    28:48:1d:e1:66:f1:37:0e:e2:77:8e:81:b4:a1:9b:
                    ec:57:4a:f0:21:4c:11:98:83:5a:72:35:32:3c:a6:
                    78:dd:a9:a0:48:aa:05:53:88:ac:98:aa:eb:13:ce:
                    72:48:79:f3:bf:1a:bb:17:51:7f:8f:0c:85:4e:21:
                    5e:0b:c0:ee:21:e2:86:b3:3a:5a:3f:c2:34:2e:97:
                    af:21:4a:b6:40:85:f6:af:c0:0a:69:14:05:32:dd:
                    f6:de:36:16:a1:53:b1:69:86:36:87:b4:84:ef:56:
                    e6:76:16:0c:20:fb:79:c3:43:7f:13:27:e2:f0:dd:
                    39:2f:34:af:6f:af:fd:3c:4c:eb:ae:86:7c:9f:18:
                    1e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:32:CD:8A:1F:DB:76:FD:F7:7A:F2:7F:4E:70:0E:8C:AE:69:13:D1
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3133382e39392e3137392e302f32342d3234203d3e20323733393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:45:d3:4a:f5:96:2d:f8:ae:9c:60:59:2d:ea:ec:a0:38:12:
         3f:52:85:b5:89:81:4d:b5:e5:14:f5:3d:9c:e4:d8:0f:e8:0e:
         a4:52:3c:b1:a3:fa:bc:9a:e3:85:c9:f0:ba:6b:38:50:ad:5f:
         a8:ef:a0:0c:81:e4:81:a5:de:e4:c3:aa:3c:f2:f3:00:9f:b6:
         dd:f4:c0:64:70:ff:68:9a:1a:d5:c5:87:c1:95:f3:ea:56:f6:
         e1:8f:54:bc:f3:25:99:ad:ae:a1:a9:49:72:e8:54:26:03:74:
         ad:62:a6:a1:5b:af:41:65:92:2a:f0:98:19:3f:d7:50:27:1d:
         3c:23:dd:b2:92:a1:84:9b:9e:eb:10:f4:47:fa:0c:b5:15:3c:
         f5:83:86:80:85:f5:90:21:cc:fe:98:ba:31:2d:b2:60:21:6c:
         83:3c:2b:55:8b:97:c1:48:bf:47:8c:c9:ca:88:d0:17:20:2b:
         1e:dd:81:39:97:7f:48:21:ee:e7:4c:59:2a:96:56:d4:4a:7b:
         ef:a4:09:5c:49:37:b2:93:08:eb:b3:13:b9:84:82:bb:d2:2c:
         d0:58:48:75:43:06:d0:22:e3:1b:aa:a8:70:45:f7:2f:cb:9a:
         fe:3b:95:ba:3e:10:61:90:71:a3:5a:dc:f8:0a:42:7b:f4:d5:
         b7:a0:4d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:03:12 2025 by rpki-client