Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3133382e3132322e3138382e302f32322d3234203d3e20323633383031.roa
File:                     3133382e3132322e3138382e302f32322d3234203d3e20323633383031.roa (raw, json)
Hash identifier:          tLuKUJ8N68NakOC8FP6f8bB5aRZljbUZLkJVLHypisE=
Subject key identifier:   1F:8D:AF:91:22:65:3A:29:D4:51:8D:DF:EC:32:01:88:EF:9B:BA:14
Certificate issuer:       /CN=E450DBD4224F12B91D8B103471C79E21494AAABE
Certificate serial:       0EB15798FC22639BA0140C22D882FA9920ABE332
Authority key identifier: E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3133382e3132322e3138382e302f32322d3234203d3e20323633383031.roa
Signing time:             Mon 06 Apr 2026 00:37:35 +0000
ROA not before:           Mon 06 Apr 2026 00:32:35 +0000
ROA not after:            Mon 05 Apr 2027 00:37:35 +0000
asID:                     263801
IP address blocks:        138.122.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 15:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b1:57:98:fc:22:63:9b:a0:14:0c:22:d8:82:fa:99:20:ab:e3:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E450DBD4224F12B91D8B103471C79E21494AAABE
        Validity
            Not Before: Apr  6 00:32:35 2026 GMT
            Not After : Apr  5 00:37:35 2027 GMT
        Subject: CN=1F8DAF9122653A29D4518DDFEC320188EF9BBA14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:de:45:7e:03:fc:ad:8c:88:54:02:5a:90:fb:
                    eb:ec:ba:c9:b6:6c:96:26:44:5e:ee:60:70:8d:be:
                    8f:f4:f9:44:1d:68:88:40:66:bd:8b:9f:2a:50:0a:
                    6e:d9:0c:65:34:e1:14:3a:8d:df:36:a1:5a:b4:ab:
                    16:d5:ec:f8:25:10:ba:00:79:99:e1:6c:31:44:54:
                    4d:36:fd:6e:2b:67:eb:9c:58:14:99:93:d1:78:1d:
                    9f:9e:89:6c:6d:f4:4a:76:47:67:3c:37:a0:dc:d2:
                    9f:94:cb:32:9a:6a:a7:5a:c2:92:fe:29:90:d6:e0:
                    87:b4:84:e0:80:e7:7b:f0:05:c6:20:af:e2:b9:c8:
                    fb:c3:9f:80:53:8a:88:3f:af:05:ec:e3:34:18:c7:
                    c4:97:7b:dd:60:26:68:df:57:90:0a:b7:8d:0f:98:
                    ad:1e:82:b9:c3:91:c2:dd:a2:c8:c8:b5:f1:a3:fa:
                    ca:c0:f2:0f:fb:fa:c1:ce:09:d0:93:80:d4:4a:d7:
                    b7:2e:68:01:60:f8:38:80:a6:50:eb:d3:c6:7c:f7:
                    12:11:c2:1f:55:b9:03:fa:c3:85:5a:93:63:f6:72:
                    32:84:a6:bc:35:65:c1:5e:41:ab:e2:c7:c9:fa:21:
                    73:4f:50:57:15:33:da:75:06:fc:52:23:d2:ca:7c:
                    c2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8D:AF:91:22:65:3A:29:D4:51:8D:DF:EC:32:01:88:EF:9B:BA:14
            X509v3 Authority Key Identifier:
                keyid:E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3133382e3132322e3138382e302f32322d3234203d3e20323633383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:5a:a3:c4:cc:67:49:27:e1:1b:26:13:08:71:f7:a4:3b:aa:
         8f:e4:c5:58:3e:82:d0:c1:79:ff:26:ca:da:6d:69:c9:f4:f3:
         ef:21:5a:ea:0f:18:65:ce:3f:cb:91:e7:f0:42:10:e3:2c:b2:
         35:4a:3b:81:b9:5c:4f:40:32:33:de:17:cc:0a:f3:4b:17:88:
         2a:23:fd:a0:5d:59:9a:e5:92:37:eb:ff:77:0f:20:b7:e9:e1:
         f5:2f:fe:13:bb:31:8d:2e:97:e4:b3:8d:9c:5a:02:54:6b:8c:
         9e:19:58:d1:7b:82:bc:e6:6f:0d:9e:9b:72:2b:fc:b4:06:90:
         ed:4a:ff:15:a0:c6:75:78:14:7a:ba:58:0c:d4:69:99:cc:2b:
         fa:24:ae:2b:74:94:a7:f6:f1:c1:22:2c:2f:3d:c6:03:b5:e7:
         ad:83:a2:d1:37:58:39:5a:8f:b8:22:ef:69:d9:8c:17:03:95:
         6b:d0:f9:98:58:6c:d6:dd:db:75:41:82:5f:c8:11:da:3b:1d:
         17:6d:8c:d0:db:de:8f:85:57:05:e6:f8:ce:50:37:a9:e9:75:
         f1:d7:52:d6:49:2b:eb:58:d6:85:d5:df:fa:77:1b:a0:3a:d4:
         cd:37:89:c8:d7:45:19:e9:37:81:6a:fa:69:76:46:f6:1f:b1:
         6e:31:14:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:09:14 2026 by rpki-client