Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3133382e3132322e3138392e302f32342d3238203d3e20323633383031.roa
File:                     3133382e3132322e3138392e302f32342d3238203d3e20323633383031.roa (raw, json)
Hash identifier:          Aiz59IUN+4KDithMeMuO5Ho7idn8Rmk9YWLzIIoAVx8=
Subject key identifier:   91:78:8F:60:B0:58:BC:CE:84:2F:FA:23:05:A8:AC:2B:E0:28:9E:53
Certificate issuer:       /CN=E450DBD4224F12B91D8B103471C79E21494AAABE
Certificate serial:       6FE297878F1410DF61A28194F968F02598A32FBF
Authority key identifier: E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3133382e3132322e3138392e302f32342d3238203d3e20323633383031.roa
Signing time:             Mon 06 Apr 2026 00:37:36 +0000
ROA not before:           Mon 06 Apr 2026 00:32:36 +0000
ROA not after:            Mon 05 Apr 2027 00:37:36 +0000
asID:                     263801
IP address blocks:        138.122.189.0/24 maxlen: 28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 15:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e2:97:87:8f:14:10:df:61:a2:81:94:f9:68:f0:25:98:a3:2f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E450DBD4224F12B91D8B103471C79E21494AAABE
        Validity
            Not Before: Apr  6 00:32:36 2026 GMT
            Not After : Apr  5 00:37:36 2027 GMT
        Subject: CN=91788F60B058BCCE842FFA2305A8AC2BE0289E53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:01:b3:16:a2:fb:52:53:10:70:a9:25:f9:46:
                    d9:a8:14:ba:92:5a:cf:7b:ec:62:06:e5:cd:b8:8c:
                    bc:be:8a:0e:f9:33:24:e7:15:75:cd:c1:96:a2:dd:
                    79:b0:48:c9:88:b1:5b:7e:83:28:d8:8e:c7:9d:77:
                    85:f2:61:44:f7:d2:af:fb:03:16:c7:6d:55:f7:e7:
                    d3:ec:57:f2:40:14:9f:26:6e:ee:17:56:7c:ab:05:
                    08:5d:11:0f:54:95:54:4f:45:f5:1f:ab:4f:7d:8f:
                    b4:56:33:2e:00:43:0c:7c:b3:d8:04:e3:a9:36:f2:
                    1f:25:12:41:25:e4:d6:b0:d2:4b:88:34:f1:53:7e:
                    16:a6:b6:11:88:88:06:a8:35:ef:cc:00:94:f1:7d:
                    cf:81:13:f5:6a:c9:51:fd:91:40:df:a4:fa:48:c7:
                    5e:87:60:43:2d:ff:13:08:70:c9:26:34:f8:17:59:
                    46:8c:14:6b:bc:b1:07:79:78:e3:1d:47:53:d5:0f:
                    cd:f0:68:a1:b7:be:2b:b5:b6:ce:87:fc:2e:64:cd:
                    18:61:74:7a:cf:b8:b4:ef:4e:93:77:79:5d:54:4c:
                    a7:40:cf:84:97:f3:17:df:c0:7e:54:ed:f3:77:6f:
                    fe:8b:80:ef:e1:5f:e1:24:22:66:0f:40:fb:a7:fd:
                    38:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:78:8F:60:B0:58:BC:CE:84:2F:FA:23:05:A8:AC:2B:E0:28:9E:53
            X509v3 Authority Key Identifier:
                keyid:E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3133382e3132322e3138392e302f32342d3238203d3e20323633383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:3f:4a:e4:e8:14:bb:63:07:85:fc:eb:26:a9:4a:b4:e3:9e:
         57:c2:98:93:42:b3:40:dc:a1:a8:d2:a2:39:3f:09:7c:44:bd:
         4f:19:1f:a7:4f:a5:fd:85:3f:f0:40:34:50:51:a3:76:df:50:
         39:79:a6:65:4a:11:42:95:e6:da:9e:08:de:f1:a1:01:14:b5:
         7f:b2:7c:72:45:df:40:34:d4:1b:34:2d:f1:21:a0:0f:99:67:
         f3:b5:c9:1e:1a:58:8b:cf:cb:5d:1e:2e:97:87:b7:70:49:a6:
         c4:f3:6d:2a:61:9a:b2:91:d9:97:1d:37:ce:e9:28:f8:7a:93:
         a6:c2:84:d8:49:10:68:c4:7c:7c:90:14:34:ca:28:a7:26:37:
         6b:9d:82:d1:3f:d6:b2:3a:a9:35:8f:c5:38:6e:02:60:93:4f:
         59:be:7a:82:ba:e5:c3:55:ec:b7:70:82:db:70:c2:5a:3c:82:
         83:61:f4:ac:b5:98:4a:90:0e:1c:fb:35:87:af:c1:96:84:34:
         d9:d7:5a:a5:9c:74:85:cd:7f:90:57:cd:63:38:a5:79:0f:4a:
         10:dd:eb:32:ed:3f:6e:f2:f6:43:f4:37:4c:83:e8:0b:a9:ae:
         19:f2:78:2f:d1:5b:fd:3d:00:76:f0:f4:26:f3:f8:ee:25:d0:
         91:53:9f:ce
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUb+KXh48UEN9hooGU+WjwJZijL78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ1MERCRDQyMjRGMTJCOTFEOEIxMDM0NzFDNzlFMjE0
OTRBQUFCRTAeFw0yNjA0MDYwMDMyMzZaFw0yNzA0MDUwMDM3MzZaMDMxMTAvBgNV
BAMTKDkxNzg4RjYwQjA1OEJDQ0U4NDJGRkEyMzA1QThBQzJCRTAyODlFNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTAbMWovtSUxBwqSX5RtmoFLqS
Ws977GIG5c24jLy+ig75MyTnFXXNwZai3XmwSMmIsVt+gyjYjsedd4XyYUT30q/7
AxbHbVX359PsV/JAFJ8mbu4XVnyrBQhdEQ9UlVRPRfUfq099j7RWMy4AQwx8s9gE
46k28h8lEkEl5Naw0kuINPFTfhamthGIiAaoNe/MAJTxfc+BE/VqyVH9kUDfpPpI
x16HYEMt/xMIcMkmNPgXWUaMFGu8sQd5eOMdR1PVD83waKG3viu1ts6H/C5kzRhh
dHrPuLTvTpN3eV1UTKdAz4SX8xffwH5U7fN3b/6LgO/hX+EkImYPQPun/TinAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUkXiPYLBYvM6EL/ojBaisK+AonlMwHwYDVR0j
BBgwFoAU5FDb1CJPErkdixA0cceeIUlKqr4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83N0RDMEQ0MDhBMTIyMkMwM0JGNjJGRTdFQjEzRjJERDk1
OUFDMkJEMzUxRkZBQUYxMjY5Q0I3NkNFMUY4QkZCLzAvRTQ1MERCRDQyMjRGMTJC
OTFEOEIxMDM0NzFDNzlFMjE0OTRBQUFCRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNDUwREJENDIyNEYxMkI5MUQ4
QjEwMzQ3MUM3OUUyMTQ5NEFBQUJFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzdEQzBENDA4QTEyMjJDMDNCRjYyRkU3RUIxM0YyREQ5NTlBQzJCRDM1
MUZGQUFGMTI2OUNCNzZDRTFGOEJGQi8wLzMxMzMzODJlMzEzMjMyMmUzMTM4Mzky
ZTMwMmYzMjM0MmQzMjM4MjAzZDNlMjAzMjM2MzMzODMwMzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACK
er0wDQYJKoZIhvcNAQELBQADggEBADw/SuToFLtjB4X86yapSrTjnlfCmJNCs0Dc
oajSojk/CXxEvU8ZH6dPpf2FP/BANFBRo3bfUDl5pmVKEUKV5tqeCN7xoQEUtX+y
fHJF30A01Bs0LfEhoA+ZZ/O1yR4aWIvPy10eLpeHt3BJpsTzbSphmrKR2ZcdN87p
KPh6k6bChNhJEGjEfHyQFDTKKKcmN2udgtE/1rI6qTWPxThuAmCTT1m+eoK65cNV
7Ldwgttwwlo8goNh9Ky1mEqQDhz7NYevwZaENNnXWqWcdIXNf5BXzWM4pXkPShDd
6zLtP27y9kP0N0yD6AuprhnyeC/RW/09AHbw9Cbz+O4l0JFTn84=
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:09:33 2026 by rpki-client