Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3133382e3132322e3139302e302f32342d3238203d3e20323633383031.roa
File:                     3133382e3132322e3139302e302f32342d3238203d3e20323633383031.roa (raw, json)
Hash identifier:          Hr6B81mYcE/IwbE14CfzplkuTIKF9su/zIudShoyVMU=
Subject key identifier:   DF:87:4F:3E:FF:A5:7A:2E:BA:CE:EA:F2:10:C7:4D:87:93:5E:50:D2
Certificate issuer:       /CN=E450DBD4224F12B91D8B103471C79E21494AAABE
Certificate serial:       6F978C48C8D5C4CF14B6022F11956A585DBE6358
Authority key identifier: E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3133382e3132322e3139302e302f32342d3238203d3e20323633383031.roa
Signing time:             Mon 06 Apr 2026 00:37:35 +0000
ROA not before:           Mon 06 Apr 2026 00:32:35 +0000
ROA not after:            Mon 05 Apr 2027 00:37:35 +0000
asID:                     263801
IP address blocks:        138.122.190.0/24 maxlen: 28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 15:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:97:8c:48:c8:d5:c4:cf:14:b6:02:2f:11:95:6a:58:5d:be:63:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E450DBD4224F12B91D8B103471C79E21494AAABE
        Validity
            Not Before: Apr  6 00:32:35 2026 GMT
            Not After : Apr  5 00:37:35 2027 GMT
        Subject: CN=DF874F3EFFA57A2EBACEEAF210C74D87935E50D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:24:98:14:47:d4:98:1b:82:ad:0b:68:ce:6a:
                    aa:e5:a6:c4:5d:3a:14:15:25:bf:fe:4b:3c:e4:77:
                    d1:87:85:f0:dc:08:ba:46:a1:f9:c1:9a:f4:8a:be:
                    c9:14:f8:76:6a:aa:ef:7a:f2:ec:d2:52:5d:39:a1:
                    9b:c8:93:8c:b2:83:9b:82:ec:f7:20:26:41:8b:95:
                    22:21:20:ff:1b:df:ca:e0:1e:ab:a6:3c:cd:3c:7f:
                    d7:9f:f9:73:52:0a:35:f4:20:12:e2:91:95:2e:c2:
                    72:eb:4a:3b:fc:5f:02:b4:ab:fd:2e:b9:c0:67:38:
                    ae:5d:70:92:09:07:0a:a0:8d:79:3e:55:92:17:e7:
                    f7:4a:87:78:dd:b1:21:69:97:fe:27:3c:5e:c0:55:
                    49:91:44:e3:fd:4c:c5:3d:7a:ee:fa:ef:1b:03:09:
                    aa:7e:84:4e:93:5d:5e:62:34:1e:b6:17:c7:17:89:
                    78:e8:b0:72:65:ea:72:6b:16:2a:a9:2d:61:93:08:
                    58:fb:01:66:f0:83:45:d1:ed:0b:1a:6d:5c:c4:69:
                    0e:e2:32:ff:58:cc:56:cf:81:f1:52:0e:ed:d7:23:
                    80:8b:03:f5:84:9b:b5:ce:5c:b3:ee:67:a8:75:d9:
                    db:13:48:b5:28:4b:3d:0a:c1:c6:80:46:a0:10:5a:
                    ee:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:87:4F:3E:FF:A5:7A:2E:BA:CE:EA:F2:10:C7:4D:87:93:5E:50:D2
            X509v3 Authority Key Identifier:
                keyid:E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3133382e3132322e3139302e302f32342d3238203d3e20323633383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:14:0c:c3:f1:27:31:6b:c7:90:b4:e0:b7:a4:36:59:30:30:
         51:9f:c8:88:3c:51:eb:73:1b:95:dd:23:bd:17:c3:48:21:3d:
         48:4e:ca:cd:b0:ae:1e:8f:82:cd:d6:c5:45:97:79:ea:9c:6b:
         c7:fd:2c:34:2d:0c:04:db:9b:4f:c5:b3:74:75:a7:a5:d4:55:
         1f:cd:a4:3a:5f:27:06:8c:3e:01:83:d9:99:33:07:1e:7c:0b:
         d6:b7:1e:b2:b0:b3:f5:ab:7f:a9:08:f7:aa:fd:67:ce:a1:a3:
         34:1f:a5:6b:2d:8e:ab:35:ab:1b:f6:53:d2:78:d9:90:d6:a7:
         3b:c3:dd:65:45:f5:00:56:f7:91:be:38:fa:06:40:09:b6:92:
         56:85:8e:b6:c6:90:8b:dd:28:86:c3:72:c0:4d:d2:1b:bb:db:
         6f:8c:69:62:7d:7c:52:86:14:e7:77:7e:ae:5a:98:1e:f2:f2:
         9e:36:1a:df:8d:77:e6:4c:44:3b:5b:26:ee:cf:f9:92:fa:8f:
         da:8e:47:73:1e:97:87:b9:68:65:e5:a1:87:f1:93:78:21:6a:
         4e:4d:7e:19:80:03:e2:27:1e:40:1a:e7:1f:fa:e0:ae:17:d3:
         4c:76:dd:28:8a:ee:a6:66:44:a1:d9:7b:96:ab:ab:4b:64:89:
         6a:80:c8:81
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUb5eMSMjVxM8UtgIvEZVqWF2+Y1gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ1MERCRDQyMjRGMTJCOTFEOEIxMDM0NzFDNzlFMjE0
OTRBQUFCRTAeFw0yNjA0MDYwMDMyMzVaFw0yNzA0MDUwMDM3MzVaMDMxMTAvBgNV
BAMTKERGODc0RjNFRkZBNTdBMkVCQUNFRUFGMjEwQzc0RDg3OTM1RTUwRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoJJgUR9SYG4KtC2jOaqrlpsRd
OhQVJb/+Szzkd9GHhfDcCLpGofnBmvSKvskU+HZqqu968uzSUl05oZvIk4yyg5uC
7PcgJkGLlSIhIP8b38rgHqumPM08f9ef+XNSCjX0IBLikZUuwnLrSjv8XwK0q/0u
ucBnOK5dcJIJBwqgjXk+VZIX5/dKh3jdsSFpl/4nPF7AVUmRROP9TMU9eu767xsD
Cap+hE6TXV5iNB62F8cXiXjosHJl6nJrFiqpLWGTCFj7AWbwg0XR7QsabVzEaQ7i
Mv9YzFbPgfFSDu3XI4CLA/WEm7XOXLPuZ6h12dsTSLUoSz0KwcaARqAQWu7nAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU34dPPv+lei66zuryEMdNh5NeUNIwHwYDVR0j
BBgwFoAU5FDb1CJPErkdixA0cceeIUlKqr4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83N0RDMEQ0MDhBMTIyMkMwM0JGNjJGRTdFQjEzRjJERDk1
OUFDMkJEMzUxRkZBQUYxMjY5Q0I3NkNFMUY4QkZCLzAvRTQ1MERCRDQyMjRGMTJC
OTFEOEIxMDM0NzFDNzlFMjE0OTRBQUFCRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNDUwREJENDIyNEYxMkI5MUQ4
QjEwMzQ3MUM3OUUyMTQ5NEFBQUJFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzdEQzBENDA4QTEyMjJDMDNCRjYyRkU3RUIxM0YyREQ5NTlBQzJCRDM1
MUZGQUFGMTI2OUNCNzZDRTFGOEJGQi8wLzMxMzMzODJlMzEzMjMyMmUzMTM5MzAy
ZTMwMmYzMjM0MmQzMjM4MjAzZDNlMjAzMjM2MzMzODMwMzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACK
er4wDQYJKoZIhvcNAQELBQADggEBAJcUDMPxJzFrx5C04LekNlkwMFGfyIg8Uetz
G5XdI70Xw0ghPUhOys2wrh6Pgs3WxUWXeeqca8f9LDQtDATbm0/Fs3R1p6XUVR/N
pDpfJwaMPgGD2ZkzBx58C9a3HrKws/Wrf6kI96r9Z86hozQfpWstjqs1qxv2U9J4
2ZDWpzvD3WVF9QBW95G+OPoGQAm2klaFjrbGkIvdKIbDcsBN0hu722+MaWJ9fFKG
FOd3fq5amB7y8p42Gt+Nd+ZMRDtbJu7P+ZL6j9qOR3Mel4e5aGXloYfxk3ghak5N
fhmAA+InHkAa5x/64K4X00x23SiK7qZmRKHZe5arq0tkiWqAyIE=
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:13:49 2026 by rpki-client