Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3133382e3132322e3139312e302f32342d3238203d3e20323633383031.roa
File:                     3133382e3132322e3139312e302f32342d3238203d3e20323633383031.roa (raw, json)
Hash identifier:          sV7zBhEsS9uhTSsJY5sDuxzqCBwS32Zuyf4xVUtLJIc=
Subject key identifier:   76:9B:13:E2:42:8F:8E:85:67:C3:2A:FA:E6:48:4D:4D:87:26:29:A3
Certificate issuer:       /CN=E450DBD4224F12B91D8B103471C79E21494AAABE
Certificate serial:       4694C2BBFAAB483C6E684BB5310E0633F18F0162
Authority key identifier: E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3133382e3132322e3139312e302f32342d3238203d3e20323633383031.roa
Signing time:             Mon 06 Apr 2026 00:37:36 +0000
ROA not before:           Mon 06 Apr 2026 00:32:36 +0000
ROA not after:            Mon 05 Apr 2027 00:37:36 +0000
asID:                     263801
IP address blocks:        138.122.191.0/24 maxlen: 28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 15:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:94:c2:bb:fa:ab:48:3c:6e:68:4b:b5:31:0e:06:33:f1:8f:01:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E450DBD4224F12B91D8B103471C79E21494AAABE
        Validity
            Not Before: Apr  6 00:32:36 2026 GMT
            Not After : Apr  5 00:37:36 2027 GMT
        Subject: CN=769B13E2428F8E8567C32AFAE6484D4D872629A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:49:e2:b2:23:29:65:68:4f:ce:a7:46:17:ce:
                    3d:89:83:f2:fb:10:d5:e2:08:b3:22:af:ec:fa:e4:
                    11:31:86:11:30:71:09:d1:b7:ff:5b:bf:7d:6d:9e:
                    a3:79:ef:a9:c7:7c:d4:f7:d3:df:ec:0d:51:3a:77:
                    87:17:d4:f8:97:35:a3:e6:5c:d7:d0:46:f5:6e:3e:
                    be:5c:d8:ac:e8:30:ee:9b:3b:ef:eb:a5:d8:56:58:
                    33:2d:d7:cd:40:20:f0:ed:b9:b9:af:ee:4a:4b:26:
                    1e:1e:4e:0e:7d:98:03:60:d5:c7:38:df:1a:0b:07:
                    dc:e5:5f:e0:d7:fd:ff:28:ca:cc:89:08:e1:41:7b:
                    56:be:0a:a0:06:e7:b2:5a:18:26:81:4a:a6:d6:07:
                    86:15:6b:8c:45:0f:67:ab:58:c6:1c:63:e6:5d:95:
                    c4:51:8a:80:11:13:df:09:da:cb:4d:70:de:0e:c8:
                    d7:1d:8e:f2:ea:8c:36:6a:b0:44:7c:ae:81:ad:c6:
                    27:1c:06:ae:80:af:6b:e8:7d:32:69:07:8d:19:c3:
                    53:23:4b:fb:70:01:3c:d8:8b:d8:0d:72:68:83:fd:
                    da:42:ce:8e:83:9d:6a:e6:e6:2e:79:45:66:01:21:
                    76:95:35:0b:c9:58:20:35:7d:c0:82:2e:f9:32:84:
                    2b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9B:13:E2:42:8F:8E:85:67:C3:2A:FA:E6:48:4D:4D:87:26:29:A3
            X509v3 Authority Key Identifier:
                keyid:E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3133382e3132322e3139312e302f32342d3238203d3e20323633383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:73:06:e1:98:b7:cd:84:63:31:1a:57:65:a9:69:68:4b:69:
         af:29:34:e5:2a:3e:f3:89:6f:de:31:b9:f7:5c:57:74:cf:60:
         97:2e:94:2b:9b:44:80:3b:84:66:6b:c0:b8:ef:90:34:29:4c:
         ed:b4:ec:a3:7d:1d:83:bb:6b:e4:2a:fa:e8:bf:94:55:28:0d:
         ae:45:79:00:4d:6d:55:d1:06:c5:eb:2e:2f:9c:7d:2f:b7:6e:
         5c:bc:75:70:69:f4:40:15:7e:0a:d4:8e:db:74:28:77:1e:2a:
         00:3b:e2:18:ab:f4:9b:5c:e8:05:3d:70:b9:a4:0e:da:74:eb:
         55:03:6e:65:83:b4:00:ed:b9:a7:26:2c:b4:79:58:74:ea:7c:
         44:2c:b7:4d:8a:28:ab:bb:87:b5:d5:7b:d1:66:22:b2:49:1a:
         0c:a4:7e:71:a0:08:11:51:3e:af:ee:21:7e:24:e5:17:4c:ec:
         87:b5:22:9b:be:9f:25:4e:19:24:e9:a4:99:3f:dc:35:17:c7:
         69:82:cc:81:82:19:79:04:9b:0d:84:25:29:da:38:f0:45:ef:
         ef:e1:35:0b:85:06:17:80:d6:74:8b:79:cb:43:e4:2a:41:2c:
         c8:d0:e7:c7:d1:2e:25:60:af:a1:33:8b:78:85:ee:3a:cc:2b:
         91:55:b7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:08:19 2026 by rpki-client