Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132322e3234352e302f32342d3234203d3e203238313130.roa
File:                     3133382e3132322e3234352e302f32342d3234203d3e203238313130.roa (raw, json)
Hash identifier:          +SDiYH5M8t1LFzd16iCaBPO5zjqw2IK/QcZlESBg2so=
Subject key identifier:   BC:ED:F3:6E:3D:56:36:A1:20:CC:F5:C2:B9:22:56:2A:59:20:12:0D
Certificate issuer:       /CN=858889372446EF678E35E9D349C0785A81B8FBB7
Certificate serial:       280F30486DD836B0754098CF04A73D13D781F662
Authority key identifier: 85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132322e3234352e302f32342d3234203d3e203238313130.roa
Signing time:             Tue 07 Apr 2026 20:37:52 +0000
ROA not before:           Tue 07 Apr 2026 20:32:52 +0000
ROA not after:            Tue 06 Apr 2027 20:37:52 +0000
asID:                     28110
IP address blocks:        138.122.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 18:28:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0f:30:48:6d:d8:36:b0:75:40:98:cf:04:a7:3d:13:d7:81:f6:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=858889372446EF678E35E9D349C0785A81B8FBB7
        Validity
            Not Before: Apr  7 20:32:52 2026 GMT
            Not After : Apr  6 20:37:52 2027 GMT
        Subject: CN=BCEDF36E3D5636A120CCF5C2B922562A5920120D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:22:dc:52:df:9c:e2:ef:b3:67:5a:9e:fa:06:
                    07:83:b0:77:70:4f:e1:4f:49:71:c7:b3:04:db:94:
                    21:8c:27:3e:39:2d:40:9e:63:b2:09:0e:55:02:16:
                    55:71:60:95:a9:04:0d:51:78:70:87:33:8e:0d:ac:
                    92:b1:bf:5f:af:91:f6:8f:56:75:c5:34:64:2c:b8:
                    a5:2e:af:b7:be:7b:e5:38:ef:98:d9:31:0a:6a:04:
                    c7:fc:2d:1c:d0:b7:9d:ea:ca:b4:e9:f8:e5:57:4d:
                    52:52:72:fe:9e:33:e0:32:1d:93:95:f9:0b:f6:f3:
                    3b:f6:72:a0:dd:90:64:04:03:fa:a9:7a:9f:18:dc:
                    0b:93:4c:bd:f9:cb:94:c1:3f:80:ec:a2:8c:ff:a2:
                    fa:8e:52:7d:e6:71:48:78:09:b7:b9:7f:4a:4a:d8:
                    9d:6b:99:0e:56:e9:de:bf:61:c4:72:75:b8:f3:95:
                    7d:b5:0f:af:11:68:a0:a1:86:f9:c8:b2:bc:67:73:
                    be:18:72:5b:2b:f7:92:a9:e3:90:57:62:e6:9d:0e:
                    5b:18:9d:3f:2f:fd:32:6f:25:f7:04:fc:64:36:1d:
                    0e:d5:39:16:1d:c3:26:4d:d9:b0:c4:c1:e9:c9:dd:
                    44:1d:26:d5:9f:96:a6:d7:05:e6:b9:d4:06:5a:71:
                    20:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:ED:F3:6E:3D:56:36:A1:20:CC:F5:C2:B9:22:56:2A:59:20:12:0D
            X509v3 Authority Key Identifier:
                keyid:85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132322e3234352e302f32342d3234203d3e203238313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:e5:38:00:6a:e7:8e:79:95:52:14:02:2f:07:43:d9:2f:19:
         44:31:56:d6:22:f1:58:7d:8e:94:25:87:4a:24:69:7f:9f:d0:
         58:23:4a:94:38:fb:8c:2d:61:d9:c3:89:e1:b8:2a:47:ba:66:
         e3:02:c5:88:58:2a:05:f3:88:54:c2:b5:fa:ec:88:ae:c6:9e:
         d1:6f:f6:f9:12:5c:4c:51:75:76:14:df:8e:16:06:82:21:df:
         7d:67:ad:23:4b:94:00:10:0c:18:53:b8:5c:bd:55:67:66:6c:
         e5:cc:2e:79:5b:a6:7d:e5:d1:75:40:eb:9c:4e:12:e9:cd:cf:
         27:0c:96:db:a7:fe:2b:a0:62:0e:88:a2:9f:82:cd:04:07:23:
         95:dd:16:01:e0:d3:f7:9b:cf:c1:1f:45:84:c5:3f:7c:93:c7:
         ed:5a:d9:cd:7d:27:f0:27:25:7c:e4:0d:5e:a2:f6:93:c5:8c:
         64:46:56:04:0c:82:10:d1:8f:5c:a5:e8:ef:6e:fb:10:53:28:
         00:aa:fa:45:b4:b4:23:03:39:a5:51:2f:b0:f9:86:e9:1e:22:
         28:cc:00:cb:b3:93:b4:63:cc:32:a6:48:ed:b3:8f:0d:8f:f9:
         e4:47:19:b1:34:ba:f5:6e:5c:06:5a:5f:26:3b:c5:d9:9d:61:
         d5:3b:a2:79
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKA8wSG3YNrB1QJjPBKc9E9eB9mIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU4ODg5MzcyNDQ2RUY2NzhFMzVFOUQzNDlDMDc4NUE4
MUI4RkJCNzAeFw0yNjA0MDcyMDMyNTJaFw0yNzA0MDYyMDM3NTJaMDMxMTAvBgNV
BAMTKEJDRURGMzZFM0Q1NjM2QTEyMENDRjVDMkI5MjI1NjJBNTkyMDEyMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClItxS35zi77NnWp76BgeDsHdw
T+FPSXHHswTblCGMJz45LUCeY7IJDlUCFlVxYJWpBA1ReHCHM44NrJKxv1+vkfaP
VnXFNGQsuKUur7e+e+U475jZMQpqBMf8LRzQt53qyrTp+OVXTVJScv6eM+AyHZOV
+Qv28zv2cqDdkGQEA/qpep8Y3AuTTL35y5TBP4Dsooz/ovqOUn3mcUh4Cbe5f0pK
2J1rmQ5W6d6/YcRydbjzlX21D68RaKChhvnIsrxnc74Yclsr95Kp45BXYuadDlsY
nT8v/TJvJfcE/GQ2HQ7VORYdwyZN2bDEwenJ3UQdJtWflqbXBea51AZacSBZAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUvO3zbj1WNqEgzPXCuSJWKlkgEg0wHwYDVR0j
BBgwFoAUhYiJNyRG72eONenTScB4WoG4+7cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RTgzNUM1ODE4MEIyNDQ4MkI0OEVDMkM3OTY3NTQ2MDBD
RUU2RjNCMThCNjlCQzRCQkRGRkRDMjI4NUVDNDhBLzAvODU4ODg5MzcyNDQ2RUY2
NzhFMzVFOUQzNDlDMDc4NUE4MUI4RkJCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NTg4ODkzNzI0NDZFRjY3OEUz
NUU5RDM0OUMwNzg1QTgxQjhGQkI3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0U4MzVDNTgxODBCMjQ0ODJCNDhFQzJDNzk2NzU0NjAwQ0VFNkYzQjE4
QjY5QkM0QkJERkZEQzIyODVFQzQ4QS8wLzMxMzMzODJlMzEzMjMyMmUzMjM0MzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzEzMTMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinr1
MA0GCSqGSIb3DQEBCwUAA4IBAQAv5TgAaueOeZVSFAIvB0PZLxlEMVbWIvFYfY6U
JYdKJGl/n9BYI0qUOPuMLWHZw4nhuCpHumbjAsWIWCoF84hUwrX67Iiuxp7Rb/b5
ElxMUXV2FN+OFgaCId99Z60jS5QAEAwYU7hcvVVnZmzlzC55W6Z95dF1QOucThLp
zc8nDJbbp/4roGIOiKKfgs0EByOV3RYB4NP3m8/BH0WExT98k8ftWtnNfSfwJyV8
5A1eovaTxYxkRlYEDIIQ0Y9cpejvbvsQUygAqvpFtLQjAzmlUS+w+YbpHiIozADL
s5O0Y8wypkjts48Nj/nkRxmxNLr1blwGWl8mO8XZnWHVO6J5
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:10:49 2026 by rpki-client