Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3232382e302f32322d3232203d3e20323633373832.roa
File:                     3133382e3132312e3232382e302f32322d3232203d3e20323633373832.roa (raw, json)
Hash identifier:          GG5hNFErCFhH9GrHUwqtGGKu1MZOuZDxByThhOuFqAY=
Subject key identifier:   55:D9:D4:F4:C2:60:5C:5A:38:CA:FB:05:29:A6:96:2E:F5:97:98:2B
Certificate issuer:       /CN=9546A908853C34D10445938EC0A727E092D120C7
Certificate serial:       58E6194A1D3867F428F1BFC23AB9256F432C3E21
Authority key identifier: 95:46:A9:08:85:3C:34:D1:04:45:93:8E:C0:A7:27:E0:92:D1:20:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9546A908853C34D10445938EC0A727E092D120C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3232382e302f32322d3232203d3e20323633373832.roa
Signing time:             Wed 25 Feb 2026 12:10:00 +0000
ROA not before:           Wed 25 Feb 2026 12:05:00 +0000
ROA not after:            Wed 24 Feb 2027 12:10:00 +0000
asID:                     263782
IP address blocks:        138.121.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/9546A908853C34D10445938EC0A727E092D120C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/9546A908853C34D10445938EC0A727E092D120C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9546A908853C34D10445938EC0A727E092D120C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e6:19:4a:1d:38:67:f4:28:f1:bf:c2:3a:b9:25:6f:43:2c:3e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9546A908853C34D10445938EC0A727E092D120C7
        Validity
            Not Before: Feb 25 12:05:00 2026 GMT
            Not After : Feb 24 12:10:00 2027 GMT
        Subject: CN=55D9D4F4C2605C5A38CAFB0529A6962EF597982B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:69:f1:bd:9a:2b:57:f5:68:9d:4c:43:09:d3:
                    0d:c2:c1:8f:2c:21:e4:cf:a4:c3:14:49:a1:99:71:
                    f5:a2:5a:6a:ee:d4:6a:85:94:b2:02:f4:f1:1f:f7:
                    75:b0:2f:b1:21:a6:fb:b4:54:7f:ba:b3:b4:13:3b:
                    4f:9e:6f:17:98:fc:41:85:02:10:8e:0d:6d:05:58:
                    0c:a7:90:b6:c7:ed:63:bf:9e:bd:a4:08:b7:1d:9e:
                    e7:5e:88:07:ac:c4:fa:a8:1b:fe:7d:d8:4f:5b:ed:
                    a8:93:33:76:b0:8f:5c:51:f6:d0:b6:59:fa:f6:9c:
                    bb:52:8f:c6:47:90:6e:9a:03:a7:8c:bc:74:bf:d2:
                    6c:71:31:4e:a5:b9:62:45:c2:4f:4e:a1:26:6b:e2:
                    7b:10:85:60:88:04:1b:c4:11:db:16:6b:7b:59:bf:
                    ba:d5:3a:07:74:1b:41:76:1a:5a:6c:72:b2:c6:e1:
                    e1:d0:62:ec:34:16:3e:41:0e:c0:11:b6:4a:76:af:
                    a1:e7:b8:4a:a4:2c:2d:c5:02:1a:fd:e5:52:d5:b7:
                    77:0d:79:f1:08:fe:e4:71:e7:71:ff:5d:05:8f:02:
                    a1:d9:de:5c:68:78:fc:59:c7:18:4d:06:2d:a7:fd:
                    87:66:22:cb:75:c7:73:c5:5a:1a:bb:35:4b:f3:ed:
                    07:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D9:D4:F4:C2:60:5C:5A:38:CA:FB:05:29:A6:96:2E:F5:97:98:2B
            X509v3 Authority Key Identifier:
                keyid:95:46:A9:08:85:3C:34:D1:04:45:93:8E:C0:A7:27:E0:92:D1:20:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/9546A908853C34D10445938EC0A727E092D120C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9546A908853C34D10445938EC0A727E092D120C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3232382e302f32322d3232203d3e20323633373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:21:b2:9a:1f:9a:9a:d1:8b:da:de:a2:43:b6:31:d5:7a:9f:
         17:c2:d4:9d:81:34:65:fb:63:b5:51:bd:1e:b1:ce:6b:c7:95:
         b4:3b:0f:3c:df:ba:6f:58:89:8d:e1:4b:fc:36:5c:2f:64:9c:
         77:54:df:87:84:d2:c7:e4:bc:db:21:03:d9:e8:eb:f8:07:cc:
         a0:d9:50:c4:59:e4:37:fa:99:e9:ce:7d:71:d3:2d:bc:54:ea:
         cc:ab:0e:b5:8f:5f:29:72:82:90:d8:78:e2:e2:fc:cf:1f:e8:
         86:c9:46:9f:2c:0e:57:9f:e2:2e:4e:7a:5b:d5:65:2c:50:bc:
         09:7e:8b:76:2a:c4:a3:da:e6:89:f6:67:56:52:9b:b7:5b:ff:
         76:a5:bf:22:5b:dd:79:1c:c6:2f:94:2c:af:e0:a3:d1:42:d9:
         f4:4d:5a:35:f4:30:34:fc:27:83:37:1e:8d:3d:53:9f:17:b7:
         70:e9:05:71:e8:a4:09:4c:22:65:b9:f9:28:93:e8:26:9f:60:
         03:cd:a2:ae:bf:e8:f2:ae:0f:28:a1:0b:45:4c:f4:b1:e3:d4:
         76:39:ea:f5:58:44:69:51:27:62:a5:f0:e0:69:a5:08:ac:ee:
         8e:3d:86:7c:6c:e5:c6:c8:75:e4:97:4f:3c:27:52:b3:59:6d:
         2c:9c:18:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:21:17 2026 by rpki-client