Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3233302e302f32332d3233203d3e20323633373832.roa
File:                     3133382e3132312e3233302e302f32332d3233203d3e20323633373832.roa (raw, json)
Hash identifier:          m0cw0olaCMPuEEs9krHyBKyZMeUcRiduu/gaoPbAav8=
Subject key identifier:   E7:E2:C7:9C:D3:5E:6C:08:D3:6D:DC:BE:CB:4C:90:04:B3:67:07:40
Certificate issuer:       /CN=9546A908853C34D10445938EC0A727E092D120C7
Certificate serial:       1A76DDDE2A35836EC510D5EC8D4DDE8F52A4CB58
Authority key identifier: 95:46:A9:08:85:3C:34:D1:04:45:93:8E:C0:A7:27:E0:92:D1:20:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9546A908853C34D10445938EC0A727E092D120C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3233302e302f32332d3233203d3e20323633373832.roa
Signing time:             Wed 25 Feb 2026 12:10:01 +0000
ROA not before:           Wed 25 Feb 2026 12:05:01 +0000
ROA not after:            Wed 24 Feb 2027 12:10:01 +0000
asID:                     263782
IP address blocks:        138.121.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/9546A908853C34D10445938EC0A727E092D120C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/9546A908853C34D10445938EC0A727E092D120C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9546A908853C34D10445938EC0A727E092D120C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:76:dd:de:2a:35:83:6e:c5:10:d5:ec:8d:4d:de:8f:52:a4:cb:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9546A908853C34D10445938EC0A727E092D120C7
        Validity
            Not Before: Feb 25 12:05:01 2026 GMT
            Not After : Feb 24 12:10:01 2027 GMT
        Subject: CN=E7E2C79CD35E6C08D36DDCBECB4C9004B3670740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:72:79:10:3b:b1:0a:63:1f:be:3a:3d:f3:f3:
                    98:66:88:f1:6c:f4:42:3f:8b:85:ca:3b:ed:08:9b:
                    15:e3:f3:60:a6:d4:cb:ea:17:00:2a:c3:8a:85:fe:
                    19:de:87:4f:6f:82:4a:6b:06:0e:16:72:3e:d0:cc:
                    71:28:43:92:49:d9:ed:36:45:b1:2d:ee:23:25:d4:
                    be:d6:b7:9f:ed:9e:11:b6:b3:47:40:72:7e:59:63:
                    d6:4c:b3:89:23:96:b2:60:aa:23:1b:ec:27:e1:a3:
                    ce:12:ef:4f:7f:4c:0a:f9:8b:10:25:1b:df:6b:a8:
                    9b:9c:d0:4b:94:e8:8c:31:ea:4b:c4:68:eb:0d:e4:
                    56:3a:cd:dc:39:80:4c:6f:cb:5e:fd:07:44:2a:a5:
                    1a:e7:73:21:84:db:2f:51:5e:3f:f6:a2:8d:ea:27:
                    81:25:25:c0:66:87:ee:c6:c3:9b:0a:49:ac:a1:8a:
                    20:95:43:50:27:56:56:73:07:61:a4:21:08:d2:55:
                    3b:39:32:29:5b:e2:16:eb:85:16:81:9f:e0:df:07:
                    3f:63:ea:0c:c2:48:34:b0:6a:01:25:cd:19:71:77:
                    90:8e:35:88:6f:49:10:c1:a2:fe:52:f3:40:40:6c:
                    05:11:66:f2:4f:eb:62:e3:43:7c:d6:80:bc:b5:aa:
                    10:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E2:C7:9C:D3:5E:6C:08:D3:6D:DC:BE:CB:4C:90:04:B3:67:07:40
            X509v3 Authority Key Identifier:
                keyid:95:46:A9:08:85:3C:34:D1:04:45:93:8E:C0:A7:27:E0:92:D1:20:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/9546A908853C34D10445938EC0A727E092D120C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9546A908853C34D10445938EC0A727E092D120C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3233302e302f32332d3233203d3e20323633373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         df:25:2b:e7:e0:2a:f9:45:b1:42:ef:d0:e9:e1:d2:51:e7:17:
         4c:5c:96:c0:4a:15:fa:49:84:62:8c:8d:9d:8e:b3:df:f3:c2:
         ca:be:9b:28:d5:f8:ee:bd:18:b7:14:68:52:99:c2:1a:d4:ae:
         a2:a9:a4:60:20:f8:99:4e:f8:66:12:17:54:53:99:96:87:81:
         ad:6b:1d:e4:c6:f6:0a:fe:0a:4e:0e:ea:72:f1:d2:a2:da:17:
         e7:e7:b7:db:f9:bd:97:71:04:10:55:c7:4b:0c:7f:ea:a6:2e:
         fe:4f:b9:43:fb:71:ad:95:d2:4b:07:e1:6b:f8:ad:df:d4:4c:
         68:64:1b:a6:1d:d2:b2:8d:38:c8:a8:c4:f4:b8:ad:e6:c7:fc:
         a1:47:98:07:54:19:e2:ea:ce:64:9b:e5:52:f2:74:2b:e8:ad:
         3a:2e:a1:ec:5e:00:d2:db:b2:a3:bf:52:5f:b3:b1:73:9c:4d:
         b1:e8:61:50:47:90:9c:e0:91:e0:3b:d6:07:05:5f:be:ca:27:
         ed:bb:36:2e:57:61:9f:98:22:fe:07:44:ad:50:53:d3:2b:93:
         18:63:82:18:e1:90:87:a3:df:5e:55:3c:20:ca:3f:64:3c:4b:
         94:d7:e1:08:51:51:e9:85:4f:e3:c0:de:0e:97:16:8a:c5:f1:
         97:d7:00:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:21:19 2026 by rpki-client