Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3233302e302f32342d3234203d3e20323633373832.roa
File:                     3133382e3132312e3233302e302f32342d3234203d3e20323633373832.roa (raw, json)
Hash identifier:          5N3Nt2/sxk7BcWdVE46rPx4HAfhtdWwQIocAvUTNfZY=
Subject key identifier:   C1:37:99:59:9E:CE:C6:90:05:1C:3B:4C:8E:11:95:D6:8C:EA:88:72
Certificate issuer:       /CN=9546A908853C34D10445938EC0A727E092D120C7
Certificate serial:       1B08ABA5B06FB7F67513438EE7D1B3C5D44F19FF
Authority key identifier: 95:46:A9:08:85:3C:34:D1:04:45:93:8E:C0:A7:27:E0:92:D1:20:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9546A908853C34D10445938EC0A727E092D120C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3233302e302f32342d3234203d3e20323633373832.roa
Signing time:             Wed 25 Feb 2026 12:10:02 +0000
ROA not before:           Wed 25 Feb 2026 12:05:02 +0000
ROA not after:            Wed 24 Feb 2027 12:10:02 +0000
asID:                     263782
IP address blocks:        138.121.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/9546A908853C34D10445938EC0A727E092D120C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/9546A908853C34D10445938EC0A727E092D120C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9546A908853C34D10445938EC0A727E092D120C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:08:ab:a5:b0:6f:b7:f6:75:13:43:8e:e7:d1:b3:c5:d4:4f:19:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9546A908853C34D10445938EC0A727E092D120C7
        Validity
            Not Before: Feb 25 12:05:02 2026 GMT
            Not After : Feb 24 12:10:02 2027 GMT
        Subject: CN=C13799599ECEC690051C3B4C8E1195D68CEA8872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f1:20:bf:fe:9e:4a:f2:d2:12:f3:9a:bb:3a:
                    6a:b6:ee:e5:ea:91:f3:e8:88:72:75:a1:a6:87:8f:
                    06:33:a4:90:c9:75:30:d2:99:ba:e5:8b:b1:d9:06:
                    65:fe:7d:35:65:e9:22:76:2a:2c:5a:84:8f:2e:c7:
                    d0:2b:d4:11:18:55:fc:33:fa:c3:ea:5a:fc:21:15:
                    28:a4:7b:da:79:53:e0:43:d4:ee:a6:20:74:02:75:
                    9a:db:82:eb:ee:ee:ee:1b:8d:95:87:f3:55:0b:57:
                    bb:ac:b2:aa:83:0a:2c:66:f2:42:5b:15:17:4f:f2:
                    60:3d:50:7d:6f:e2:9c:16:d9:69:da:ca:77:da:05:
                    65:40:73:87:74:65:39:bd:e6:a7:d9:3c:65:81:55:
                    f0:0c:6d:ce:bb:c9:d0:06:c3:98:ef:f5:90:56:ad:
                    6c:3d:62:92:bf:f7:1f:3c:dd:92:f4:2d:aa:ca:c7:
                    ce:82:7a:d3:fd:f3:30:a9:ef:d4:b2:ee:69:41:26:
                    94:fe:6d:91:38:fa:97:9f:b9:ae:ff:a4:4a:20:f1:
                    49:f3:d6:b6:3e:b5:51:3a:2d:9b:2d:7f:99:41:22:
                    24:98:b8:fc:b7:b6:f3:62:2a:df:82:97:2a:69:25:
                    a8:ad:8f:60:a9:07:8a:13:43:4b:26:44:2c:e2:d0:
                    6f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:37:99:59:9E:CE:C6:90:05:1C:3B:4C:8E:11:95:D6:8C:EA:88:72
            X509v3 Authority Key Identifier:
                keyid:95:46:A9:08:85:3C:34:D1:04:45:93:8E:C0:A7:27:E0:92:D1:20:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/9546A908853C34D10445938EC0A727E092D120C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9546A908853C34D10445938EC0A727E092D120C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3233302e302f32342d3234203d3e20323633373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:da:e8:3b:36:7a:bd:bd:24:54:de:0d:e1:07:d0:d6:6a:e4:
         ee:f4:24:37:92:f5:3f:9b:f6:a9:9b:8a:aa:bb:7a:46:c9:cf:
         55:f4:82:21:ac:d3:79:85:55:20:e6:1f:2e:4d:28:f7:b9:db:
         7c:cc:76:4f:60:49:f1:75:c3:0a:30:94:ad:45:d9:28:08:22:
         6a:80:c7:64:c7:a9:b1:8e:59:18:9e:45:3b:57:42:c9:de:09:
         3a:24:e9:1f:3f:60:71:fd:60:5d:ff:2f:41:55:b4:f9:77:30:
         ce:18:7d:4b:f4:40:8f:79:22:58:b6:cc:4a:ae:d9:56:c5:25:
         e1:e5:16:38:92:8f:9c:0f:db:4c:84:a2:a9:dc:a5:43:fe:6a:
         cb:28:df:31:d6:b6:5a:49:8c:10:8a:6f:c3:ee:8a:7e:da:59:
         0f:83:f3:3a:51:71:b2:53:83:ae:7c:06:3b:3f:6c:e0:d5:c6:
         8c:0c:e2:9d:e8:5f:e3:5f:eb:c0:de:0a:59:c0:b7:21:21:ac:
         5b:ed:74:5e:80:8c:4b:ef:cf:e4:9a:64:f9:e5:20:ff:1b:b8:
         a5:05:b5:2f:25:00:0f:9b:23:5d:62:4c:1c:cd:08:b6:8e:57:
         b0:a2:96:79:1d:61:89:f8:17:b3:47:74:68:37:30:a0:60:11:
         db:eb:c0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:21:17 2026 by rpki-client