Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0AC8CD11450429E740109FA9718682CEA14CB2AB07D6EB96D109D0E2B9590B9/0/3133382e3132322e3138342e302f32322d3234203d3e20323730313232.roa
File:                     3133382e3132322e3138342e302f32322d3234203d3e20323730313232.roa (raw, json)
Hash identifier:          YtV+HPHKTynCSTTxZfZ0ugb1EybwrYKqoXiQsf32p5g=
Subject key identifier:   38:28:F2:C4:35:F4:F8:70:DC:2A:81:D8:D7:04:02:51:1E:B4:72:7C
Certificate issuer:       /CN=FE87BC8E89919E936184D5BAC64AF9CFB437D9B6
Certificate serial:       7BF6BA723D3AFA1CC1D00E20EECD4E117D603C0E
Authority key identifier: FE:87:BC:8E:89:91:9E:93:61:84:D5:BA:C6:4A:F9:CF:B4:37:D9:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE87BC8E89919E936184D5BAC64AF9CFB437D9B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0AC8CD11450429E740109FA9718682CEA14CB2AB07D6EB96D109D0E2B9590B9/0/3133382e3132322e3138342e302f32322d3234203d3e20323730313232.roa
Signing time:             Mon 23 Feb 2026 21:25:00 +0000
ROA not before:           Mon 23 Feb 2026 21:20:00 +0000
ROA not after:            Mon 22 Feb 2027 21:25:00 +0000
asID:                     270122
IP address blocks:        138.122.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0AC8CD11450429E740109FA9718682CEA14CB2AB07D6EB96D109D0E2B9590B9/0/FE87BC8E89919E936184D5BAC64AF9CFB437D9B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0AC8CD11450429E740109FA9718682CEA14CB2AB07D6EB96D109D0E2B9590B9/0/FE87BC8E89919E936184D5BAC64AF9CFB437D9B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE87BC8E89919E936184D5BAC64AF9CFB437D9B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f6:ba:72:3d:3a:fa:1c:c1:d0:0e:20:ee:cd:4e:11:7d:60:3c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE87BC8E89919E936184D5BAC64AF9CFB437D9B6
        Validity
            Not Before: Feb 23 21:20:00 2026 GMT
            Not After : Feb 22 21:25:00 2027 GMT
        Subject: CN=3828F2C435F4F870DC2A81D8D70402511EB4727C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0f:44:68:93:64:af:d9:6d:1b:dc:70:eb:c4:
                    01:79:3e:8f:6d:4b:6e:c6:9c:06:0e:3d:a2:e4:9c:
                    75:0b:74:8b:84:32:c9:95:94:e0:7e:8c:1f:e0:66:
                    b5:39:47:14:55:0c:eb:3b:93:5b:d8:d2:f3:eb:5c:
                    22:28:32:8e:00:e6:ca:b4:e1:45:c4:64:58:44:f9:
                    81:79:b1:ac:7f:80:c2:0e:d6:9b:81:ea:bb:9f:be:
                    db:09:3f:62:c6:e3:0f:20:1c:4f:50:40:88:d2:35:
                    42:26:69:a5:0b:48:89:ba:4e:73:49:02:33:ef:e1:
                    19:09:9a:ca:bf:4c:ae:d3:63:da:d6:50:02:e9:25:
                    6f:f3:e3:a2:ac:da:1d:58:56:ff:fb:de:be:4f:a5:
                    d7:da:9f:d8:a6:ef:56:41:a0:bb:2b:a6:b5:3a:6b:
                    84:73:7a:31:ee:f6:20:76:42:99:a2:b7:e6:59:e0:
                    b1:a6:44:d3:cc:2c:7a:4a:61:7c:3e:1b:dc:de:e1:
                    63:fd:24:50:e7:42:75:eb:28:13:de:68:64:99:15:
                    70:14:57:f9:98:46:8e:e1:19:de:68:d7:cf:80:50:
                    14:01:e7:91:7c:02:ad:97:dd:40:84:74:08:0d:49:
                    3d:df:6d:68:63:dd:01:f0:bd:12:23:89:f6:fc:94:
                    ef:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:28:F2:C4:35:F4:F8:70:DC:2A:81:D8:D7:04:02:51:1E:B4:72:7C
            X509v3 Authority Key Identifier:
                keyid:FE:87:BC:8E:89:91:9E:93:61:84:D5:BA:C6:4A:F9:CF:B4:37:D9:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0AC8CD11450429E740109FA9718682CEA14CB2AB07D6EB96D109D0E2B9590B9/0/FE87BC8E89919E936184D5BAC64AF9CFB437D9B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE87BC8E89919E936184D5BAC64AF9CFB437D9B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0AC8CD11450429E740109FA9718682CEA14CB2AB07D6EB96D109D0E2B9590B9/0/3133382e3132322e3138342e302f32322d3234203d3e20323730313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:7e:e6:94:8c:83:62:e4:0d:8f:04:ae:14:97:a5:7c:92:c4:
         41:c4:50:7b:6b:35:82:4e:b4:ce:6f:97:f2:52:d8:8d:5c:3e:
         a6:1d:27:79:60:7c:64:ee:19:6c:7f:02:aa:4e:8b:cb:15:18:
         13:31:2b:25:a5:09:1f:14:a8:ce:a9:6e:90:2d:fc:d7:6d:54:
         04:54:d7:2b:52:b3:ef:9c:f4:d7:63:f5:80:c6:23:93:9f:6f:
         30:63:96:e1:cf:26:7d:62:76:5e:e3:70:80:6e:c2:9a:f4:d2:
         47:83:8c:a3:b9:6e:54:8e:0f:7f:c5:7b:b9:5f:43:1b:cc:a3:
         62:b9:8d:ad:b2:3b:1f:c8:9a:8e:39:99:78:6f:67:f3:8e:18:
         ff:db:9b:2d:82:16:3c:e0:52:89:87:a9:b3:46:3e:d3:38:73:
         54:6a:28:b6:b8:fa:4c:7f:ad:d6:d2:13:fc:c5:65:1b:91:54:
         1e:cc:8a:e1:47:0f:df:42:62:9b:f7:fe:73:64:ff:3f:22:6b:
         39:41:bc:91:4a:c7:50:9b:f8:d3:5f:75:e6:e6:0f:4f:0c:50:
         43:04:15:77:6f:e3:ab:6f:cb:8a:cf:af:a1:66:34:37:c7:5d:
         c9:48:fe:62:8d:d6:7f:92:1c:2f:a7:7b:01:1e:a1:bc:18:e9:
         f6:b0:18:f4
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUe/a6cj06+hzB0A4g7s1OEX1gPA4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU4N0JDOEU4OTkxOUU5MzYxODRENUJBQzY0QUY5Q0ZC
NDM3RDlCNjAeFw0yNjAyMjMyMTIwMDBaFw0yNzAyMjIyMTI1MDBaMDMxMTAvBgNV
BAMTKDM4MjhGMkM0MzVGNEY4NzBEQzJBODFEOEQ3MDQwMjUxMUVCNDcyN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUD0Rok2Sv2W0b3HDrxAF5Po9t
S27GnAYOPaLknHULdIuEMsmVlOB+jB/gZrU5RxRVDOs7k1vY0vPrXCIoMo4A5sq0
4UXEZFhE+YF5sax/gMIO1puB6rufvtsJP2LG4w8gHE9QQIjSNUImaaULSIm6TnNJ
AjPv4RkJmsq/TK7TY9rWUALpJW/z46Ks2h1YVv/73r5Ppdfan9im71ZBoLsrprU6
a4RzejHu9iB2Qpmit+ZZ4LGmRNPMLHpKYXw+G9ze4WP9JFDnQnXrKBPeaGSZFXAU
V/mYRo7hGd5o18+AUBQB55F8Aq2X3UCEdAgNST3fbWhj3QHwvRIjifb8lO89AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUOCjyxDX0+HDcKoHY1wQCUR60cnwwHwYDVR0j
BBgwFoAU/oe8jomRnpNhhNW6xkr5z7Q32bYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMEFDOENEMTE0NTA0MjlFNzQwMTA5RkE5NzE4NjgyQ0VB
MTRDQjJBQjA3RDZFQjk2RDEwOUQwRTJCOTU5MEI5LzAvRkU4N0JDOEU4OTkxOUU5
MzYxODRENUJBQzY0QUY5Q0ZCNDM3RDlCNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRTg3QkM4RTg5OTE5RTkzNjE4
NEQ1QkFDNjRBRjlDRkI0MzdEOUI2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTBBQzhDRDExNDUwNDI5RTc0MDEwOUZBOTcxODY4MkNFQTE0Q0IyQUIw
N0Q2RUI5NkQxMDlEMEUyQjk1OTBCOS8wLzMxMzMzODJlMzEzMjMyMmUzMTM4MzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzAzMTMyMzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKK
ergwDQYJKoZIhvcNAQELBQADggEBAIZ+5pSMg2LkDY8ErhSXpXySxEHEUHtrNYJO
tM5vl/JS2I1cPqYdJ3lgfGTuGWx/AqpOi8sVGBMxKyWlCR8UqM6pbpAt/NdtVARU
1ytSs++c9Ndj9YDGI5OfbzBjluHPJn1idl7jcIBuwpr00keDjKO5blSOD3/Fe7lf
QxvMo2K5ja2yOx/Imo45mXhvZ/OOGP/bmy2CFjzgUomHqbNGPtM4c1RqKLa4+kx/
rdbSE/zFZRuRVB7MiuFHD99CYpv3/nNk/z8iazlBvJFKx1Cb+NNfdebmD08MUEME
FXdv46tvy4rPr6FmNDfHXclI/mKN1n+SHC+newEeobwY6fawGPQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:06:28 2026 by rpki-client