Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/3133382e3132312e38332e302f32342d3234203d3e20323730303534.roa
File:                     3133382e3132312e38332e302f32342d3234203d3e20323730303534.roa (raw, json)
Hash identifier:          gmSmvXxTjDiz8vlz7ylWl5wpXayIcRBHUnmOVHhvPr8=
Subject key identifier:   01:35:73:0E:CF:C9:89:D1:26:83:72:D1:F6:35:60:A5:28:AC:81:A4
Certificate issuer:       /CN=A7C599055F36D3C6330474B282FC543C5378F8BA
Certificate serial:       7966D27B2B2AC40A2D4B931804D43F7AB587247B
Authority key identifier: A7:C5:99:05:5F:36:D3:C6:33:04:74:B2:82:FC:54:3C:53:78:F8:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7C599055F36D3C6330474B282FC543C5378F8BA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/3133382e3132312e38332e302f32342d3234203d3e20323730303534.roa
Signing time:             Mon 02 Mar 2026 12:35:00 +0000
ROA not before:           Mon 02 Mar 2026 12:30:00 +0000
ROA not after:            Mon 01 Mar 2027 12:35:00 +0000
asID:                     270054
IP address blocks:        138.121.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/A7C599055F36D3C6330474B282FC543C5378F8BA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/A7C599055F36D3C6330474B282FC543C5378F8BA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7C599055F36D3C6330474B282FC543C5378F8BA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:66:d2:7b:2b:2a:c4:0a:2d:4b:93:18:04:d4:3f:7a:b5:87:24:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7C599055F36D3C6330474B282FC543C5378F8BA
        Validity
            Not Before: Mar  2 12:30:00 2026 GMT
            Not After : Mar  1 12:35:00 2027 GMT
        Subject: CN=0135730ECFC989D1268372D1F63560A528AC81A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:79:08:e8:4e:25:eb:d0:fd:e4:81:e2:a6:11:
                    90:bf:2d:b5:12:08:0d:97:d4:4a:df:07:58:de:68:
                    5c:b7:aa:2c:8a:9f:d3:88:4e:38:61:d1:55:9b:09:
                    f3:f3:f0:0c:4e:65:db:30:81:af:64:82:f5:d3:c0:
                    19:30:89:fa:a7:e9:e6:8c:0b:22:e2:9f:9d:3a:5b:
                    e5:00:a7:a2:12:5a:3f:11:54:55:ef:b4:48:c5:26:
                    ef:60:96:fa:6c:17:bb:f1:ab:37:3e:60:66:54:2b:
                    6f:9e:e0:42:e8:83:18:50:36:28:9b:58:ea:65:b5:
                    31:d3:f2:9c:b8:11:1b:57:b3:e0:1c:55:c8:b9:17:
                    ea:bd:ee:13:da:3e:da:36:6e:45:a3:44:30:6f:9f:
                    7c:b7:01:1b:bc:a1:6e:0f:07:d3:04:95:24:6c:10:
                    bb:ee:66:52:a8:74:fe:d8:6a:fd:ac:8c:6c:6c:19:
                    a9:34:f8:82:b3:56:18:38:f7:c4:f4:85:c9:d2:12:
                    a1:95:0c:d6:d4:ea:59:92:81:8d:df:98:0d:45:41:
                    01:97:1a:68:ab:8f:aa:2d:c0:da:cf:ef:e3:90:cf:
                    ec:fa:6b:e4:c4:df:ca:db:32:fc:16:68:52:66:01:
                    af:ff:2e:fc:6d:7a:c5:39:3d:10:bd:98:7b:eb:c0:
                    79:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:35:73:0E:CF:C9:89:D1:26:83:72:D1:F6:35:60:A5:28:AC:81:A4
            X509v3 Authority Key Identifier:
                keyid:A7:C5:99:05:5F:36:D3:C6:33:04:74:B2:82:FC:54:3C:53:78:F8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/A7C599055F36D3C6330474B282FC543C5378F8BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7C599055F36D3C6330474B282FC543C5378F8BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/3133382e3132312e38332e302f32342d3234203d3e20323730303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:3c:b2:51:10:ca:9d:a8:a6:eb:91:6e:c6:d2:e5:f0:4c:45:
         be:ae:30:73:bd:15:71:c8:d0:1e:d9:d9:87:9d:c4:68:62:14:
         0f:4e:98:39:3c:3f:94:20:6a:cd:db:70:56:e5:a9:17:87:68:
         65:17:4b:4a:de:a9:fa:17:52:5e:cd:4f:a5:be:f3:c2:01:1b:
         48:7f:cc:13:31:23:5d:6f:c4:9d:62:9f:de:3c:a5:4d:b8:7c:
         05:2a:6e:c7:f8:5b:39:d1:1b:fb:09:42:8a:2e:58:25:e7:3b:
         53:cf:01:dd:e8:2a:94:15:15:c6:2d:98:9c:fe:61:0f:2f:e7:
         e9:39:3a:e4:f4:54:d9:7e:4a:48:cb:fe:fd:04:e9:bc:01:36:
         82:6a:78:15:4a:26:d7:5f:61:33:7e:d1:f3:07:f7:e0:6d:19:
         4a:57:03:70:0b:3e:97:91:2d:4c:3b:68:54:20:f3:45:50:29:
         e0:c2:e1:9a:f9:77:47:98:d0:dd:70:a2:e6:58:df:46:35:7e:
         cb:5b:77:59:0d:e8:3a:ea:f4:61:53:59:9a:32:11:ce:db:64:
         ad:73:98:11:d3:5f:42:b0:99:12:e1:76:0c:b7:0c:e7:b7:5a:
         a3:cf:c0:92:55:58:1b:d2:1a:6c:46:54:74:39:59:f5:05:d8:
         fc:a4:c1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:05:29 2026 by rpki-client