Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3133382e3131382e3132342e302f32322d3234203d3e203237373936.roa
File:                     3133382e3131382e3132342e302f32322d3234203d3e203237373936.roa (raw, json)
Hash identifier:          lqXIE0T67WPWr36/1CmlNr6Lzk7fKUxRwD2hFzeTDRk=
Subject key identifier:   00:01:B4:45:B8:05:8D:BE:84:91:00:7D:68:86:01:D1:3D:19:77:0D
Certificate issuer:       /CN=8F0ED550857A433130395BAAF91EB758467C8A1E
Certificate serial:       4A78400D6977EBC56154C279F20465D631E6B5F1
Authority key identifier: 8F:0E:D5:50:85:7A:43:31:30:39:5B:AA:F9:1E:B7:58:46:7C:8A:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3133382e3131382e3132342e302f32322d3234203d3e203237373936.roa
Signing time:             Tue 19 May 2026 21:43:14 +0000
ROA not before:           Tue 19 May 2026 21:38:14 +0000
ROA not after:            Tue 18 May 2027 21:43:14 +0000
asID:                     27796
IP address blocks:        138.118.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:78:40:0d:69:77:eb:c5:61:54:c2:79:f2:04:65:d6:31:e6:b5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F0ED550857A433130395BAAF91EB758467C8A1E
        Validity
            Not Before: May 19 21:38:14 2026 GMT
            Not After : May 18 21:43:14 2027 GMT
        Subject: CN=0001B445B8058DBE8491007D688601D13D19770D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:75:6e:72:f3:92:b4:16:57:59:75:4c:c2:a7:
                    49:e2:f0:92:f3:35:7e:f2:e4:11:9b:fb:6b:92:70:
                    34:3f:e5:d4:a6:18:e5:56:a7:67:1f:8b:8a:93:5f:
                    ce:83:53:c5:6c:1b:fb:a3:aa:be:ad:a1:90:13:ea:
                    6b:f9:7d:b8:51:8b:3e:91:d8:dd:67:95:1b:7d:70:
                    a8:8e:3e:8e:76:cc:d3:35:44:41:11:03:e1:f7:42:
                    28:05:87:c7:97:91:47:36:ca:a0:dc:67:f4:da:14:
                    35:eb:73:ec:bf:4a:10:23:78:5f:3e:13:b3:42:d6:
                    74:94:60:96:53:99:c1:f8:83:81:e3:5b:d7:ad:e0:
                    9e:16:7d:ae:33:26:ab:e4:ef:89:c5:32:3f:6b:86:
                    63:d3:1a:32:a0:48:61:b0:78:04:6f:95:cf:59:2a:
                    45:28:1c:e7:02:77:36:b4:9c:f3:ab:95:86:b5:41:
                    96:ac:27:29:e1:f5:7d:1c:59:4f:dc:3f:9c:15:c0:
                    dc:4b:3b:f6:9a:9b:4e:51:f6:48:eb:a1:9b:81:da:
                    90:6b:56:57:70:0c:89:d4:68:ae:72:0f:84:44:6a:
                    51:a3:13:a4:4b:43:0e:9d:9a:ee:c1:6e:17:e4:69:
                    b1:51:1a:bf:48:d9:da:25:56:7e:35:1e:2b:44:c3:
                    2c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:01:B4:45:B8:05:8D:BE:84:91:00:7D:68:86:01:D1:3D:19:77:0D
            X509v3 Authority Key Identifier:
                keyid:8F:0E:D5:50:85:7A:43:31:30:39:5B:AA:F9:1E:B7:58:46:7C:8A:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3133382e3131382e3132342e302f32322d3234203d3e203237373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:a5:0f:14:f7:63:9e:c5:89:f1:a7:e0:cd:1d:0c:bc:00:ff:
         fc:43:8b:0a:cd:4e:5c:03:09:b4:c7:83:e8:c6:d1:28:6d:8e:
         7d:63:08:c5:fc:dc:97:57:0e:2a:2e:1e:99:c8:af:03:88:4f:
         e2:2e:9d:40:86:7b:64:83:b0:7f:f7:95:48:7b:d9:68:c1:2d:
         df:8e:00:57:e0:87:20:9b:ea:ce:cd:0c:21:b1:0b:61:ff:95:
         75:eb:c6:66:85:07:89:f2:63:96:1f:4d:e8:9a:90:95:1a:dd:
         a1:c6:1a:d7:ca:e7:a1:90:4c:c9:15:0f:c0:f9:c2:46:00:b7:
         0e:d4:42:36:25:7d:75:a3:9b:4c:27:1a:e6:28:d9:e8:c1:2f:
         16:bf:6d:82:3a:ca:f4:ca:78:8c:b9:1a:a5:6e:3a:51:95:87:
         ba:22:99:c7:be:49:3b:82:d8:40:66:fc:ce:31:8e:14:9d:0d:
         65:9b:42:6c:19:e2:72:2c:bb:4b:ee:1c:85:4d:aa:a0:ad:53:
         d3:cf:da:0a:cd:6e:53:24:00:a4:29:66:a8:ab:37:2f:35:05:
         2c:3c:c2:22:44:87:f6:d9:50:9a:d6:53:c9:df:55:b2:3f:5e:
         a9:52:a4:d5:87:0f:9a:69:05:a4:a9:de:e2:bd:39:77:12:cc:
         64:23:52:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:22:13 2026 by rpki-client