Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3130382e302f32342d3234203d3e20323633373932.roa
File:                     3133382e3132322e3130382e302f32342d3234203d3e20323633373932.roa (raw, json)
Hash identifier:          yE0cD0Dh5SyF4A4/x96zxNkznplE86vKLr+/mWG37QI=
Subject key identifier:   5B:59:6C:0E:85:B2:87:A5:87:85:B2:92:25:2F:A6:9F:34:F1:5A:F6
Certificate issuer:       /CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F
Certificate serial:       11C4A62B84F2E078EE61BD83D5A776AB98B1839A
Authority key identifier: B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3130382e302f32342d3234203d3e20323633373932.roa
Signing time:             Tue 17 Feb 2026 13:30:53 +0000
ROA not before:           Tue 17 Feb 2026 13:25:53 +0000
ROA not after:            Tue 16 Feb 2027 13:30:53 +0000
asID:                     263792
IP address blocks:        138.122.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 22:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c4:a6:2b:84:f2:e0:78:ee:61:bd:83:d5:a7:76:ab:98:b1:83:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F
        Validity
            Not Before: Feb 17 13:25:53 2026 GMT
            Not After : Feb 16 13:30:53 2027 GMT
        Subject: CN=5B596C0E85B287A58785B292252FA69F34F15AF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f0:f3:04:5c:87:07:a4:cd:9a:52:3c:d5:a1:
                    2c:e1:7a:55:9b:c6:1c:3e:1d:41:2b:55:7c:23:7b:
                    3e:7d:5e:fd:38:12:cf:51:49:ca:b9:d3:c0:c3:2b:
                    06:3d:a8:79:7c:0e:62:b1:81:1d:5f:98:e5:b6:7b:
                    12:69:39:11:54:87:f9:c7:c8:16:4b:25:d3:d4:0c:
                    a3:34:22:3d:ea:2c:57:c2:ef:46:f9:83:a0:ec:9c:
                    50:67:d2:ba:08:ca:55:54:80:6e:ad:6b:30:fe:cd:
                    21:5e:0a:e2:59:d2:a0:5c:21:51:30:f8:55:f9:5a:
                    e6:39:55:19:9a:e1:20:2c:80:84:a6:24:d0:4a:db:
                    3c:59:a2:56:68:fd:ba:52:af:8a:35:a3:2a:93:47:
                    6d:78:a4:3c:e3:f5:e8:ac:3a:36:81:0a:21:11:f9:
                    83:a2:1d:a3:64:c6:3a:c3:8a:54:bf:7e:44:76:c4:
                    24:ba:5f:e8:8d:51:ef:fb:89:17:c7:87:19:12:9e:
                    d8:4b:16:1e:9f:74:0f:e6:11:df:1d:f1:58:3b:d8:
                    3a:ea:9a:59:ef:0a:c9:1a:36:18:ea:da:4c:bf:58:
                    d7:d3:0e:77:f6:4e:0f:8a:09:0c:7d:18:1a:1b:c7:
                    52:55:4f:28:0a:38:e3:ab:d7:f4:34:36:c7:38:60:
                    5f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:59:6C:0E:85:B2:87:A5:87:85:B2:92:25:2F:A6:9F:34:F1:5A:F6
            X509v3 Authority Key Identifier:
                keyid:B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3130382e302f32342d3234203d3e20323633373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:6a:f2:2e:db:a6:b2:5a:97:ab:8a:88:e9:6b:04:e0:e6:ac:
         27:86:1a:d2:b1:63:85:b7:54:06:ff:55:a7:06:6f:38:2e:84:
         ea:ec:dc:0f:3c:b4:69:2d:a3:c1:7b:86:61:e0:a7:77:15:a7:
         89:46:19:4c:5d:85:82:95:6e:79:d8:f5:b2:b7:44:47:d5:d3:
         5d:e1:5a:f0:b3:89:3b:6e:c1:6b:5e:93:ad:c1:cb:3e:e5:92:
         88:d4:91:70:75:33:7d:5c:6c:df:65:6e:96:81:09:19:85:22:
         f0:be:5f:96:39:a2:75:33:bf:cf:64:27:30:dd:58:ca:ba:60:
         2b:08:93:da:1e:3a:ab:b6:1c:89:27:1e:fb:13:64:e8:b8:01:
         1c:94:17:25:31:8d:17:a8:14:72:be:4d:44:8a:fe:de:f5:91:
         a1:aa:ed:6c:87:10:98:9d:f9:b0:78:c9:a9:c9:f0:57:9c:d2:
         1e:03:0d:70:bc:8e:2b:82:58:56:49:b0:fc:df:20:86:bf:8c:
         ee:2f:a8:eb:b9:2a:56:7c:b4:73:3d:0c:29:a9:34:9a:80:ef:
         09:15:e3:3d:2d:9b:04:d7:b8:11:41:2e:37:e4:7f:44:ef:50:
         64:f1:72:d6:ad:78:31:d8:6a:23:cd:5a:26:c1:b3:5a:97:15:
         05:e9:d3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:49:34 2026 by rpki-client