Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31322e302f32342d3234203d3e20323733303030.roa
File:                     3133382e3230342e31322e302f32342d3234203d3e20323733303030.roa (raw, json)
Hash identifier:          85f3OQsb/aX4qAGnlF2S5TEVGNOhJWqLZTDwomG/fFI=
Subject key identifier:   32:EF:17:24:4B:87:2F:13:7E:6E:AD:62:B3:C7:3E:0F:77:9D:52:29
Certificate issuer:       /CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
Certificate serial:       184205969121AA4E11BE7A5D6FBFAAF2D07D1B3B
Authority key identifier: DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31322e302f32342d3234203d3e20323733303030.roa
Signing time:             Tue 10 Feb 2026 22:30:06 +0000
ROA not before:           Tue 10 Feb 2026 22:25:06 +0000
ROA not after:            Tue 09 Feb 2027 22:30:06 +0000
asID:                     273000
IP address blocks:        138.204.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 02:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:42:05:96:91:21:aa:4e:11:be:7a:5d:6f:bf:aa:f2:d0:7d:1b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
        Validity
            Not Before: Feb 10 22:25:06 2026 GMT
            Not After : Feb  9 22:30:06 2027 GMT
        Subject: CN=32EF17244B872F137E6EAD62B3C73E0F779D5229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:23:2a:7d:1f:a5:fa:59:6e:20:ec:a1:bc:23:
                    c1:18:de:4c:4d:d4:af:9c:e0:44:67:f0:82:d5:1c:
                    2f:b6:8b:19:3d:9f:79:c1:c1:7c:8e:b7:b5:10:9c:
                    3b:88:1a:dc:eb:46:82:33:ae:16:e6:c1:ab:27:ee:
                    67:62:d8:c7:47:28:67:4e:8a:8d:b4:55:84:80:1c:
                    e5:92:5e:ec:e0:a1:83:6c:0c:26:e3:77:0f:d0:5a:
                    de:6a:9c:29:89:f4:23:a9:78:79:09:bb:5a:53:33:
                    b8:33:48:77:48:0f:dd:64:bd:9b:80:95:7e:9a:d3:
                    95:08:b9:2f:ef:3b:4c:36:35:d4:cc:71:72:76:79:
                    ea:ef:33:66:9e:f4:73:66:a9:d2:f2:6e:a7:f0:a0:
                    fc:73:21:55:94:25:c8:f2:c9:b8:1d:62:65:eb:8e:
                    47:ba:24:2d:db:1f:13:83:9f:f9:6d:ed:90:db:51:
                    aa:38:4e:55:f4:e4:ec:1d:cb:f5:e2:b4:b3:37:0c:
                    04:d1:37:7a:e6:b0:85:3f:39:df:99:bd:77:90:e3:
                    5a:bb:ed:7d:ab:57:44:d5:f5:03:0c:8f:28:a7:08:
                    87:56:e3:f5:f7:1b:fc:d4:ac:c7:53:ab:79:0b:64:
                    40:dc:3e:56:00:12:56:66:c1:a6:b6:bd:1d:ea:04:
                    6d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EF:17:24:4B:87:2F:13:7E:6E:AD:62:B3:C7:3E:0F:77:9D:52:29
            X509v3 Authority Key Identifier:
                keyid:DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31322e302f32342d3234203d3e20323733303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:71:37:0b:3c:1f:8c:1f:a6:e7:45:c4:2e:51:24:b3:c0:5b:
         58:2b:75:f9:1f:5a:99:23:9d:50:c6:bf:98:2a:b6:2a:3b:98:
         00:7e:39:20:42:5b:e0:36:5a:48:e1:15:03:ec:06:5a:24:a2:
         a8:a0:05:53:53:b4:e4:7d:f6:0d:00:75:7d:89:90:d6:24:10:
         2d:24:a9:57:60:ef:39:b2:74:89:a9:18:d3:b7:ee:87:23:41:
         1f:39:e6:df:90:14:6b:6e:99:dd:d5:85:ae:71:60:ce:a3:49:
         bc:22:96:0b:6b:93:74:5b:14:a3:c4:2a:4f:e0:ed:7d:50:59:
         03:c5:ae:c1:28:f1:03:af:3b:62:b5:5c:01:cc:62:d9:7d:28:
         8d:27:87:8a:af:b7:df:29:58:69:f3:ed:97:bc:a9:5a:86:ed:
         9c:e6:83:15:a8:51:35:c8:1c:73:77:f5:c5:1c:de:56:d3:ff:
         d7:f2:ca:b8:16:98:ac:4b:10:64:0d:0f:f4:dd:5c:ac:f1:44:
         ff:83:a2:a7:ed:53:3e:81:52:ac:2f:cf:fe:07:6d:eb:ef:c6:
         82:58:4f:73:99:81:74:d7:2f:4b:3c:ec:54:2b:27:39:f5:6a:
         dc:9c:e2:5e:dd:fb:5f:c2:29:79:e8:55:48:85:dc:67:a3:89:
         a8:4c:51:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:59:24 2026 by rpki-client