Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31332e302f32342d3234203d3e203431303935.roa
File:                     3133382e3230342e31332e302f32342d3234203d3e203431303935.roa (raw, json)
Hash identifier:          YgWk/EpoaSig2dh59hlHhPVOcX1TEmnJwjgMYW/z1lU=
Subject key identifier:   DD:81:D4:B6:8A:A9:C1:E3:98:B8:29:F4:30:4A:E6:A0:0A:89:78:66
Certificate issuer:       /CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
Certificate serial:       58487153CC7A0E53D5B1DFCE179108D9984E4149
Authority key identifier: DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31332e302f32342d3234203d3e203431303935.roa
Signing time:             Thu 12 Feb 2026 15:30:11 +0000
ROA not before:           Thu 12 Feb 2026 15:25:11 +0000
ROA not after:            Thu 11 Feb 2027 15:30:11 +0000
asID:                     41095
IP address blocks:        138.204.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 02:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:48:71:53:cc:7a:0e:53:d5:b1:df:ce:17:91:08:d9:98:4e:41:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
        Validity
            Not Before: Feb 12 15:25:11 2026 GMT
            Not After : Feb 11 15:30:11 2027 GMT
        Subject: CN=DD81D4B68AA9C1E398B829F4304AE6A00A897866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cc:b9:93:7e:6f:9f:38:9a:93:d5:82:b8:c0:
                    52:43:ae:5f:fe:58:ed:60:1c:b0:4f:30:81:a9:77:
                    c3:c3:82:47:ac:0f:a0:5f:f5:b1:df:6b:a3:20:68:
                    9f:d3:b6:8e:77:8c:65:e1:43:a9:bb:dc:d8:4c:85:
                    20:49:41:a0:47:57:9e:3f:b1:1f:b7:24:d2:03:c2:
                    c3:78:39:4c:f4:48:4f:14:8b:fb:2b:df:7e:1e:58:
                    23:27:4a:e7:81:7a:87:4e:d2:6f:af:ed:d1:0a:1f:
                    1a:3e:c9:50:49:02:18:66:c6:72:f7:52:b5:4d:c2:
                    89:f5:78:b5:21:e1:45:bb:a3:9a:06:b6:cd:a8:4e:
                    df:0c:2f:ee:0c:25:55:2b:41:66:5d:79:fd:99:31:
                    cd:68:27:ff:2f:7a:9b:fb:8b:f6:5b:37:3c:9d:3d:
                    ce:00:6e:03:12:82:dc:b2:9f:cd:d1:36:28:e4:17:
                    20:19:45:c9:e5:73:23:01:82:d5:3b:31:60:45:fa:
                    f5:ca:cd:4a:87:2c:29:8c:7d:f9:58:30:d2:d3:21:
                    d1:c5:dd:fd:35:af:fb:15:c6:e0:18:67:39:92:9c:
                    b1:61:1a:97:cb:e7:62:ba:63:fb:53:b6:8f:a6:28:
                    61:57:ed:4f:d4:a0:72:10:73:11:5e:10:52:80:82:
                    c4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:81:D4:B6:8A:A9:C1:E3:98:B8:29:F4:30:4A:E6:A0:0A:89:78:66
            X509v3 Authority Key Identifier:
                keyid:DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31332e302f32342d3234203d3e203431303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:11:d2:49:35:a8:8e:ca:c2:6e:9a:00:47:3a:a3:06:ce:23:
         cc:cc:8a:77:8e:0b:4e:7a:5e:f7:b8:9b:9c:ea:f2:7b:f0:91:
         09:6f:0d:d4:0e:27:19:1a:e8:0a:c2:24:d5:ce:c9:d5:cb:0a:
         37:45:79:d6:05:79:70:d2:44:89:78:f5:d7:66:1b:c1:f6:ea:
         b0:19:cf:e8:d1:56:51:cd:2c:c6:1d:23:1e:c6:d5:b5:f0:ef:
         a2:3e:4d:72:87:b8:08:69:93:2f:44:f2:34:b3:73:52:c2:6f:
         ef:6b:3d:a4:d0:1a:31:89:c4:c9:9c:76:da:2d:d0:eb:38:fe:
         f7:1b:47:36:9c:14:7f:39:92:b5:2a:45:8f:09:76:b6:a2:47:
         1c:42:b1:6b:f8:05:ca:6b:bf:1e:be:19:87:f3:13:29:ea:7e:
         1a:d2:fc:3c:55:0e:2f:32:1c:68:82:c0:c8:da:f8:30:52:dd:
         22:3a:04:5c:5c:5a:26:ad:87:6d:c2:1c:64:67:1a:46:e9:51:
         27:d9:45:6e:43:c5:0b:db:f5:06:b3:36:34:54:6f:60:ff:e9:
         bd:42:df:02:7f:61:fe:b0:64:96:a3:93:41:4a:6c:64:b7:34:
         9d:30:40:50:bf:e8:e0:f4:57:c8:8b:97:5f:79:2b:4d:04:32:
         8f:76:cf:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:31:41 2026 by rpki-client