Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31342e302f32342d3234203d3e203431303935.roa
File:                     3133382e3230342e31342e302f32342d3234203d3e203431303935.roa (raw, json)
Hash identifier:          IRp0IHFzKYaV4yOxt7n3om/oEXIWMjmnHYXYdYi0RE0=
Subject key identifier:   2C:3B:95:0B:35:53:B5:79:6E:96:A3:09:FB:90:A1:27:E8:47:5F:09
Certificate issuer:       /CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
Certificate serial:       1152AB368683F8D424380B5FD5A402C9B9052273
Authority key identifier: DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31342e302f32342d3234203d3e203431303935.roa
Signing time:             Thu 12 Feb 2026 15:30:11 +0000
ROA not before:           Thu 12 Feb 2026 15:25:11 +0000
ROA not after:            Thu 11 Feb 2027 15:30:11 +0000
asID:                     41095
IP address blocks:        138.204.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 02:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:52:ab:36:86:83:f8:d4:24:38:0b:5f:d5:a4:02:c9:b9:05:22:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
        Validity
            Not Before: Feb 12 15:25:11 2026 GMT
            Not After : Feb 11 15:30:11 2027 GMT
        Subject: CN=2C3B950B3553B5796E96A309FB90A127E8475F09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:64:46:fe:14:8c:32:32:fe:6e:71:33:9c:b4:
                    2d:02:c4:bb:e0:95:49:1a:ca:f8:02:b9:0e:60:71:
                    81:49:fe:6d:06:bd:79:73:8e:54:f7:48:66:08:68:
                    5f:fe:a6:78:bf:8c:2d:7b:17:9e:a5:26:06:79:fc:
                    99:34:09:b3:a4:35:49:a3:70:cf:15:0c:48:92:da:
                    4a:44:d4:a1:4b:38:6c:19:dd:a7:6f:4a:b2:24:2d:
                    8a:6b:fe:b5:e9:15:11:72:ef:4e:cc:48:61:d9:81:
                    fd:93:63:48:c7:53:d9:03:c7:71:cd:fc:c3:3c:49:
                    d9:1b:15:a7:9b:9b:a1:7d:a5:22:d2:17:37:1e:98:
                    85:44:0a:68:f9:44:bb:9d:19:fa:31:34:65:78:8e:
                    d5:64:03:6a:10:c8:c5:cd:ef:4a:fd:e1:ca:32:fe:
                    87:b7:3b:12:f5:7d:92:11:cd:9d:36:1c:8f:ba:df:
                    a5:3d:87:39:aa:20:f1:ae:3e:b4:28:2a:8c:d4:4a:
                    46:42:fe:44:b5:c2:34:65:42:07:d2:69:d9:63:b2:
                    f4:ae:f7:f3:ef:42:c5:c6:fa:42:ff:b6:1b:66:17:
                    04:b8:dc:ce:61:e4:93:1f:05:4e:cf:21:1b:f7:93:
                    e7:a5:91:c6:33:4d:93:7b:bc:70:bd:ed:c8:f0:9b:
                    09:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3B:95:0B:35:53:B5:79:6E:96:A3:09:FB:90:A1:27:E8:47:5F:09
            X509v3 Authority Key Identifier:
                keyid:DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31342e302f32342d3234203d3e203431303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:8e:14:e4:fe:09:ba:a7:b9:04:5b:54:cb:03:40:38:b6:91:
         9c:be:5e:92:33:bc:6e:28:23:24:4b:f5:b5:fb:39:7e:bc:1e:
         cb:86:6f:9f:36:95:cd:a3:bb:b2:a0:fa:30:f4:a1:a3:1d:15:
         a4:cf:8e:20:7b:37:2d:21:98:a4:8c:7a:b8:af:86:48:3c:4c:
         50:7a:a1:5d:44:3f:d9:93:53:04:1d:58:21:dc:8a:d0:6f:03:
         23:40:11:5d:b5:f9:70:9c:9a:fc:d8:73:ca:84:76:3a:6b:45:
         b4:de:48:8c:a2:38:8b:c9:65:39:e8:12:40:59:71:69:84:92:
         6f:04:36:3f:d6:48:09:96:02:c1:7a:60:2b:29:38:9c:2b:c3:
         a7:f0:e1:4f:ca:f1:a2:ec:6b:da:28:79:c7:44:40:11:30:4d:
         c0:49:44:ab:51:ef:80:1e:13:01:8f:00:cb:ba:c3:90:c3:32:
         f3:53:bd:b3:a1:3b:e6:40:c6:0b:fa:ef:f5:20:d6:66:59:f3:
         0f:99:01:12:a8:61:f3:04:c1:b8:d7:b0:5e:cc:6e:84:d5:a0:
         4a:46:d9:b4:cd:c7:34:c8:78:e7:3e:62:31:b5:31:a8:ca:36:
         db:60:08:86:f6:da:95:11:76:c9:a1:7f:5f:30:e8:97:dc:fb:
         8b:64:bb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:58:15 2026 by rpki-client