Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/F041E97FC25328E301432D3B86BA161B44AB94DE18C328B3D81C7CD2B1940743/0/3133382e3138352e302e302f32322d3234203d3e203238343034.roa
File:                     3133382e3138352e302e302f32322d3234203d3e203238343034.roa (raw, json)
Hash identifier:          05QVWhP7sI6HDT35qCW12NEDCaBmQ9TQC5dnbGZz5y8=
Subject key identifier:   A5:9F:3C:CB:AE:55:E4:4A:05:B4:4D:0A:B0:E6:58:B3:E1:D0:91:0B
Certificate issuer:       /CN=C18DA1C41E1FC424F0B02EF6A8AFA953394262DC
Certificate serial:       76727E834D77C203251222EF59ED627D336BCC8E
Authority key identifier: C1:8D:A1:C4:1E:1F:C4:24:F0:B0:2E:F6:A8:AF:A9:53:39:42:62:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C18DA1C41E1FC424F0B02EF6A8AFA953394262DC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F041E97FC25328E301432D3B86BA161B44AB94DE18C328B3D81C7CD2B1940743/0/3133382e3138352e302e302f32322d3234203d3e203238343034.roa
Signing time:             Tue 29 Sep 2026 07:10:01 +0000
ROA not before:           Tue 29 Sep 2026 07:05:01 +0000
ROA not after:            Tue 28 Sep 2027 07:10:01 +0000
asID:                     28404
IP address blocks:        138.185.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F041E97FC25328E301432D3B86BA161B44AB94DE18C328B3D81C7CD2B1940743/0/C18DA1C41E1FC424F0B02EF6A8AFA953394262DC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F041E97FC25328E301432D3B86BA161B44AB94DE18C328B3D81C7CD2B1940743/0/C18DA1C41E1FC424F0B02EF6A8AFA953394262DC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C18DA1C41E1FC424F0B02EF6A8AFA953394262DC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 09:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:72:7e:83:4d:77:c2:03:25:12:22:ef:59:ed:62:7d:33:6b:cc:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C18DA1C41E1FC424F0B02EF6A8AFA953394262DC
        Validity
            Not Before: Sep 29 07:05:01 2026 GMT
            Not After : Sep 28 07:10:01 2027 GMT
        Subject: CN=A59F3CCBAE55E44A05B44D0AB0E658B3E1D0910B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ab:8f:e0:67:6a:4a:6c:5d:27:19:1b:3a:fc:
                    66:63:14:ec:58:6c:f3:3f:37:9f:a4:0d:ef:f4:7b:
                    34:2c:08:22:e9:2f:74:8b:2f:53:e2:56:be:ae:9c:
                    d1:4f:e9:d2:39:33:fa:03:6f:43:e5:24:8c:aa:9a:
                    71:3f:dc:4c:fd:6d:4e:7a:dc:cc:b4:1a:ef:73:93:
                    a2:ba:1f:f1:a6:5f:74:9f:cd:80:6f:76:25:b1:d9:
                    89:7b:4e:d1:af:ca:1f:51:f8:3a:ee:ca:99:17:ec:
                    ca:34:79:67:17:3d:28:55:21:e8:5f:ac:f4:8b:4c:
                    eb:db:e4:13:2a:30:e3:d5:fd:c4:2e:e4:af:33:b0:
                    41:71:23:fe:f6:c7:4a:c6:46:c4:91:94:b8:d8:a1:
                    f2:d3:14:11:41:52:bd:be:6c:62:38:aa:60:dd:03:
                    63:36:65:9e:88:4f:14:4f:dd:aa:fb:bf:fb:7a:b2:
                    52:b4:af:61:b0:3f:2a:44:25:15:9f:e0:0a:6e:66:
                    0f:8a:0e:21:17:e5:68:95:b7:ef:1f:cb:82:01:5b:
                    ab:04:dc:f1:70:1f:27:44:fa:9d:45:25:50:08:cd:
                    fd:11:ad:41:33:c9:11:a4:ba:b7:be:28:61:98:0c:
                    55:d5:d4:16:d5:54:f8:f6:4d:93:54:69:8f:72:b2:
                    dc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9F:3C:CB:AE:55:E4:4A:05:B4:4D:0A:B0:E6:58:B3:E1:D0:91:0B
            X509v3 Authority Key Identifier:
                keyid:C1:8D:A1:C4:1E:1F:C4:24:F0:B0:2E:F6:A8:AF:A9:53:39:42:62:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F041E97FC25328E301432D3B86BA161B44AB94DE18C328B3D81C7CD2B1940743/0/C18DA1C41E1FC424F0B02EF6A8AFA953394262DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C18DA1C41E1FC424F0B02EF6A8AFA953394262DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F041E97FC25328E301432D3B86BA161B44AB94DE18C328B3D81C7CD2B1940743/0/3133382e3138352e302e302f32322d3234203d3e203238343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:b9:63:69:d2:b1:fa:ec:47:d3:d9:d9:29:ea:59:43:c4:e0:
         be:5e:32:da:51:04:44:de:c2:fe:44:d0:e0:dc:61:3b:b0:bb:
         c1:f8:c3:02:2e:51:04:b2:3a:cd:61:f9:f0:c7:84:ba:26:cc:
         c6:b8:51:73:98:c6:c7:68:f0:a4:2c:1e:b4:33:1a:d9:3e:03:
         2e:26:0b:ec:87:25:e5:ee:59:e7:83:88:7c:d4:4f:76:f9:7e:
         f3:b8:c3:08:03:94:a8:a2:15:3b:dd:08:0c:7f:40:4b:2d:26:
         6e:04:14:1c:23:f6:66:3d:6e:db:b7:a7:83:d9:c2:da:87:30:
         56:d8:57:c5:40:57:a1:da:3d:c4:c3:bd:f7:68:ff:5f:db:08:
         26:96:46:92:22:56:6d:4a:99:45:ee:59:e9:54:79:ce:43:d7:
         5d:fe:8b:3d:29:79:c5:3b:06:88:06:0a:a7:e8:c1:20:1a:fe:
         fa:65:5e:32:05:08:55:87:e5:c4:90:1f:55:45:24:29:2c:16:
         00:5a:2a:2b:b2:39:53:ff:60:ba:0d:dd:41:3b:ad:c9:51:a2:
         9a:9a:cd:30:fb:52:2e:ad:22:eb:3f:52:30:1b:ca:4f:32:3d:
         b7:56:cb:61:d7:2a:10:8a:20:04:0c:cc:18:60:f1:3b:f2:62:
         01:f0:72:c2
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUdnJ+g013wgMlEiLvWe1ifTNrzI4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzE4REExQzQxRTFGQzQyNEYwQjAyRUY2QThBRkE5NTMz
OTQyNjJEQzAeFw0yNjA5MjkwNzA1MDFaFw0yNzA5MjgwNzEwMDFaMDMxMTAvBgNV
BAMTKEE1OUYzQ0NCQUU1NUU0NEEwNUI0NEQwQUIwRTY1OEIzRTFEMDkxMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYq4/gZ2pKbF0nGRs6/GZjFOxY
bPM/N5+kDe/0ezQsCCLpL3SLL1PiVr6unNFP6dI5M/oDb0PlJIyqmnE/3Ez9bU56
3My0Gu9zk6K6H/GmX3SfzYBvdiWx2Yl7TtGvyh9R+DruypkX7Mo0eWcXPShVIehf
rPSLTOvb5BMqMOPV/cQu5K8zsEFxI/72x0rGRsSRlLjYofLTFBFBUr2+bGI4qmDd
A2M2ZZ6ITxRP3ar7v/t6slK0r2GwPypEJRWf4ApuZg+KDiEX5WiVt+8fy4IBW6sE
3PFwHydE+p1FJVAIzf0RrUEzyRGkure+KGGYDFXV1BbVVPj2TZNUaY9ystz/AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUpZ88y65V5EoFtE0KsOZYs+HQkQswHwYDVR0j
BBgwFoAUwY2hxB4fxCTwsC72qK+pUzlCYtwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDQxRTk3RkMyNTMyOEUzMDE0MzJEM0I4NkJBMTYxQjQ0
QUI5NERFMThDMzI4QjNEODFDN0NEMkIxOTQwNzQzLzAvQzE4REExQzQxRTFGQzQy
NEYwQjAyRUY2QThBRkE5NTMzOTQyNjJEQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMThEQTFDNDFFMUZDNDI0RjBC
MDJFRjZBOEFGQTk1MzM5NDI2MkRDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA0MUU5N0ZDMjUzMjhFMzAxNDMyRDNCODZCQTE2MUI0NEFCOTRERTE4
QzMyOEIzRDgxQzdDRDJCMTk0MDc0My8wLzMxMzMzODJlMzEzODM1MmUzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzgzNDMwMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKKuQAwDQYJ
KoZIhvcNAQELBQADggEBAAK5Y2nSsfrsR9PZ2SnqWUPE4L5eMtpRBETewv5E0ODc
YTuwu8H4wwIuUQSyOs1h+fDHhLomzMa4UXOYxsdo8KQsHrQzGtk+Ay4mC+yHJeXu
WeeDiHzUT3b5fvO4wwgDlKiiFTvdCAx/QEstJm4EFBwj9mY9btu3p4PZwtqHMFbY
V8VAV6HaPcTDvfdo/1/bCCaWRpIiVm1KmUXuWelUec5D113+iz0pecU7BogGCqfo
wSAa/vplXjIFCFWH5cSQH1VFJCksFgBaKiuyOVP/YLoN3UE7rclRopqazTD7Ui6t
Ius/UjAbyk8yPbdWy2HXKhCKIAQMzBhg8TvyYgHwcsI=
-----END CERTIFICATE-----
Generated at Wed Oct 14 04:53:12 2026 by rpki-client