Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31352e302f32342d3234203d3e20323635373938.roa
File:                     3133382e3131372e31352e302f32342d3234203d3e20323635373938.roa (raw, json)
Hash identifier:          sdOOoOCDZ25XmTFehYpaDM7uWLXm6aHK7ZypqMRTs6c=
Subject key identifier:   7D:06:EE:98:6B:51:A7:46:66:00:1B:91:03:2B:7C:36:E0:F4:0C:F3
Certificate issuer:       /CN=D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03
Certificate serial:       4EA6169641CFC4238A2A224DDB64DADE507938D1
Authority key identifier: D2:E6:A8:AF:32:26:50:1D:8C:0A:E8:9B:31:A7:8E:36:9B:CD:BC:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31352e302f32342d3234203d3e20323635373938.roa
Signing time:             Tue 18 Aug 2026 18:50:00 +0000
ROA not before:           Tue 18 Aug 2026 18:45:00 +0000
ROA not after:            Tue 17 Aug 2027 18:50:00 +0000
asID:                     265798
IP address blocks:        138.117.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Sep 2026 17:25:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a6:16:96:41:cf:c4:23:8a:2a:22:4d:db:64:da:de:50:79:38:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03
        Validity
            Not Before: Aug 18 18:45:00 2026 GMT
            Not After : Aug 17 18:50:00 2027 GMT
        Subject: CN=7D06EE986B51A74666001B91032B7C36E0F40CF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:16:96:54:c0:c1:0f:b2:0b:9e:73:9d:3c:ef:
                    1e:8f:d0:cc:42:62:06:52:f7:aa:6b:b5:cf:e0:fa:
                    46:1c:57:59:5e:c5:68:bb:d2:42:c3:c5:9a:07:21:
                    19:8b:b0:79:a9:1a:b0:2e:3b:d6:93:52:50:d7:7e:
                    29:f9:9b:cd:bc:7f:3c:19:93:fd:0e:66:fc:19:12:
                    02:cf:08:74:b9:41:2c:10:a8:d2:c5:17:b2:0c:35:
                    78:5e:46:3c:27:a4:a3:f4:65:f5:fe:33:2e:cd:c8:
                    d5:ef:87:41:b5:f6:d8:22:fd:fe:e8:c4:f4:a0:b9:
                    5b:31:d3:34:85:8e:e4:36:28:91:f1:7a:68:e5:2b:
                    ba:b0:62:5e:ad:fb:8b:7a:55:14:19:ce:5d:1d:7f:
                    06:be:da:b3:6d:83:c5:74:4d:95:fe:36:79:60:27:
                    f5:0e:99:87:d9:1c:09:1f:aa:96:d4:14:ae:7f:21:
                    6f:bd:f5:a8:2b:8d:92:05:06:04:e5:36:9c:74:8c:
                    a6:d0:d4:89:8d:77:e6:7f:9f:f9:05:72:bf:f2:44:
                    97:95:5f:1e:df:f4:2b:c9:97:7f:4c:d9:b0:08:53:
                    ca:c5:36:c6:de:e0:bf:bf:2b:6f:87:4f:22:73:0d:
                    21:13:30:fe:31:ff:fe:b6:9d:b5:84:f9:af:c5:1b:
                    4a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:06:EE:98:6B:51:A7:46:66:00:1B:91:03:2B:7C:36:E0:F4:0C:F3
            X509v3 Authority Key Identifier:
                keyid:D2:E6:A8:AF:32:26:50:1D:8C:0A:E8:9B:31:A7:8E:36:9B:CD:BC:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31352e302f32342d3234203d3e20323635373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:47:22:b5:6c:fd:83:16:a7:86:4d:c2:56:6e:9d:94:4a:10:
         30:24:ef:db:7d:96:85:59:c0:8f:43:d0:b5:6f:57:4d:f2:32:
         92:03:ff:88:a1:62:c4:92:81:03:f6:3a:07:65:fd:15:3c:c9:
         82:e7:56:a7:f8:da:be:a4:7e:bf:8c:00:48:e4:85:56:d5:b2:
         e4:e9:72:26:6d:0b:10:f9:be:27:f5:ed:76:83:9b:f7:25:91:
         42:5b:14:a2:5d:0a:13:97:4e:1c:bf:90:da:20:ce:8a:dd:e4:
         db:cc:fc:2f:bd:ba:37:89:69:bd:87:63:bc:5e:aa:2b:12:d3:
         49:85:29:0e:62:81:8d:f8:64:a3:e7:3d:ff:68:07:9c:24:2f:
         7e:59:23:f5:8f:2e:75:d1:b1:68:c3:1f:13:8a:27:d9:86:54:
         8f:75:64:81:88:7c:35:c1:56:4d:19:58:b7:bf:09:f4:a8:f7:
         27:9e:01:48:18:1a:55:18:81:3c:39:d4:1c:a8:54:80:18:c2:
         9d:d6:c6:ca:71:c2:b8:ac:12:6f:80:17:28:d1:9c:e6:12:83:
         71:b3:23:a0:67:8a:35:d2:06:ce:fd:06:dc:c4:33:28:11:76:
         78:bb:e7:b1:2d:38:63:d1:8f:16:b8:42:96:42:37:bc:b8:b9:
         35:65:ef:22
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUTqYWlkHPxCOKKiJN22Ta3lB5ONEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJFNkE4QUYzMjI2NTAxRDhDMEFFODlCMzFBNzhFMzY5
QkNEQkMwMzAeFw0yNjA4MTgxODQ1MDBaFw0yNzA4MTcxODUwMDBaMDMxMTAvBgNV
BAMTKDdEMDZFRTk4NkI1MUE3NDY2NjAwMUI5MTAzMkI3QzM2RTBGNDBDRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRFpZUwMEPsguec5087x6P0MxC
YgZS96prtc/g+kYcV1lexWi70kLDxZoHIRmLsHmpGrAuO9aTUlDXfin5m828fzwZ
k/0OZvwZEgLPCHS5QSwQqNLFF7IMNXheRjwnpKP0ZfX+My7NyNXvh0G19tgi/f7o
xPSguVsx0zSFjuQ2KJHxemjlK7qwYl6t+4t6VRQZzl0dfwa+2rNtg8V0TZX+Nnlg
J/UOmYfZHAkfqpbUFK5/IW+99agrjZIFBgTlNpx0jKbQ1ImNd+Z/n/kFcr/yRJeV
Xx7f9CvJl39M2bAIU8rFNsbe4L+/K2+HTyJzDSETMP4x//62nbWE+a/FG0onAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUfQbumGtRp0ZmABuRAyt8NuD0DPMwHwYDVR0j
BBgwFoAU0uaorzImUB2MCuibMaeONpvNvAMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QTlCRThCQUMwREJGMDRBMDRFNjU3RjE3NzIyMURFNUVG
QUVEMTQ3ODAzNEJERTYyNUZENDMxNTBCQ0ZCRjAyLzAvRDJFNkE4QUYzMjI2NTAx
RDhDMEFFODlCMzFBNzhFMzY5QkNEQkMwMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMkU2QThBRjMyMjY1MDFEOEMw
QUU4OUIzMUE3OEUzNjlCQ0RCQzAzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUE5QkU4QkFDMERCRjA0QTA0RTY1N0YxNzcyMjFERTVFRkFFRDE0Nzgw
MzRCREU2MjVGRDQzMTUwQkNGQkYwMi8wLzMxMzMzODJlMzEzMTM3MmUzMTM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzczOTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinUP
MA0GCSqGSIb3DQEBCwUAA4IBAQANRyK1bP2DFqeGTcJWbp2UShAwJO/bfZaFWcCP
Q9C1b1dN8jKSA/+IoWLEkoED9joHZf0VPMmC51an+Nq+pH6/jABI5IVW1bLk6XIm
bQsQ+b4n9e12g5v3JZFCWxSiXQoTl04cv5DaIM6K3eTbzPwvvbo3iWm9h2O8Xqor
EtNJhSkOYoGN+GSj5z3/aAecJC9+WSP1jy510bFowx8TiifZhlSPdWSBiHw1wVZN
GVi3vwn0qPcnngFIGBpVGIE8OdQcqFSAGMKd1sbKccK4rBJvgBco0ZzmEoNxsyOg
Z4o10gbO/QbcxDMoEXZ4u+exLThj0Y8WuEKWQje8uLk1Ze8i
-----END CERTIFICATE-----
Generated at Sat Sep 5 16:10:56 2026 by rpki-client