Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/3133382e3132312e38302e302f32322d3234203d3e203631353030.roa
File:                     3133382e3132312e38302e302f32322d3234203d3e203631353030.roa (raw, json)
Hash identifier:          0uWbCIsLuCjb0t5r3Kt9zxaxpcNy7VsZ8uTKwGnqZrI=
Subject key identifier:   B7:CD:7D:8B:13:01:71:28:71:E1:28:A7:38:AD:E7:5B:9C:4B:6A:61
Certificate issuer:       /CN=A7C599055F36D3C6330474B282FC543C5378F8BA
Certificate serial:       79A7E32226A1AE238D11D7F5981B61C0A12D29D7
Authority key identifier: A7:C5:99:05:5F:36:D3:C6:33:04:74:B2:82:FC:54:3C:53:78:F8:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7C599055F36D3C6330474B282FC543C5378F8BA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/3133382e3132312e38302e302f32322d3234203d3e203631353030.roa
Signing time:             Tue 06 Jan 2026 18:58:18 +0000
ROA not before:           Tue 06 Jan 2026 18:53:18 +0000
ROA not after:            Tue 05 Jan 2027 18:58:18 +0000
asID:                     61500
IP address blocks:        138.121.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/A7C599055F36D3C6330474B282FC543C5378F8BA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/A7C599055F36D3C6330474B282FC543C5378F8BA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7C599055F36D3C6330474B282FC543C5378F8BA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a7:e3:22:26:a1:ae:23:8d:11:d7:f5:98:1b:61:c0:a1:2d:29:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7C599055F36D3C6330474B282FC543C5378F8BA
        Validity
            Not Before: Jan  6 18:53:18 2026 GMT
            Not After : Jan  5 18:58:18 2027 GMT
        Subject: CN=B7CD7D8B1301712871E128A738ADE75B9C4B6A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:60:26:b7:85:88:30:80:ec:fa:7d:c0:e1:
                    7f:b2:c1:3d:bb:ae:be:d5:32:55:a1:40:e0:58:ee:
                    2e:8f:a1:9c:80:cf:83:74:13:07:df:8d:5c:f0:d2:
                    2a:72:15:03:75:5d:f0:c9:8f:d1:57:a5:65:e1:c8:
                    34:0d:9a:d0:2d:8f:a2:6a:9f:6c:41:2b:61:10:79:
                    3b:3e:71:a6:8f:23:08:2f:b9:ea:fd:76:df:11:5b:
                    8c:42:d5:61:6e:9a:a5:12:05:02:8a:6f:e4:46:88:
                    3b:57:e6:a3:fb:3f:07:1a:84:c2:f8:71:26:0e:4a:
                    ed:22:3d:89:d7:34:f2:b0:a0:61:13:d5:a9:24:67:
                    83:61:43:bf:a3:7d:cc:98:ae:1b:99:81:1c:24:eb:
                    f3:7b:32:20:66:16:43:84:09:24:8e:ef:03:33:8f:
                    45:f9:fc:56:cb:7e:06:3f:f3:e2:b1:d9:ef:4b:48:
                    28:41:ab:6b:ff:30:51:5a:e7:8f:3d:61:dc:a0:f2:
                    48:08:0f:f3:a2:61:19:f5:6f:a6:14:f2:33:c3:ef:
                    30:cc:22:23:13:ea:08:38:87:c4:21:fa:14:0b:d8:
                    e9:f4:23:58:ad:23:29:72:c1:b8:d0:96:bd:0c:68:
                    f8:da:6f:fd:20:4b:a9:5f:81:42:bb:f1:4b:6f:1d:
                    6c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CD:7D:8B:13:01:71:28:71:E1:28:A7:38:AD:E7:5B:9C:4B:6A:61
            X509v3 Authority Key Identifier:
                keyid:A7:C5:99:05:5F:36:D3:C6:33:04:74:B2:82:FC:54:3C:53:78:F8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/A7C599055F36D3C6330474B282FC543C5378F8BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7C599055F36D3C6330474B282FC543C5378F8BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/3133382e3132312e38302e302f32322d3234203d3e203631353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:74:ea:2f:d6:d4:b5:16:62:1b:88:5b:71:ea:64:62:2f:08:
         55:e3:89:79:52:3e:de:2b:82:3c:03:f6:63:ac:a1:d2:e0:5b:
         47:05:bb:6a:25:17:fa:0f:17:c1:54:c6:91:1f:c5:cd:92:85:
         95:1f:d4:52:e4:9a:16:bc:29:bd:59:d9:bd:cf:3f:d0:b3:db:
         aa:5a:3c:c0:ae:d2:4c:88:df:53:e9:b1:f0:42:51:78:e2:c2:
         ae:53:75:16:74:77:e1:f0:42:62:dc:8d:b0:2b:8a:e6:67:bd:
         16:af:e3:2f:bd:f0:a0:a4:44:18:bd:14:98:22:f8:8b:03:23:
         d4:85:50:e6:22:97:eb:31:3a:ac:77:ac:32:fe:67:c8:89:16:
         10:c0:d9:58:36:80:05:d2:dd:62:23:ea:a2:d2:dc:ef:b7:7f:
         3a:fc:7e:2c:f1:10:3b:78:95:0a:61:67:78:d5:e3:46:bc:b6:
         28:28:7d:37:9f:93:15:d8:a5:c3:42:2c:e0:d5:b8:29:c4:34:
         2e:0c:ba:8d:78:d6:3f:73:b7:96:f0:17:fc:75:e7:67:d4:ef:
         1b:2a:b1:08:fc:06:9e:a5:18:21:1b:e4:52:bd:cc:d3:44:c7:
         5f:38:5d:b2:82:be:12:8d:e7:e6:97:01:45:01:29:3d:95:81:
         09:7c:f1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:01:28 2026 by rpki-client