Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/3133382e3132312e38332e302f32342d3234203d3e20323730303534.roa
File:                     3133382e3132312e38332e302f32342d3234203d3e20323730303534.roa (raw, json)
Hash identifier:          JrTu1uDMBTuvqHqm17ye80MCKu2a9Jb+L+ZXqEE5ERE=
Subject key identifier:   FA:68:DE:E6:D2:92:E2:6E:3E:8D:EA:E2:5E:28:80:6E:50:E4:3F:1C
Certificate issuer:       /CN=A7C599055F36D3C6330474B282FC543C5378F8BA
Certificate serial:       30D8C7D9E7FF18D14D54A4254A6CD4EAA2DCCE1F
Authority key identifier: A7:C5:99:05:5F:36:D3:C6:33:04:74:B2:82:FC:54:3C:53:78:F8:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7C599055F36D3C6330474B282FC543C5378F8BA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/3133382e3132312e38332e302f32342d3234203d3e20323730303534.roa
Signing time:             Wed 21 Jan 2026 00:10:00 +0000
ROA not before:           Wed 21 Jan 2026 00:05:00 +0000
ROA not after:            Wed 20 Jan 2027 00:10:00 +0000
asID:                     270054
IP address blocks:        138.121.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/A7C599055F36D3C6330474B282FC543C5378F8BA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/A7C599055F36D3C6330474B282FC543C5378F8BA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7C599055F36D3C6330474B282FC543C5378F8BA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Feb 2026 14:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d8:c7:d9:e7:ff:18:d1:4d:54:a4:25:4a:6c:d4:ea:a2:dc:ce:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7C599055F36D3C6330474B282FC543C5378F8BA
        Validity
            Not Before: Jan 21 00:05:00 2026 GMT
            Not After : Jan 20 00:10:00 2027 GMT
        Subject: CN=FA68DEE6D292E26E3E8DEAE25E28806E50E43F1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:1c:b9:ca:fd:33:50:5f:81:ee:89:69:7e:
                    5c:71:45:87:42:69:3a:da:a0:9b:50:d8:81:89:4c:
                    64:18:ea:bf:4a:16:4c:d1:ab:68:95:a6:94:d5:c3:
                    4f:5a:91:7e:9e:eb:28:37:89:ff:07:b2:ca:95:6a:
                    11:aa:6b:b9:28:21:1b:2f:59:2d:20:08:44:9a:fb:
                    bb:3f:bb:cf:65:ce:f7:80:fb:97:28:ca:43:40:d0:
                    3a:92:53:44:34:fe:5b:ec:75:3c:85:8c:bd:f3:b9:
                    1e:f5:ec:4f:74:b5:60:16:82:c5:e2:a8:34:bc:03:
                    4a:49:31:b1:f0:4b:ba:4f:60:11:e0:6f:3a:fa:1d:
                    00:6c:b4:3b:79:9a:93:a0:75:3d:53:68:a4:a1:59:
                    d9:17:b1:a4:60:d8:0f:e4:4b:a9:de:9e:fa:77:1c:
                    d2:28:21:c9:0c:c8:b6:73:87:9b:2b:e5:d1:4e:5c:
                    a5:b0:28:15:b0:19:02:93:42:d2:f1:fc:0b:f5:8d:
                    49:77:dc:a3:d6:66:75:bd:0a:6b:54:79:43:1c:ce:
                    59:5d:4f:79:10:af:3b:c6:e8:75:80:43:ed:ae:c9:
                    19:13:95:7c:a4:6b:23:19:59:57:22:91:c5:71:3b:
                    ca:35:73:55:d4:a8:50:3b:05:83:40:e2:1a:be:81:
                    0b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:68:DE:E6:D2:92:E2:6E:3E:8D:EA:E2:5E:28:80:6E:50:E4:3F:1C
            X509v3 Authority Key Identifier:
                keyid:A7:C5:99:05:5F:36:D3:C6:33:04:74:B2:82:FC:54:3C:53:78:F8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/A7C599055F36D3C6330474B282FC543C5378F8BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7C599055F36D3C6330474B282FC543C5378F8BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/3133382e3132312e38332e302f32342d3234203d3e20323730303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:1f:85:6d:5d:a9:d3:95:98:f6:10:69:7a:5a:31:a6:75:70:
         46:e3:47:6b:1d:52:50:57:30:26:e0:a7:3d:b5:f5:7a:9a:f5:
         af:83:09:67:3c:a8:1d:2c:df:34:c5:1d:36:6d:ff:73:b7:ab:
         02:d8:dc:6c:4c:67:5f:6a:fc:90:48:ba:ee:75:bc:e5:87:ea:
         c8:d2:b5:1c:a9:14:f6:9f:b6:d1:62:16:db:72:93:a8:86:8f:
         0f:4f:86:51:8d:d4:bb:3b:62:d4:d5:73:6a:87:0b:26:23:ec:
         5f:4d:50:34:ca:4c:17:c4:8b:d0:80:77:7b:d8:53:03:40:bb:
         d3:c2:8f:22:c6:1b:43:94:8d:3b:42:aa:1f:10:aa:c2:26:ef:
         23:b5:9c:ca:a4:b3:15:8a:30:ac:3a:35:4d:2b:a7:a2:01:67:
         b4:a9:ef:5e:82:e5:02:38:49:6f:dc:d0:db:e9:a8:92:2a:4c:
         56:ea:1d:a8:12:96:5a:dc:6a:20:f1:06:cd:95:1d:41:e9:79:
         4a:87:7b:70:96:7c:af:6a:c5:98:ba:64:54:46:f2:67:5c:4a:
         79:cd:8f:3c:91:74:e1:14:c8:c9:9c:b8:19:7d:91:c6:2f:84:
         cb:e1:5b:bb:e7:7a:41:05:45:f1:ef:59:4d:47:8c:5a:60:7b:
         8b:ee:7a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 02:59:06 2026 by rpki-client