Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/3133382e3132322e3139322e302f32322d3234203d3e203532343835.roa
File:                     3133382e3132322e3139322e302f32322d3234203d3e203532343835.roa (raw, json)
Hash identifier:          UdZ1n24kQ9R97O610OyAGd6o0fLMrWOkyEKt01UijrA=
Subject key identifier:   B0:7F:1B:A0:D1:7D:8C:D6:F7:BF:9B:AF:03:38:70:DA:EE:A3:8A:31
Certificate issuer:       /CN=09E1B154B55FB4F84B47F72DFDDE8D9664B9D212
Certificate serial:       30AF83240835D35E9286182B5DC0F4406475FD34
Authority key identifier: 09:E1:B1:54:B5:5F:B4:F8:4B:47:F7:2D:FD:DE:8D:96:64:B9:D2:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/3133382e3132322e3139322e302f32322d3234203d3e203532343835.roa
Signing time:             Sat 24 Oct 2026 12:45:00 +0000
ROA not before:           Sat 24 Oct 2026 12:40:00 +0000
ROA not after:            Sat 23 Oct 2027 12:45:00 +0000
asID:                     52485
IP address blocks:        138.122.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.crl
                          rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 18:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:af:83:24:08:35:d3:5e:92:86:18:2b:5d:c0:f4:40:64:75:fd:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09E1B154B55FB4F84B47F72DFDDE8D9664B9D212
        Validity
            Not Before: Oct 24 12:40:00 2026 GMT
            Not After : Oct 23 12:45:00 2027 GMT
        Subject: CN=B07F1BA0D17D8CD6F7BF9BAF033870DAEEA38A31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:25:c8:78:54:9e:37:da:9d:76:5a:c9:75:4a:
                    2d:f1:77:d4:d4:6a:a3:db:49:06:54:47:77:34:73:
                    71:f2:53:b4:aa:3c:46:70:78:48:95:76:5e:0c:51:
                    9a:12:e7:31:75:65:f7:57:c1:fb:24:17:fa:6f:17:
                    48:5e:a6:1e:b1:52:f3:b3:08:87:f4:37:11:45:8e:
                    00:6f:50:1d:be:a2:0d:fb:17:2e:02:29:9a:ba:ba:
                    e9:46:e8:fd:39:51:d4:11:00:05:f1:36:b5:a1:da:
                    7f:83:35:0e:8b:88:71:13:a9:0a:59:5d:05:06:f0:
                    e4:ac:7a:32:ca:e2:d0:0d:8b:c2:c4:36:77:a7:58:
                    59:c1:b1:1d:e9:28:4a:fb:2a:e0:3d:a4:c8:94:ec:
                    cc:90:a3:47:85:d7:e1:dd:33:99:6b:7b:7e:45:60:
                    db:73:b1:4f:98:50:45:ff:dc:02:a6:cb:6c:86:47:
                    9c:31:7b:d2:7d:b1:14:35:33:79:e5:84:88:e8:76:
                    38:03:a8:03:7e:9f:2c:eb:c9:54:38:f7:53:4c:eb:
                    66:36:19:84:2c:a2:40:42:4c:cd:19:a1:ce:b9:c0:
                    35:71:f7:db:aa:49:a3:e2:3d:a1:8f:eb:10:82:5b:
                    4a:19:dc:6b:46:0e:b6:b8:03:86:28:a1:dd:0b:33:
                    3a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7F:1B:A0:D1:7D:8C:D6:F7:BF:9B:AF:03:38:70:DA:EE:A3:8A:31
            X509v3 Authority Key Identifier:
                keyid:09:E1:B1:54:B5:5F:B4:F8:4B:47:F7:2D:FD:DE:8D:96:64:B9:D2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09E1B154B55FB4F84B47F72DFDDE8D9664B9D212.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12C706D8E5F0C1624920A74E6287D12F18BC62802FC601B563818C257509F4B8/0/3133382e3132322e3139322e302f32322d3234203d3e203532343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:8d:fb:05:44:24:e2:41:50:0d:ba:ef:3b:13:7c:99:7b:65:
         f6:41:6f:a7:e7:1d:b1:0a:ff:16:de:35:3f:98:a8:0f:1f:37:
         76:5a:86:07:b8:78:17:62:de:0b:7e:a9:0b:95:d2:62:39:18:
         ad:8c:55:19:06:fe:04:b9:16:66:0e:21:28:6a:6c:a9:56:ec:
         7d:c4:4a:92:80:09:84:c5:c4:35:fd:3e:10:00:f9:48:bb:41:
         0f:78:f0:3c:e8:e2:53:09:00:25:0e:d3:4a:72:20:53:ea:56:
         ac:36:2e:df:df:70:4c:c1:ee:4e:f2:40:8b:9d:b1:5c:b2:f1:
         0f:95:20:fe:f4:d6:09:04:1e:80:06:c4:17:8e:df:2a:26:4e:
         4f:78:16:db:6e:46:74:31:ba:75:98:e6:6c:9e:42:b9:77:c1:
         c8:5f:96:dc:2a:b5:c5:0f:c4:fb:46:10:57:59:4a:49:f6:b7:
         4e:82:2b:a8:c6:c1:b2:c7:e1:10:a1:6c:95:7c:37:fe:24:9a:
         16:08:d2:d0:e3:90:d0:74:a5:f1:e3:07:75:ef:4f:29:f3:d4:
         ec:ac:af:5c:4b:76:1c:05:97:e6:9d:73:e1:da:f1:d6:33:1a:
         8e:19:f5:d8:09:3e:10:32:0c:45:de:e0:c4:df:5a:0a:92:2a:
         e1:61:52:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 08:26:57 2026 by rpki-client