Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/3133382e3132322e3232342e302f32322d3234203d3e203134313738.roa
File:                     3133382e3132322e3232342e302f32322d3234203d3e203134313738.roa (raw, json)
Hash identifier:          u91UmouCcVxJUL/y6JljXyG3FeDzdVKIGRByGHMaL2g=
Subject key identifier:   58:8F:47:51:1F:7D:CF:A6:8F:03:E2:CA:BD:3A:88:FF:9F:71:17:04
Certificate issuer:       /CN=7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD
Certificate serial:       476EDE4FB0719ED1D90E313D337CD053A39D2839
Authority key identifier: 7B:51:6B:C5:2F:DB:EA:D0:CF:80:51:6E:17:94:A0:1B:EF:D2:3D:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/3133382e3132322e3232342e302f32322d3234203d3e203134313738.roa
Signing time:             Thu 10 Sep 2026 07:20:00 +0000
ROA not before:           Thu 10 Sep 2026 07:15:00 +0000
ROA not after:            Thu 09 Sep 2027 07:20:00 +0000
asID:                     14178
IP address blocks:        138.122.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 08:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6e:de:4f:b0:71:9e:d1:d9:0e:31:3d:33:7c:d0:53:a3:9d:28:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD
        Validity
            Not Before: Sep 10 07:15:00 2026 GMT
            Not After : Sep  9 07:20:00 2027 GMT
        Subject: CN=588F47511F7DCFA68F03E2CABD3A88FF9F711704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:32:8d:fd:d1:a0:0f:dc:99:21:d9:e4:e9:71:
                    c6:a7:c5:5c:6e:1e:61:d9:8e:6d:82:12:e3:e1:df:
                    dc:7d:85:d5:41:f0:10:15:9e:72:a0:f2:8a:e5:23:
                    8d:90:d7:df:06:40:f8:80:7e:1b:9e:d1:d0:06:c5:
                    87:9f:cf:27:4d:6b:93:f9:41:d2:4b:2f:59:1e:2e:
                    86:70:95:b3:1a:17:e0:4b:1d:84:a6:1f:2b:0a:0a:
                    1d:53:f0:89:f5:36:2b:38:67:4d:05:e4:7d:5c:3a:
                    d3:65:ea:7e:30:34:6c:04:86:f7:bc:5a:fd:b8:ae:
                    1d:fb:27:91:ce:30:43:2b:28:6d:b6:35:6f:d5:8a:
                    e3:f7:66:d4:ae:e3:c8:d8:d4:21:63:0b:f5:2e:5c:
                    5e:3f:7d:91:99:1d:ee:d0:dc:7a:94:6c:a2:fd:80:
                    d3:e0:78:4f:95:d2:90:87:a2:2e:6c:8f:47:f1:3e:
                    03:a4:1d:c4:b4:e1:66:66:8c:65:43:e1:2c:32:ad:
                    49:93:85:0a:6d:85:90:90:62:6c:9c:50:44:34:a2:
                    f2:a9:3b:fb:6c:f3:9a:5a:86:ae:57:37:f2:0a:7c:
                    cb:00:7a:74:12:16:ec:04:22:bd:5b:72:7d:5f:79:
                    19:66:11:d1:9d:40:98:d6:31:ae:0b:98:7d:01:41:
                    89:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8F:47:51:1F:7D:CF:A6:8F:03:E2:CA:BD:3A:88:FF:9F:71:17:04
            X509v3 Authority Key Identifier:
                keyid:7B:51:6B:C5:2F:DB:EA:D0:CF:80:51:6E:17:94:A0:1B:EF:D2:3D:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B516BC52FDBEAD0CF80516E1794A01BEFD23DDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/286A91BA89AF978CCE2BB0FA7581486B216EA959BDF3E8E24B7EDCFF177D5193/0/3133382e3132322e3232342e302f32322d3234203d3e203134313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:c1:91:ba:6b:62:6b:c2:2c:8f:b6:8e:a7:aa:e3:d2:21:09:
         08:45:bc:25:e6:a7:bb:74:14:67:28:d3:2e:2b:09:50:ab:0c:
         0f:d4:3b:cf:97:31:e2:ad:cf:12:fa:b6:02:fc:3e:3f:01:4d:
         41:2e:78:49:d7:98:14:b3:a5:41:33:24:ad:e4:5c:88:ba:3a:
         d8:14:6e:7d:e2:de:8e:37:d0:25:2d:51:1e:2a:15:3b:7e:59:
         68:b5:52:d4:f8:50:3d:86:f5:5d:30:a5:68:4c:41:fb:ee:6f:
         5d:06:e4:e0:20:a3:eb:0e:85:ea:49:0a:e5:a7:72:96:b5:60:
         51:dd:93:6b:e4:fa:44:25:4c:0c:7e:70:a8:97:71:34:b8:00:
         d7:87:2e:26:70:c2:b6:d6:26:77:93:66:73:ad:2f:b2:23:b5:
         5b:50:fc:79:30:37:a9:cb:12:70:7b:04:99:8f:76:86:99:e1:
         99:2a:1f:67:68:42:f9:54:fe:7f:8f:e8:ae:a8:1b:3b:6a:16:
         2b:93:94:d9:a1:ac:15:6f:eb:76:30:de:84:f1:d7:ce:a3:44:
         e8:02:e6:4d:b6:61:d3:24:25:ca:f3:3c:3c:ff:34:cb:dc:e7:
         0f:96:74:b7:22:08:30:9c:9a:f8:d2:07:c0:d7:60:3b:f5:72:
         f1:28:a8:21
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUR27eT7BxntHZDjE9M3zQU6OdKDkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I1MTZCQzUyRkRCRUFEMENGODA1MTZFMTc5NEEwMUJF
RkQyM0RERDAeFw0yNjA5MTAwNzE1MDBaFw0yNzA5MDkwNzIwMDBaMDMxMTAvBgNV
BAMTKDU4OEY0NzUxMUY3RENGQTY4RjAzRTJDQUJEM0E4OEZGOUY3MTE3MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Mo390aAP3Jkh2eTpccanxVxu
HmHZjm2CEuPh39x9hdVB8BAVnnKg8orlI42Q198GQPiAfhue0dAGxYefzydNa5P5
QdJLL1keLoZwlbMaF+BLHYSmHysKCh1T8In1Nis4Z00F5H1cOtNl6n4wNGwEhve8
Wv24rh37J5HOMEMrKG22NW/ViuP3ZtSu48jY1CFjC/UuXF4/fZGZHe7Q3HqUbKL9
gNPgeE+V0pCHoi5sj0fxPgOkHcS04WZmjGVD4SwyrUmThQpthZCQYmycUEQ0ovKp
O/ts85pahq5XN/IKfMsAenQSFuwEIr1bcn1feRlmEdGdQJjWMa4LmH0BQYn3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUWI9HUR99z6aPA+LKvTqI/59xFwQwHwYDVR0j
BBgwFoAUe1FrxS/b6tDPgFFuF5SgG+/SPd0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yODZBOTFCQTg5QUY5NzhDQ0UyQkIwRkE3NTgxNDg2QjIx
NkVBOTU5QkRGM0U4RTI0QjdFRENGRjE3N0Q1MTkzLzAvN0I1MTZCQzUyRkRCRUFE
MENGODA1MTZFMTc5NEEwMUJFRkQyM0RERC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83QjUxNkJDNTJGREJFQUQwQ0Y4
MDUxNkUxNzk0QTAxQkVGRDIzRERELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjg2QTkxQkE4OUFGOTc4Q0NFMkJCMEZBNzU4MTQ4NkIyMTZFQTk1OUJE
RjNFOEUyNEI3RURDRkYxNzdENTE5My8wLzMxMzMzODJlMzEzMjMyMmUzMjMyMzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTM0MzEzNzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCinrg
MA0GCSqGSIb3DQEBCwUAA4IBAQCAwZG6a2JrwiyPto6nquPSIQkIRbwl5qe7dBRn
KNMuKwlQqwwP1DvPlzHirc8S+rYC/D4/AU1BLnhJ15gUs6VBMySt5FyIujrYFG59
4t6ON9AlLVEeKhU7fllotVLU+FA9hvVdMKVoTEH77m9dBuTgIKPrDoXqSQrlp3KW
tWBR3ZNr5PpEJUwMfnCol3E0uADXhy4mcMK21iZ3k2ZzrS+yI7VbUPx5MDepyxJw
ewSZj3aGmeGZKh9naEL5VP5/j+iuqBs7ahYrk5TZoawVb+t2MN6E8dfOo0ToAuZN
tmHTJCXK8zw8/zTL3OcPlnS3IggwnJr40gfA12A79XLxKKgh
-----END CERTIFICATE-----
Generated at Fri Sep 18 21:06:00 2026 by rpki-client