Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/3133382e35392e3137322e302f32322d3234203d3e20323633373436.roa
File:                     3133382e35392e3137322e302f32322d3234203d3e20323633373436.roa (raw, json)
Hash identifier:          9jqxmdpXoNwM4ok58atTfrPJZ9h+rccxZ5aFDRobukI=
Subject key identifier:   DE:CF:4F:E9:06:75:AC:BA:73:6B:01:BF:0E:28:67:B2:2A:03:3B:70
Certificate issuer:       /CN=DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1
Certificate serial:       4366643A9689F3AEB4A6FEEC06D51C39961CDD1D
Authority key identifier: DC:9A:CC:F7:76:CB:F0:37:0B:3B:A2:78:3B:A7:A4:A1:14:07:24:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/3133382e35392e3137322e302f32322d3234203d3e20323633373436.roa
Signing time:             Mon 24 Aug 2026 11:25:00 +0000
ROA not before:           Mon 24 Aug 2026 11:20:00 +0000
ROA not after:            Mon 23 Aug 2027 11:25:00 +0000
asID:                     263746
IP address blocks:        138.59.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Aug 2026 13:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:66:64:3a:96:89:f3:ae:b4:a6:fe:ec:06:d5:1c:39:96:1c:dd:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1
        Validity
            Not Before: Aug 24 11:20:00 2026 GMT
            Not After : Aug 23 11:25:00 2027 GMT
        Subject: CN=DECF4FE90675ACBA736B01BF0E2867B22A033B70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:13:d6:cb:cb:a3:37:57:3d:c3:3e:2f:31:d6:
                    61:cd:88:64:f1:e1:42:0d:80:a9:df:97:e9:80:71:
                    37:6e:66:a4:c4:6e:30:45:2b:ca:0e:9c:33:5f:1c:
                    e9:78:77:fb:12:04:72:40:4b:c5:8c:4a:ff:f5:25:
                    0c:b5:14:86:c9:17:f8:f9:5a:95:04:5a:6e:81:98:
                    58:27:c7:fe:ec:b0:d8:fa:1b:9d:13:3a:da:4f:a1:
                    e7:36:ff:0a:cb:02:45:15:e7:36:a9:ff:b7:cc:96:
                    7c:5a:07:b1:56:b5:c0:72:df:26:1a:69:63:bc:51:
                    91:58:ce:e9:cd:d3:5c:de:09:55:d0:ed:00:cd:f3:
                    d5:65:0a:45:6d:0b:59:ae:ec:04:ff:71:b6:21:f8:
                    ef:48:b8:2e:ca:5f:26:18:33:64:3f:82:24:fa:ff:
                    0b:5d:c4:0c:af:aa:46:8a:ac:40:e8:5b:f2:81:96:
                    de:08:f9:1c:03:a3:b5:ac:69:13:9a:df:16:5c:07:
                    78:50:3e:12:0c:84:27:73:6b:bf:4c:db:8a:04:1c:
                    fa:9b:76:b5:df:44:c7:53:18:cf:7c:68:36:5b:55:
                    1b:d4:77:de:f1:83:11:b1:6c:48:13:ac:5c:e7:93:
                    c6:0e:4e:da:c6:de:05:ef:36:d8:2c:ff:c2:92:0b:
                    c6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CF:4F:E9:06:75:AC:BA:73:6B:01:BF:0E:28:67:B2:2A:03:3B:70
            X509v3 Authority Key Identifier:
                keyid:DC:9A:CC:F7:76:CB:F0:37:0B:3B:A2:78:3B:A7:A4:A1:14:07:24:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/3133382e35392e3137322e302f32322d3234203d3e20323633373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:89:30:c8:f7:37:ee:83:eb:d5:5e:87:81:90:2a:cd:27:ba:
         d5:ce:2f:1c:4d:c7:13:52:3b:2f:71:64:b5:01:2e:a2:64:59:
         a7:97:97:f9:3a:ec:b0:2d:7f:6c:62:59:fc:06:36:da:2c:99:
         ed:b1:e0:f1:7b:7c:df:57:61:89:e7:7e:2f:57:96:e9:83:7f:
         7d:53:45:ed:18:70:93:02:2f:5e:f8:ef:cd:ad:da:ae:e2:ac:
         76:ad:3b:36:86:c9:cd:3c:75:ea:d1:dd:46:aa:c2:91:ad:84:
         44:ed:bd:25:b0:02:d2:6c:b3:a8:99:07:49:f6:3e:2b:bd:ea:
         da:9a:40:87:2e:11:85:41:62:2c:6d:b8:ad:1f:3b:58:c1:3e:
         70:ea:ba:10:df:f3:6d:eb:71:db:4b:78:73:f4:f8:98:7b:f5:
         35:a3:f5:9d:45:58:49:b9:2e:94:36:24:62:cc:0f:cb:20:a6:
         dd:bc:4b:18:6c:9d:71:d4:d7:6e:4e:a8:3c:8f:ac:a1:07:f8:
         f9:c5:57:4f:2c:e9:dd:a0:e9:a2:8f:e5:ad:55:0a:19:3d:54:
         33:dd:bf:43:03:59:70:15:e5:7f:ba:3f:a3:b8:8d:9d:9e:b9:
         fc:fa:3d:a1:63:56:0c:14:92:bc:e4:4b:e2:40:a0:f4:85:c7:
         f4:17:b2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 02:35:07 2026 by rpki-client