Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/4FB16204A4084C57B75259282D9EEBF88F875D2A1F72BE16A5A6122F4C48B72F/0/3133382e39342e302e302f32322d3234203d3e203532343638.roa
File:                     3133382e39342e302e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          r2HRx0m2uhg15MHrFhRH5vAn9EGTXNTj+r5H2bYCKF4=
Subject key identifier:   F5:DA:79:3F:D8:CA:0D:64:66:70:EC:50:FD:8C:A5:A1:0F:AA:9F:70
Certificate issuer:       /CN=F965529A55373DD5B3125495E0DCC6B4B4C343EE
Certificate serial:       19A9668ACDD14F802011A5D91B042EF0F1B4067B
Authority key identifier: F9:65:52:9A:55:37:3D:D5:B3:12:54:95:E0:DC:C6:B4:B4:C3:43:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F965529A55373DD5B3125495E0DCC6B4B4C343EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FB16204A4084C57B75259282D9EEBF88F875D2A1F72BE16A5A6122F4C48B72F/0/3133382e39342e302e302f32322d3234203d3e203532343638.roa
Signing time:             Wed 12 Aug 2026 03:25:09 +0000
ROA not before:           Wed 12 Aug 2026 03:20:09 +0000
ROA not after:            Wed 11 Aug 2027 03:25:09 +0000
asID:                     52468
IP address blocks:        138.94.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FB16204A4084C57B75259282D9EEBF88F875D2A1F72BE16A5A6122F4C48B72F/0/F965529A55373DD5B3125495E0DCC6B4B4C343EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FB16204A4084C57B75259282D9EEBF88F875D2A1F72BE16A5A6122F4C48B72F/0/F965529A55373DD5B3125495E0DCC6B4B4C343EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F965529A55373DD5B3125495E0DCC6B4B4C343EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Sep 2026 05:14:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a9:66:8a:cd:d1:4f:80:20:11:a5:d9:1b:04:2e:f0:f1:b4:06:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F965529A55373DD5B3125495E0DCC6B4B4C343EE
        Validity
            Not Before: Aug 12 03:20:09 2026 GMT
            Not After : Aug 11 03:25:09 2027 GMT
        Subject: CN=F5DA793FD8CA0D646670EC50FD8CA5A10FAA9F70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:35:71:2b:d7:12:f6:57:db:23:7f:2d:6f:1b:
                    b0:bf:00:68:84:7f:7c:7e:95:5e:b4:80:c7:75:1f:
                    f9:24:26:a0:96:b2:0d:29:ec:22:27:67:ca:a4:e4:
                    5c:49:4f:d8:84:9b:7f:96:17:45:98:d1:05:ff:9f:
                    64:94:d3:59:0b:05:1f:4d:f7:54:35:3c:ea:d6:cb:
                    16:3f:58:91:f7:5b:7f:b2:c6:fc:ec:87:8a:de:33:
                    d9:02:09:dd:01:65:55:c2:c3:ad:87:1c:77:ef:22:
                    1d:f0:73:12:d5:77:96:6d:e1:c8:e5:5f:6c:bf:b0:
                    3f:da:8a:9f:a9:f1:2b:e8:bc:eb:b9:c9:ca:02:70:
                    64:69:96:c8:95:86:4d:27:2d:a6:89:6e:9c:04:30:
                    0a:92:fb:ca:0c:68:8a:f2:ec:be:59:82:b7:d3:8c:
                    59:83:0d:43:7e:e0:c3:13:58:1f:7f:c1:10:89:b4:
                    73:4a:84:66:0c:8b:74:5b:09:b5:51:05:8e:33:9f:
                    5a:32:9b:9f:13:a7:77:b4:d5:0a:23:c6:9d:d6:71:
                    16:71:97:c3:09:87:56:63:c8:88:02:17:ff:f3:39:
                    09:5a:ce:57:dd:3b:5e:2a:d6:60:f9:83:a2:e7:e9:
                    bf:7f:a8:a9:a5:e2:9f:9d:2b:4e:4c:34:5c:99:63:
                    ae:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DA:79:3F:D8:CA:0D:64:66:70:EC:50:FD:8C:A5:A1:0F:AA:9F:70
            X509v3 Authority Key Identifier:
                keyid:F9:65:52:9A:55:37:3D:D5:B3:12:54:95:E0:DC:C6:B4:B4:C3:43:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FB16204A4084C57B75259282D9EEBF88F875D2A1F72BE16A5A6122F4C48B72F/0/F965529A55373DD5B3125495E0DCC6B4B4C343EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F965529A55373DD5B3125495E0DCC6B4B4C343EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FB16204A4084C57B75259282D9EEBF88F875D2A1F72BE16A5A6122F4C48B72F/0/3133382e39342e302e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:e2:04:88:e8:98:2c:ae:a6:11:f9:da:22:56:62:0c:8d:4d:
         00:f9:53:59:49:bb:43:41:52:fc:4e:3f:85:90:de:0c:ee:1a:
         8f:66:cb:d3:fd:3d:09:9a:00:c4:a6:e7:4a:c2:9f:ed:a3:45:
         cc:b9:c8:04:71:f3:1c:9f:e6:70:16:22:46:fa:22:99:97:c3:
         33:56:9b:ee:d5:e5:b1:66:0f:70:35:f5:ce:9f:ab:db:c3:5d:
         bd:ee:dd:3c:41:3e:28:f4:29:c8:73:50:05:1b:fb:5c:c0:70:
         34:3a:8f:8a:4f:cf:5a:58:38:94:47:94:b1:4e:ff:96:a2:30:
         a2:4e:a8:f1:46:3e:1c:08:69:3c:fd:3f:6f:b8:d9:8c:b9:b3:
         d3:25:0a:09:09:77:bb:51:9a:76:f2:b0:b5:2c:4f:c0:71:92:
         bb:b8:b3:10:17:39:62:a8:aa:9c:11:07:93:1c:13:12:82:4a:
         13:63:79:f4:53:ae:d0:90:8a:5a:90:fc:80:8d:9d:62:3f:c7:
         16:68:63:f1:b1:cd:98:44:8c:4a:4b:43:23:81:b8:5d:e3:63:
         4b:b5:99:92:ff:d7:bd:48:be:e5:2e:74:a0:b1:77:2e:86:ae:
         6b:53:1e:e0:b5:04:5e:39:b4:ff:2c:96:26:66:e1:2c:5a:03:
         e3:38:03:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:35:31 2026 by rpki-client