Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3232392e302f32342d3234203d3e20333936333536.roa
File:                     3133382e3132312e3232392e302f32342d3234203d3e20333936333536.roa (raw, json)
Hash identifier:          w+LGr/zee2d/v48m+UJsPGHEVcHckXnbpNhNO7BOT5A=
Subject key identifier:   C7:A8:9F:79:E4:30:0E:DA:FA:C4:C8:3A:70:CB:2B:85:CA:22:47:01
Certificate issuer:       /CN=9546A908853C34D10445938EC0A727E092D120C7
Certificate serial:       502C270D994F80C784B0C1E5F7159AB91F929AB6
Authority key identifier: 95:46:A9:08:85:3C:34:D1:04:45:93:8E:C0:A7:27:E0:92:D1:20:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9546A908853C34D10445938EC0A727E092D120C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3232392e302f32342d3234203d3e20333936333536.roa
Signing time:             Fri 08 May 2026 13:30:00 +0000
ROA not before:           Fri 08 May 2026 13:25:00 +0000
ROA not after:            Fri 07 May 2027 13:30:00 +0000
asID:                     396356
IP address blocks:        138.121.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/9546A908853C34D10445938EC0A727E092D120C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/9546A908853C34D10445938EC0A727E092D120C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9546A908853C34D10445938EC0A727E092D120C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:2c:27:0d:99:4f:80:c7:84:b0:c1:e5:f7:15:9a:b9:1f:92:9a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9546A908853C34D10445938EC0A727E092D120C7
        Validity
            Not Before: May  8 13:25:00 2026 GMT
            Not After : May  7 13:30:00 2027 GMT
        Subject: CN=C7A89F79E4300EDAFAC4C83A70CB2B85CA224701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9f:dd:ac:35:a6:44:09:8f:86:95:b5:fb:33:
                    a6:35:ad:33:85:99:ac:74:94:45:03:b3:5f:52:42:
                    7e:ec:c4:22:9d:8c:de:81:e4:56:7e:04:de:7f:b6:
                    75:fd:c4:14:90:e5:0e:5c:80:6b:15:31:b4:e9:88:
                    aa:40:da:b7:cf:f1:36:c3:cb:41:da:87:3b:da:f8:
                    1d:0e:9a:95:c7:fa:26:62:e7:cd:7a:9b:61:03:48:
                    fb:f9:bc:cc:45:90:52:e9:7a:b7:76:f5:1e:c8:ba:
                    3b:b4:4d:23:00:8f:da:84:1f:01:62:af:ce:4c:a3:
                    54:1a:37:c9:7e:25:02:f3:77:2f:fb:bc:c1:af:d1:
                    40:3c:75:e7:63:80:7a:83:da:e9:e1:71:3e:f0:44:
                    50:24:6e:9f:af:da:9a:54:35:47:0d:3b:ed:33:c1:
                    21:61:b8:79:94:0c:83:1d:aa:e6:50:a4:27:57:68:
                    26:7f:7f:18:d5:9b:90:36:71:6a:d5:11:53:f1:4f:
                    82:89:12:3c:ff:a5:2f:79:f7:7e:07:f5:e2:58:cc:
                    81:fe:b6:84:f0:bf:fe:d6:59:40:bd:fb:fb:5a:6e:
                    7f:e5:18:83:23:ba:3e:80:a9:3d:18:cd:ee:62:d8:
                    b6:8d:c1:14:c6:c1:f9:d4:04:b9:73:6b:5f:e0:48:
                    dc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A8:9F:79:E4:30:0E:DA:FA:C4:C8:3A:70:CB:2B:85:CA:22:47:01
            X509v3 Authority Key Identifier:
                keyid:95:46:A9:08:85:3C:34:D1:04:45:93:8E:C0:A7:27:E0:92:D1:20:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/9546A908853C34D10445938EC0A727E092D120C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9546A908853C34D10445938EC0A727E092D120C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3232392e302f32342d3234203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:56:58:1d:e2:f5:ac:23:52:27:07:f7:66:30:61:4f:40:19:
         ea:91:0f:dd:f1:45:b2:1c:5a:a6:cf:1d:bf:43:58:15:74:93:
         71:07:1a:fb:98:55:b5:29:0c:57:fd:c1:a8:82:4b:d7:14:e7:
         89:2b:f7:4e:17:98:c5:66:7c:ee:4c:5e:14:e2:f2:4d:4f:e0:
         9f:3e:5f:eb:7e:8b:50:4b:b4:43:ba:52:3e:a9:a8:ca:e9:36:
         43:07:df:42:67:fb:2a:18:57:cf:b2:31:05:19:1d:42:9a:a2:
         88:51:0e:aa:81:56:ab:5f:98:1e:b7:e7:1c:6c:ab:30:a4:ab:
         5e:27:64:65:0b:eb:67:df:91:0a:94:db:ca:fd:e0:56:4a:b3:
         04:c4:b2:3c:ad:53:cd:f5:24:ac:c1:93:20:4d:cd:6d:74:85:
         a3:2d:7e:9e:af:0a:c6:d9:15:52:c1:d1:59:e0:18:8f:c7:0f:
         cb:f2:1a:1c:d2:40:6c:8c:5e:63:89:e4:86:e4:7d:03:cc:dc:
         6c:1f:7b:bd:c5:f5:ab:81:f4:70:bd:7b:d7:07:5e:60:74:34:
         c3:4c:07:30:85:e8:23:61:64:2c:c3:6d:eb:67:f5:87:c5:72:
         3a:fc:1e:a4:96:7c:85:9e:52:0a:38:9d:d4:74:a3:f3:a9:2a:
         45:47:70:82
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUUCwnDZlPgMeEsMHl9xWauR+SmrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU0NkE5MDg4NTNDMzREMTA0NDU5MzhFQzBBNzI3RTA5
MkQxMjBDNzAeFw0yNjA1MDgxMzI1MDBaFw0yNzA1MDcxMzMwMDBaMDMxMTAvBgNV
BAMTKEM3QTg5Rjc5RTQzMDBFREFGQUM0QzgzQTcwQ0IyQjg1Q0EyMjQ3MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtn92sNaZECY+GlbX7M6Y1rTOF
max0lEUDs19SQn7sxCKdjN6B5FZ+BN5/tnX9xBSQ5Q5cgGsVMbTpiKpA2rfP8TbD
y0Hahzva+B0OmpXH+iZi5816m2EDSPv5vMxFkFLperd29R7Iuju0TSMAj9qEHwFi
r85Mo1QaN8l+JQLzdy/7vMGv0UA8dedjgHqD2unhcT7wRFAkbp+v2ppUNUcNO+0z
wSFhuHmUDIMdquZQpCdXaCZ/fxjVm5A2cWrVEVPxT4KJEjz/pS95934H9eJYzIH+
toTwv/7WWUC9+/tabn/lGIMjuj6AqT0Yze5i2LaNwRTGwfnUBLlza1/gSNyBAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUx6ifeeQwDtr6xMg6cMsrhcoiRwEwHwYDVR0j
BBgwFoAUlUapCIU8NNEERZOOwKcn4JLRIMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MDI2RjlFQUIzNTdGNDcxM0NFOTc3QTQ0RjBFQ0U3OThD
RENFNDc5QjRBNERDQkIwMEZCRkJCRkNCMDQzRDlCLzAvOTU0NkE5MDg4NTNDMzRE
MTA0NDU5MzhFQzBBNzI3RTA5MkQxMjBDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NTQ2QTkwODg1M0MzNEQxMDQ0
NTkzOEVDMEE3MjdFMDkyRDEyMEM3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODAyNkY5RUFCMzU3RjQ3MTNDRTk3N0E0NEYwRUNFNzk4Q0RDRTQ3OUI0
QTREQ0JCMDBGQkZCQkZDQjA0M0Q5Qi8wLzMxMzMzODJlMzEzMjMxMmUzMjMyMzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM5MzYzMzM1MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACK
eeUwDQYJKoZIhvcNAQELBQADggEBAGVWWB3i9awjUicH92YwYU9AGeqRD93xRbIc
WqbPHb9DWBV0k3EHGvuYVbUpDFf9waiCS9cU54kr904XmMVmfO5MXhTi8k1P4J8+
X+t+i1BLtEO6Uj6pqMrpNkMH30Jn+yoYV8+yMQUZHUKaoohRDqqBVqtfmB635xxs
qzCkq14nZGUL62ffkQqU28r94FZKswTEsjytU831JKzBkyBNzW10haMtfp6vCsbZ
FVLB0VngGI/HD8vyGhzSQGyMXmOJ5IbkfQPM3Gwfe73F9auB9HC9e9cHXmB0NMNM
BzCF6CNhZCzDbetn9YfFcjr8HqSWfIWeUgo4ndR0o/OpKkVHcII=
-----END CERTIFICATE-----
Generated at Wed May 13 16:04:53 2026 by rpki-client