Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3131312e302f32342d3234203d3e20323633373932.roa
File:                     3133382e3132322e3131312e302f32342d3234203d3e20323633373932.roa (raw, json)
Hash identifier:          IEpdEjjBjph/p/eBhabsKXujrbfoEL7agfBPRLGSp20=
Subject key identifier:   D6:21:63:AD:71:36:3C:3A:30:4A:B1:F0:5A:DE:96:05:68:E6:71:93
Certificate issuer:       /CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F
Certificate serial:       78AFBC823DAAA6517BFAEDD1EFE7C5BB5021C4C2
Authority key identifier: B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3131312e302f32342d3234203d3e20323633373932.roa
Signing time:             Tue 17 Feb 2026 13:30:53 +0000
ROA not before:           Tue 17 Feb 2026 13:25:53 +0000
ROA not after:            Tue 16 Feb 2027 13:30:53 +0000
asID:                     263792
IP address blocks:        138.122.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 22:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:af:bc:82:3d:aa:a6:51:7b:fa:ed:d1:ef:e7:c5:bb:50:21:c4:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F
        Validity
            Not Before: Feb 17 13:25:53 2026 GMT
            Not After : Feb 16 13:30:53 2027 GMT
        Subject: CN=D62163AD71363C3A304AB1F05ADE960568E67193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:28:e2:61:14:7f:0d:b4:05:c1:2b:8d:e1:d0:
                    d8:51:87:99:50:5f:a8:ab:a7:d5:c7:b9:57:43:8e:
                    aa:14:99:f5:6b:be:02:75:c3:7d:1f:e0:90:8e:cb:
                    e3:b6:48:49:bc:ea:bf:13:87:33:6b:71:7d:6b:1c:
                    e4:1c:5e:49:15:1a:2b:56:0a:bd:4f:3a:ac:89:c0:
                    cc:93:93:35:9b:05:e3:d8:e0:4d:ed:fe:07:84:1a:
                    db:cc:72:b4:4a:6f:b7:f6:34:5f:95:00:c8:08:10:
                    cc:e0:73:e8:3f:6c:53:0b:5a:17:32:6f:05:8f:4c:
                    70:13:73:11:02:12:9a:66:6f:7f:e5:e7:6c:a3:e7:
                    5f:ec:0c:01:57:81:1a:64:14:0d:0e:93:f0:a7:27:
                    b9:a2:11:fa:0d:cf:e6:be:1a:44:6f:5f:57:4c:54:
                    be:17:74:4e:15:ee:6a:d6:96:a2:93:3b:cf:b1:4f:
                    ed:dc:18:b7:5a:69:a0:8b:19:13:31:13:f5:d0:a8:
                    3e:b4:64:d3:1f:35:be:59:94:dc:1b:47:9d:36:f7:
                    51:a1:b1:d2:19:98:88:2e:d1:b7:e3:b1:c6:a9:75:
                    08:31:7b:c9:a0:78:29:64:e9:6d:2f:8d:e4:83:bb:
                    fd:07:9a:22:8e:ea:61:30:f6:ef:61:9b:39:f4:4a:
                    e1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:21:63:AD:71:36:3C:3A:30:4A:B1:F0:5A:DE:96:05:68:E6:71:93
            X509v3 Authority Key Identifier:
                keyid:B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3131312e302f32342d3234203d3e20323633373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:9b:75:f0:97:a9:51:b6:95:e8:3c:84:f2:19:9f:31:0c:06:
         76:f2:10:ed:8b:66:b6:ec:4f:f1:66:84:57:a0:35:70:85:6a:
         86:87:93:84:da:99:65:61:c5:1e:82:fa:35:39:03:49:e8:46:
         4c:48:2a:16:e1:c2:b6:ca:27:1a:f2:d4:5d:93:f6:ec:12:78:
         65:f3:ad:8d:2c:e5:4d:90:36:a9:f8:71:a7:ec:8a:24:13:26:
         c1:d3:6d:85:54:76:0b:3c:55:5a:65:68:37:39:dc:28:e0:7d:
         ff:92:40:53:81:9a:ec:4e:08:92:4f:59:d2:8a:24:bb:97:35:
         8f:19:da:9b:66:75:20:1a:cd:e2:95:1e:85:55:6d:6c:69:11:
         0a:57:d9:47:6d:41:88:32:53:61:4e:37:0f:86:44:d8:43:92:
         cd:8e:bd:72:b4:a8:58:a1:bc:ff:77:d5:f3:d7:64:1e:19:5e:
         f6:92:5d:c8:e3:0e:36:01:e1:86:79:d4:46:1c:06:78:57:a6:
         66:e9:df:4d:1d:32:ad:52:0d:39:5b:2e:20:60:68:83:e6:10:
         42:0c:fa:76:3b:1a:71:7c:04:6d:62:b8:df:51:d7:0c:1a:c7:
         d7:23:d4:4f:58:68:6d:bd:09:3b:88:fd:b8:f6:3f:21:95:fd:
         59:13:40:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 07:35:46 2026 by rpki-client