Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232342e302f32332d3233203d3e20323730303532.roa
File:                     3133382e35392e3232342e302f32332d3233203d3e20323730303532.roa (raw, json)
Hash identifier:          yTV+Nwbum330XG/HG1FNAkkiBCvQDltsP+Kv0QaiYfE=
Subject key identifier:   C7:6A:2B:A4:C0:3B:FE:58:02:46:BC:46:CF:78:B3:FC:37:ED:F2:FC
Certificate issuer:       /CN=69FD3EB23E910C40C36B84893BA0E5D72631240F
Certificate serial:       4105E12B98FBA3E6CC1F67EF1DFAFF5BB9FDE5AF
Authority key identifier: 69:FD:3E:B2:3E:91:0C:40:C3:6B:84:89:3B:A0:E5:D7:26:31:24:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232342e302f32332d3233203d3e20323730303532.roa
Signing time:             Sun 29 Mar 2026 15:36:35 +0000
ROA not before:           Sun 29 Mar 2026 15:31:35 +0000
ROA not after:            Sun 28 Mar 2027 15:36:35 +0000
asID:                     270052
IP address blocks:        138.59.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 18:50:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:05:e1:2b:98:fb:a3:e6:cc:1f:67:ef:1d:fa:ff:5b:b9:fd:e5:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FD3EB23E910C40C36B84893BA0E5D72631240F
        Validity
            Not Before: Mar 29 15:31:35 2026 GMT
            Not After : Mar 28 15:36:35 2027 GMT
        Subject: CN=C76A2BA4C03BFE580246BC46CF78B3FC37EDF2FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c2:18:36:c4:c7:17:84:25:2b:66:66:4d:71:
                    b4:47:43:0c:02:8e:c3:87:9a:df:7e:d0:2a:c5:14:
                    d3:1d:85:c3:92:60:f0:42:84:5a:9e:0a:ab:e7:4d:
                    37:af:c3:fa:4e:7b:7f:23:c3:13:fd:74:dc:83:0a:
                    0f:5a:a1:19:a4:28:1c:54:2c:a0:fb:b0:32:34:f0:
                    8e:6f:43:06:0e:3e:11:6a:ad:e3:c5:32:7f:63:43:
                    e1:4f:01:7e:2d:63:78:86:a5:44:c9:41:ca:c8:ef:
                    ad:5f:5c:ba:06:49:bf:81:e8:22:6b:f1:d6:c1:45:
                    bf:04:85:43:b4:63:94:a5:8a:81:ac:6c:69:ee:b3:
                    83:c8:53:27:3b:b9:fb:dd:9e:0b:aa:ef:2b:71:58:
                    27:90:49:cd:06:91:b2:a0:00:72:2b:60:f8:44:99:
                    55:13:02:ab:7e:0e:f1:2d:cc:2b:78:23:32:ad:2e:
                    b6:74:d2:32:97:64:a9:44:e0:d1:64:ab:9f:6b:8e:
                    5c:c4:48:a8:94:6b:7f:87:e9:6f:c7:bd:c7:7f:7a:
                    9e:51:21:11:d0:ee:0c:aa:1b:d8:51:3c:9f:74:6e:
                    52:4d:68:33:b3:85:95:68:26:be:b9:86:9c:d9:9a:
                    cb:e1:c1:51:c2:4f:58:e1:64:71:8b:4e:ef:e2:21:
                    1b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6A:2B:A4:C0:3B:FE:58:02:46:BC:46:CF:78:B3:FC:37:ED:F2:FC
            X509v3 Authority Key Identifier:
                keyid:69:FD:3E:B2:3E:91:0C:40:C3:6B:84:89:3B:A0:E5:D7:26:31:24:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232342e302f32332d3233203d3e20323730303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:ba:72:6a:18:06:bb:c0:62:2c:60:28:81:57:28:db:7b:41:
         f3:44:e3:08:35:08:dc:03:1d:98:e0:ef:af:fb:b8:f9:52:d2:
         fa:d3:4e:f2:1e:08:c4:19:82:a2:8d:86:44:f7:34:57:2e:bf:
         17:26:f1:61:65:6a:04:31:5f:e5:69:b0:a4:93:eb:f4:43:dd:
         bb:ad:41:8a:53:a6:5c:38:e8:93:ce:b0:c1:e0:5c:66:6e:bf:
         06:b0:3e:77:e7:8e:2e:41:77:6f:f9:a5:5d:a5:aa:5a:78:24:
         93:4b:a5:3c:53:04:17:98:d7:a7:84:14:bc:99:50:fc:3d:2e:
         4c:ca:3c:f8:57:54:9c:e7:4a:73:0e:9b:d7:8f:aa:74:ff:5c:
         53:b8:86:54:da:5d:4f:a5:64:cb:71:e4:1c:91:d6:81:b2:10:
         0b:7c:c9:9b:8c:71:63:99:97:8e:0e:6a:e9:0c:41:d9:56:4b:
         8c:b3:2e:76:0e:44:2a:8c:b4:91:58:63:3e:d2:35:0c:f2:bd:
         86:c8:c8:4e:8f:67:68:73:b1:9e:1c:87:c9:a0:11:f4:46:e0:
         4b:da:76:ef:1e:49:c1:9b:23:c0:f6:70:48:40:a7:2b:87:5c:
         11:61:9c:10:0e:d8:d9:e4:9f:69:e7:0b:35:ea:d4:9e:54:80:
         78:9c:30:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 18:34:32 2026 by rpki-client