Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232362e302f32332d3233203d3e20323730303532.roa
File:                     3133382e35392e3232362e302f32332d3233203d3e20323730303532.roa (raw, json)
Hash identifier:          UddtdE4UHyml/jXGMXTYoGeu1XPRnUmf4+5lnha/pOk=
Subject key identifier:   0A:6C:22:D0:31:07:21:5F:80:48:36:81:75:20:CD:3A:D7:27:4B:01
Certificate issuer:       /CN=69FD3EB23E910C40C36B84893BA0E5D72631240F
Certificate serial:       658868C87A4C435DBEB64046E5E15B1C7EB677D8
Authority key identifier: 69:FD:3E:B2:3E:91:0C:40:C3:6B:84:89:3B:A0:E5:D7:26:31:24:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232362e302f32332d3233203d3e20323730303532.roa
Signing time:             Sun 29 Mar 2026 15:36:35 +0000
ROA not before:           Sun 29 Mar 2026 15:31:35 +0000
ROA not after:            Sun 28 Mar 2027 15:36:35 +0000
asID:                     270052
IP address blocks:        138.59.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 18:50:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:88:68:c8:7a:4c:43:5d:be:b6:40:46:e5:e1:5b:1c:7e:b6:77:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FD3EB23E910C40C36B84893BA0E5D72631240F
        Validity
            Not Before: Mar 29 15:31:35 2026 GMT
            Not After : Mar 28 15:36:35 2027 GMT
        Subject: CN=0A6C22D03107215F804836817520CD3AD7274B01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:50:a2:ae:33:4a:b8:63:29:83:00:bc:2e:42:
                    13:6d:a4:4a:b5:55:74:09:41:e4:60:94:1b:b6:43:
                    c1:3c:b9:51:1c:77:2a:47:98:3c:cc:29:6b:13:7e:
                    eb:e5:84:72:56:89:ef:c0:c9:42:9c:74:b8:1f:14:
                    cb:c4:c0:64:3e:73:b6:50:2f:24:25:7a:2b:6f:d0:
                    a8:ad:62:11:d6:cc:3a:8c:6d:e7:38:52:eb:0d:a5:
                    ce:a2:04:15:cb:ec:75:00:42:9c:40:8d:98:ea:88:
                    dc:19:a5:fb:7e:f1:8a:8b:1c:6f:da:2d:ed:96:fb:
                    41:8a:5a:ce:9c:e4:5e:e6:89:0d:b6:e1:b2:9f:b8:
                    82:e3:04:45:c6:33:43:b5:71:e6:03:f0:d5:e7:91:
                    93:d5:89:c2:c1:63:d8:94:1d:8a:6f:ef:2b:bc:35:
                    02:10:50:d3:1b:a1:5d:06:5d:9a:a6:34:de:06:2d:
                    9f:44:ee:31:dd:f5:11:23:2f:01:a4:3b:fd:8e:7e:
                    b0:ed:a8:bb:9d:16:75:cc:a4:eb:e5:b8:b4:c4:43:
                    42:fa:c4:46:df:f5:da:3e:24:39:89:a3:4a:f2:63:
                    a9:ee:4f:5d:31:70:9e:a4:ce:93:5b:4a:17:91:ab:
                    c8:a9:e9:f2:12:94:46:ec:43:d2:a2:5f:14:2f:60:
                    a3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6C:22:D0:31:07:21:5F:80:48:36:81:75:20:CD:3A:D7:27:4B:01
            X509v3 Authority Key Identifier:
                keyid:69:FD:3E:B2:3E:91:0C:40:C3:6B:84:89:3B:A0:E5:D7:26:31:24:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232362e302f32332d3233203d3e20323730303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:44:73:ed:ed:e7:4a:d6:49:a6:92:50:7c:70:04:9b:e0:12:
         64:a1:ec:09:81:64:ae:f3:bc:c4:66:a2:54:0e:7e:ec:0d:67:
         ed:a2:09:06:d0:d5:65:89:b1:2a:30:5d:0f:81:72:8d:0e:af:
         ad:b0:13:af:fd:0c:be:db:e7:68:2f:5c:16:9f:bc:2d:13:b1:
         49:0c:0d:7b:9f:7d:47:ee:c2:0a:1b:78:97:30:f9:bd:44:c7:
         1c:cc:10:83:37:5c:da:62:3a:ba:55:19:e2:ca:bb:7b:bb:e9:
         09:77:a2:f8:43:0e:ef:25:5a:30:b4:95:92:3b:d7:26:f1:74:
         73:8d:e0:1c:e5:af:70:8b:6e:92:35:25:91:1e:b5:f1:78:30:
         31:4d:b7:d7:70:fe:80:6d:63:06:59:b6:f3:6e:ce:05:91:24:
         63:63:ef:e8:05:3b:68:49:e2:c1:7d:c8:4c:3c:10:80:a9:92:
         c1:af:70:70:05:b9:74:56:63:5a:ae:74:77:a4:35:50:c2:3c:
         bd:30:47:10:a2:ae:20:0c:92:4f:83:c0:d0:32:8b:bf:23:18:
         b6:70:3f:33:cf:50:d4:f7:64:8a:dd:e6:90:55:c1:bb:3d:6f:
         90:83:bc:c8:10:ce:69:66:e1:39:bc:b7:d2:2b:8a:01:1e:3a:
         62:d5:e3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 18:36:24 2026 by rpki-client