Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/3133382e3132322e32362e302f32342d3234203d3e20323633373835.roa
File:                     3133382e3132322e32362e302f32342d3234203d3e20323633373835.roa (raw, json)
Hash identifier:          022p5Jh+8hOJLDQtQyUlzU/UF9gENGxT8tEM2VSA2N0=
Subject key identifier:   80:79:FE:EB:8E:E7:8C:CA:04:E1:6D:CF:53:2C:15:60:8A:0B:EA:A9
Certificate issuer:       /CN=83F8DFD087BA80748886EDE0E890BB3BC4067535
Certificate serial:       7685655E795485829CF805EFC451EE3F62475113
Authority key identifier: 83:F8:DF:D0:87:BA:80:74:88:86:ED:E0:E8:90:BB:3B:C4:06:75:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/3133382e3132322e32362e302f32342d3234203d3e20323633373835.roa
Signing time:             Wed 23 Jul 2025 02:05:01 +0000
ROA not before:           Wed 23 Jul 2025 02:00:01 +0000
ROA not after:            Wed 22 Jul 2026 02:05:01 +0000
asID:                     263785
IP address blocks:        138.122.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 02:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:85:65:5e:79:54:85:82:9c:f8:05:ef:c4:51:ee:3f:62:47:51:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83F8DFD087BA80748886EDE0E890BB3BC4067535
        Validity
            Not Before: Jul 23 02:00:01 2025 GMT
            Not After : Jul 22 02:05:01 2026 GMT
        Subject: CN=8079FEEB8EE78CCA04E16DCF532C15608A0BEAA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:24:dc:bb:b6:63:47:ab:7c:61:bd:94:0b:16:
                    fd:7e:ca:15:22:4c:b8:0c:64:cd:b1:14:11:50:b7:
                    74:a7:56:16:5d:c4:04:f4:15:73:f9:c8:bf:a6:94:
                    e5:f6:e5:59:3f:fd:87:70:2f:f8:ca:ef:84:ca:88:
                    64:42:82:59:fb:b7:67:1c:67:8d:c5:8a:9b:21:cc:
                    bf:8a:c4:be:a0:be:db:97:93:ea:c9:05:82:7f:86:
                    aa:42:e5:54:bb:2f:6e:cc:da:74:e1:b3:b9:92:a7:
                    29:1c:0e:38:69:3a:25:94:15:06:5f:10:10:6d:73:
                    8e:5a:39:41:6b:dc:a8:89:e6:03:da:b8:03:ff:d2:
                    e8:3e:9e:c9:88:04:b1:18:8c:6b:23:b6:97:d5:18:
                    da:02:54:90:74:61:99:8b:a5:44:38:5b:b9:1e:fe:
                    5b:5a:7b:b2:66:1f:3c:db:44:36:a6:36:3d:94:20:
                    a9:e1:23:5f:44:ca:38:0d:f5:53:42:ef:9a:8d:79:
                    f5:44:9e:03:9c:2d:47:fc:2d:98:33:e4:87:1d:ae:
                    eb:76:f4:9a:f8:29:48:99:ef:b3:07:db:d1:86:c2:
                    0a:87:2c:9b:ae:b5:09:74:d9:e1:cc:cc:0e:7b:a1:
                    9b:4c:bc:ba:d8:24:76:01:87:36:db:0d:a2:1e:3a:
                    c9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:79:FE:EB:8E:E7:8C:CA:04:E1:6D:CF:53:2C:15:60:8A:0B:EA:A9
            X509v3 Authority Key Identifier:
                keyid:83:F8:DF:D0:87:BA:80:74:88:86:ED:E0:E8:90:BB:3B:C4:06:75:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/3133382e3132322e32362e302f32342d3234203d3e20323633373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:f3:59:7a:df:ee:c4:b4:5c:a6:d2:8a:ac:3f:e0:58:7b:66:
         5d:01:69:01:5b:e2:43:11:1c:10:1f:a6:34:57:ea:4a:4d:b0:
         19:59:2e:e7:cc:d9:13:77:e4:36:ed:50:96:e2:0c:e6:75:1f:
         07:f2:7e:44:92:8c:89:15:ce:c9:fc:3a:71:e3:f4:cd:cc:90:
         dc:d3:02:4c:98:59:be:d0:f2:b5:ca:40:a0:a6:c2:e3:74:ef:
         bd:f7:29:1d:e5:f0:e7:96:61:88:7f:dc:2b:d2:c8:78:12:9a:
         6e:d2:fc:c2:e0:e9:57:f4:3b:e6:df:99:35:e0:cc:1c:fc:2e:
         f5:14:99:2c:29:6d:59:8a:5c:34:67:72:86:ca:aa:06:da:73:
         e1:c6:2e:be:36:56:3f:3c:67:74:eb:c8:79:48:9f:c6:48:c4:
         b2:e1:03:74:7f:8a:6e:77:45:75:87:6b:4c:3b:02:4e:3b:9d:
         27:84:3c:21:86:2c:96:34:69:da:6b:ea:0d:62:bb:3e:b0:55:
         ff:de:1c:70:a4:f8:5a:e1:01:21:0c:47:1d:96:52:20:1c:68:
         36:8c:4c:99:f4:c2:5a:0a:c4:d6:36:5d:8d:be:2e:c5:fc:84:
         67:43:a7:d5:ee:b9:5c:2c:7b:08:2a:f3:88:81:a3:03:5c:bd:
         62:ca:16:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 19:00:28 2025 by rpki-client