Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/3133382e3132322e32372e302f32342d3234203d3e20323633373835.roa
File:                     3133382e3132322e32372e302f32342d3234203d3e20323633373835.roa (raw, json)
Hash identifier:          xaMlmTTZE6Er08oOhYZVSqeMQ1a4NYkrH79aIgaYe6g=
Subject key identifier:   AF:C9:2E:01:87:88:39:76:66:44:F6:B6:E9:C2:F3:65:EA:64:2A:16
Certificate issuer:       /CN=83F8DFD087BA80748886EDE0E890BB3BC4067535
Certificate serial:       2F7CA1715B125E528E3C8038439E3D2C2C2127AE
Authority key identifier: 83:F8:DF:D0:87:BA:80:74:88:86:ED:E0:E8:90:BB:3B:C4:06:75:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/3133382e3132322e32372e302f32342d3234203d3e20323633373835.roa
Signing time:             Wed 23 Jul 2025 02:05:02 +0000
ROA not before:           Wed 23 Jul 2025 02:00:02 +0000
ROA not after:            Wed 22 Jul 2026 02:05:02 +0000
asID:                     263785
IP address blocks:        138.122.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 02:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:7c:a1:71:5b:12:5e:52:8e:3c:80:38:43:9e:3d:2c:2c:21:27:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83F8DFD087BA80748886EDE0E890BB3BC4067535
        Validity
            Not Before: Jul 23 02:00:02 2025 GMT
            Not After : Jul 22 02:05:02 2026 GMT
        Subject: CN=AFC92E01878839766644F6B6E9C2F365EA642A16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e7:5d:94:8b:46:11:32:53:03:7d:81:37:a7:
                    54:10:0b:45:3e:f4:ec:d0:c8:ed:9d:ab:2c:98:6d:
                    9c:d5:92:b7:c0:d2:13:99:d2:72:fd:fa:d1:83:1f:
                    da:4d:10:51:72:9a:34:f7:9a:92:b4:1a:fe:86:cb:
                    7e:e6:08:3f:2d:42:2d:a1:54:78:01:21:17:fd:a8:
                    3c:51:58:d5:34:91:95:ef:cd:ff:eb:77:95:58:4c:
                    cc:e3:5e:39:14:92:5b:19:07:ac:b2:e4:a0:31:81:
                    20:32:a4:fa:c8:a6:da:ea:72:50:66:d7:23:e8:75:
                    9d:e7:9e:19:e8:0c:3c:51:e9:76:5e:04:f7:59:3c:
                    b7:18:89:07:2e:6e:5e:40:18:43:5d:57:4b:af:eb:
                    66:6c:9b:a0:20:9a:9f:2d:ae:3f:6d:be:c3:6b:60:
                    71:37:57:46:c7:af:86:5a:cb:26:38:8b:5e:f9:b7:
                    84:2e:5d:2b:6b:32:10:e0:b0:59:25:eb:a6:50:7d:
                    df:51:c8:c1:08:b4:fc:66:fe:06:64:e8:d2:da:54:
                    3e:1a:0e:bd:63:5c:87:f1:a8:eb:9b:a4:8c:12:d6:
                    2b:fc:66:90:86:b8:f4:d6:04:20:61:8d:81:78:94:
                    e6:6f:93:58:66:4b:40:b9:21:1f:e4:8f:11:e7:29:
                    91:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C9:2E:01:87:88:39:76:66:44:F6:B6:E9:C2:F3:65:EA:64:2A:16
            X509v3 Authority Key Identifier:
                keyid:83:F8:DF:D0:87:BA:80:74:88:86:ED:E0:E8:90:BB:3B:C4:06:75:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/3133382e3132322e32372e302f32342d3234203d3e20323633373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:bb:fa:01:19:3c:bd:d0:39:8f:86:25:56:ab:da:b0:bf:9f:
         d8:6d:71:0d:24:85:42:39:aa:99:89:e6:ef:68:82:f0:4d:d4:
         6e:f5:fd:6d:b6:2e:c2:b5:15:04:b0:29:f7:ab:c8:08:ae:c5:
         b8:04:a2:e5:d9:b2:a7:4c:99:5e:48:33:ad:eb:20:d7:04:3f:
         67:41:d0:98:eb:e5:99:13:30:f3:dd:22:51:1b:f5:72:46:ef:
         7d:34:1b:78:86:3a:50:61:32:80:82:87:96:df:5c:9f:82:f5:
         9d:8b:8a:16:db:4c:7e:1b:09:fa:6b:c2:03:97:2e:36:35:c0:
         5f:b4:1c:17:61:77:3d:fd:35:5b:a9:01:b7:9a:6c:df:db:54:
         4e:c6:08:68:ca:0c:93:32:dd:e3:b9:b3:96:c1:97:59:be:c2:
         c2:27:cb:f8:d3:45:58:b5:db:be:68:78:b4:a0:14:83:27:7e:
         3d:22:8f:df:21:f6:40:60:c6:a3:17:f9:26:2b:ff:c7:3b:c6:
         6c:af:1c:0a:1c:85:fe:99:51:61:e5:2d:2d:4f:d7:0b:d9:4d:
         f4:b5:4f:70:7a:4b:5c:04:46:7e:44:53:59:f3:4f:44:ce:a6:
         43:8b:15:15:f2:d5:b1:08:81:88:8d:c7:66:3b:13:6a:f4:10:
         16:c1:47:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 19:00:29 2025 by rpki-client