Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130302e302f32322d3232203d3e20323633373530.roa
File:                     3133382e39392e3130302e302f32322d3232203d3e20323633373530.roa (raw, json)
Hash identifier:          TcJNkZ1ohyXyZKkOmRqk6dSN6f2riRrCYN8rKt1CbMY=
Subject key identifier:   E1:50:62:2E:DE:51:BF:EB:39:92:DF:92:94:B9:0F:77:57:C8:D9:D1
Certificate issuer:       /CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
Certificate serial:       685BAB21197E565526811114842DED00D1AFCA00
Authority key identifier: 2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130302e302f32322d3232203d3e20323633373530.roa
Signing time:             Thu 30 Apr 2026 21:40:32 +0000
ROA not before:           Thu 30 Apr 2026 21:35:32 +0000
ROA not after:            Thu 29 Apr 2027 21:40:32 +0000
asID:                     263750
IP address blocks:        138.99.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 20:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:5b:ab:21:19:7e:56:55:26:81:11:14:84:2d:ed:00:d1:af:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
        Validity
            Not Before: Apr 30 21:35:32 2026 GMT
            Not After : Apr 29 21:40:32 2027 GMT
        Subject: CN=E150622EDE51BFEB3992DF9294B90F7757C8D9D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b5:6f:09:fe:dd:4e:08:2d:43:cd:11:61:34:
                    84:f1:fa:1f:bd:2d:47:f7:9e:63:70:d3:ce:ad:07:
                    81:9d:02:91:c3:24:c8:a7:e6:55:71:e3:23:e2:7b:
                    94:3a:36:4d:e9:97:c4:cf:b2:cf:08:70:f3:72:57:
                    e3:c9:22:81:7a:4b:1c:90:f0:93:fe:65:b6:ed:0a:
                    e5:6d:29:fb:2f:97:d9:d9:bd:6b:ae:7d:ef:78:7a:
                    40:72:7b:7b:90:1c:1f:b0:7f:2d:52:cd:bf:2f:28:
                    44:ff:b2:95:22:0a:e6:57:32:e7:da:1a:1c:ad:5f:
                    70:86:e7:2b:12:de:24:1a:84:b2:08:b2:b8:62:73:
                    a0:b8:dd:5b:eb:09:be:a2:b6:7b:0f:72:1a:1d:b8:
                    f7:df:b5:7b:5a:cf:ca:55:33:2f:f1:1c:df:3e:53:
                    f4:05:e9:56:e0:ef:48:dc:96:69:90:3f:31:91:56:
                    a9:42:27:e6:a2:bc:4a:28:fa:79:ce:81:6a:d3:b8:
                    f8:cf:74:c4:07:37:ca:9d:ba:54:98:56:c1:bc:de:
                    6a:dd:e9:0c:36:f3:a5:f4:9c:87:f4:da:c0:e9:0a:
                    37:38:20:5e:99:4e:78:c9:02:82:34:ce:9c:99:c3:
                    64:89:85:11:50:2f:4b:a3:83:3f:23:4b:5c:03:69:
                    64:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:50:62:2E:DE:51:BF:EB:39:92:DF:92:94:B9:0F:77:57:C8:D9:D1
            X509v3 Authority Key Identifier:
                keyid:2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130302e302f32322d3232203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:5c:c6:e7:bf:bc:f9:90:92:d5:14:63:3c:3d:2f:79:8d:2a:
         e8:32:3d:71:18:7f:f9:c4:1c:c3:3f:f1:46:2e:69:f8:76:d7:
         3b:47:5e:a4:df:f0:a9:38:a0:ea:b0:4a:73:63:25:52:c7:74:
         fe:11:1c:2e:80:8b:32:f8:31:fc:8d:9a:94:b9:81:52:4a:11:
         82:b0:26:bd:84:5d:26:1a:05:f8:be:c8:d9:78:8b:6f:a4:d9:
         83:cc:44:a4:9f:a7:60:c8:db:80:54:18:f0:56:82:2c:0f:b5:
         a7:a5:b6:92:4c:bb:fc:55:77:e3:9c:85:b9:12:12:26:25:de:
         85:d1:4b:e0:55:08:fe:53:40:70:ec:c8:b8:bc:5e:06:19:e6:
         98:32:30:d5:62:df:ae:1d:76:d7:2e:34:a2:9f:f7:d5:d5:39:
         46:d9:50:2b:32:ad:4f:06:52:dc:d6:c7:08:16:ca:83:04:02:
         c8:f0:8e:a0:36:79:6a:ab:52:31:43:7e:1b:10:17:09:35:c1:
         70:3f:d8:21:54:1e:9f:eb:d1:79:a2:48:59:a0:8d:9f:f5:79:
         47:fe:f3:c1:e4:bd:83:c4:83:6e:ec:a6:d8:41:05:e1:a8:8f:
         d5:f4:e8:11:34:04:bd:e4:ea:c3:62:09:5d:19:fe:d4:2e:8d:
         a4:27:76:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:54:24 2026 by rpki-client