Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130302e302f32332d3233203d3e20323633373530.roa
File:                     3133382e39392e3130302e302f32332d3233203d3e20323633373530.roa (raw, json)
Hash identifier:          PG9AaZ8F0OLxvO3POEQ2l3IKGxOHL4DV/zsn1QdTn5M=
Subject key identifier:   E7:C6:24:9E:98:CA:DF:02:DD:9C:43:D4:1F:B1:AC:F9:91:04:9F:69
Certificate issuer:       /CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
Certificate serial:       62F05DC5890A197C7603045EEFCDC548890DD22C
Authority key identifier: 2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130302e302f32332d3233203d3e20323633373530.roa
Signing time:             Thu 30 Apr 2026 21:40:32 +0000
ROA not before:           Thu 30 Apr 2026 21:35:32 +0000
ROA not after:            Thu 29 Apr 2027 21:40:32 +0000
asID:                     263750
IP address blocks:        138.99.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 20:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f0:5d:c5:89:0a:19:7c:76:03:04:5e:ef:cd:c5:48:89:0d:d2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
        Validity
            Not Before: Apr 30 21:35:32 2026 GMT
            Not After : Apr 29 21:40:32 2027 GMT
        Subject: CN=E7C6249E98CADF02DD9C43D41FB1ACF991049F69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4f:b8:f1:80:cd:15:d8:d1:83:78:50:90:1c:
                    e0:c3:f1:fa:88:2f:5a:40:da:29:f6:79:45:23:12:
                    74:cf:93:16:55:55:dc:a7:bc:ff:2d:35:db:ea:6b:
                    a5:5e:b4:9a:99:ae:ae:da:15:46:fe:ab:4c:63:c7:
                    12:48:41:8f:59:b5:b4:08:9a:03:6e:59:9d:7d:a3:
                    d3:af:c1:37:e6:1e:1d:c1:48:95:b1:e1:f7:27:bc:
                    19:78:25:28:a2:f5:e9:f4:ec:e6:46:1d:37:66:19:
                    4f:24:52:28:b9:c1:40:45:39:fb:d0:7f:bc:5c:2d:
                    f1:58:d3:8a:55:f1:b6:8c:23:28:cc:a4:0f:17:5a:
                    96:c2:03:7e:fd:0f:db:32:04:38:b5:7c:74:b9:b5:
                    c6:50:69:c6:ec:a8:30:79:ce:1b:8a:1b:dc:8f:cc:
                    0a:5c:71:da:ce:80:a8:f2:a5:b8:77:db:f5:5c:73:
                    74:96:71:9f:87:c3:f6:9d:9a:87:90:9d:27:18:48:
                    f3:60:dc:90:b7:f6:b5:c3:de:37:63:91:2b:d1:ee:
                    13:6b:f5:b4:43:ed:90:e7:5d:ef:8d:cf:04:2f:b1:
                    80:87:3a:86:a9:39:35:3e:a1:b7:a3:2c:19:4d:42:
                    d4:ec:7e:b6:a5:f7:7b:41:87:01:97:50:fa:84:fb:
                    b3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C6:24:9E:98:CA:DF:02:DD:9C:43:D4:1F:B1:AC:F9:91:04:9F:69
            X509v3 Authority Key Identifier:
                keyid:2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130302e302f32332d3233203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:e7:b3:46:e8:4f:75:28:8c:e3:7d:41:25:02:d9:1c:46:c6:
         6c:e4:b1:8d:a9:7a:bd:d7:81:ef:fb:7b:b6:8c:0b:7c:4e:84:
         05:3b:2b:f4:e1:1b:d3:ff:89:38:e3:9b:c5:e5:0d:ef:f7:42:
         a7:3c:65:f2:90:67:1c:a8:8f:f6:15:94:c9:38:c2:13:f1:b9:
         85:0b:f1:16:8a:e4:c0:9b:c5:58:72:6e:1d:f6:6c:18:34:b0:
         06:db:33:cd:fb:85:f8:58:2d:3e:93:16:ce:a9:57:ca:6e:63:
         e1:4b:e7:09:de:35:71:d9:a7:b1:1d:66:90:0f:27:34:02:61:
         5b:ef:19:39:74:d9:39:86:87:64:b1:f8:d4:da:6d:24:c6:d6:
         e5:ec:fd:13:d0:3b:cc:8a:90:ef:c5:56:ef:eb:52:6e:30:68:
         a0:a0:99:7d:05:c7:b3:38:db:30:15:a3:36:b2:15:25:44:80:
         44:34:84:48:8b:97:b4:c8:9e:67:a3:c4:a4:37:c9:51:7a:2f:
         a6:38:00:7c:a7:b4:84:b7:c0:5f:12:f2:f4:62:e1:fc:20:10:
         15:b7:55:18:3f:54:f6:d2:8d:96:6d:06:dd:20:55:12:35:6a:
         77:b0:cb:ea:4d:7a:ff:67:36:27:9c:d7:1b:87:01:de:3e:48:
         14:a0:a4:2d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYvBdxYkKGXx2AwRe783FSIkN0iwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZCNDdCQTAyQURCQzE2MTNEQjIwRjFCNUVDM0ExQUM3
NEM1MjUwOTAeFw0yNjA0MzAyMTM1MzJaFw0yNzA0MjkyMTQwMzJaMDMxMTAvBgNV
BAMTKEU3QzYyNDlFOThDQURGMDJERDlDNDNENDFGQjFBQ0Y5OTEwNDlGNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChT7jxgM0V2NGDeFCQHODD8fqI
L1pA2in2eUUjEnTPkxZVVdynvP8tNdvqa6VetJqZrq7aFUb+q0xjxxJIQY9ZtbQI
mgNuWZ19o9OvwTfmHh3BSJWx4fcnvBl4JSii9en07OZGHTdmGU8kUii5wUBFOfvQ
f7xcLfFY04pV8baMIyjMpA8XWpbCA379D9syBDi1fHS5tcZQacbsqDB5zhuKG9yP
zApccdrOgKjypbh32/Vcc3SWcZ+Hw/admoeQnScYSPNg3JC39rXD3jdjkSvR7hNr
9bRD7ZDnXe+NzwQvsYCHOoapOTU+obejLBlNQtTsfral93tBhwGXUPqE+7MNAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU58YknpjK3wLdnEPUH7Gs+ZEEn2kwHwYDVR0j
BBgwFoAUL7R7oCrbwWE9sg8bXsOhrHTFJQkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQTc3MkE1RUEyNTI2MjQwNDQ4NDM4MThBQjhEQUI5REZG
Q0I3MzQ2QzlEMkUxRTVDQTkzRkRFOUJBQUE5MkI0LzAvMkZCNDdCQTAyQURCQzE2
MTNEQjIwRjFCNUVDM0ExQUM3NEM1MjUwOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRkI0N0JBMDJBREJDMTYxM0RC
MjBGMUI1RUMzQTFBQzc0QzUyNTA5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkE3NzJBNUVBMjUyNjI0MDQ0ODQzODE4QUI4REFCOURGRkNCNzM0NkM5
RDJFMUU1Q0E5M0ZERTlCQUFBOTJCNC8wLzMxMzMzODJlMzkzOTJlMzEzMDMwMmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMzMzczNTMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBimNk
MA0GCSqGSIb3DQEBCwUAA4IBAQA657NG6E91KIzjfUElAtkcRsZs5LGNqXq914Hv
+3u2jAt8ToQFOyv04RvT/4k445vF5Q3v90KnPGXykGccqI/2FZTJOMIT8bmFC/EW
iuTAm8VYcm4d9mwYNLAG2zPN+4X4WC0+kxbOqVfKbmPhS+cJ3jVx2aexHWaQDyc0
AmFb7xk5dNk5hodksfjU2m0kxtbl7P0T0DvMipDvxVbv61JuMGigoJl9BcezONsw
FaM2shUlRIBENIRIi5e0yJ5no8SkN8lRei+mOAB8p7SEt8BfEvL0YuH8IBAVt1UY
P1T20o2WbQbdIFUSNWp3sMvqTXr/ZzYnnNcbhwHePkgUoKQt
-----END CERTIFICATE-----
Generated at Wed May 13 17:16:49 2026 by rpki-client