Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130332e302f32342d3234203d3e20323633373530.roa
File:                     3133382e39392e3130332e302f32342d3234203d3e20323633373530.roa (raw, json)
Hash identifier:          nEkDrFrHMfuMREHCbbKMPxfAq7ZzsgSA7y05g87kHk8=
Subject key identifier:   38:0E:F3:E3:F2:CD:0B:C7:21:54:27:31:F0:C4:52:89:83:22:7F:54
Certificate issuer:       /CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
Certificate serial:       6B2D55A1E3D80D0C91E4151D7A8331CBF2E81577
Authority key identifier: 2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130332e302f32342d3234203d3e20323633373530.roa
Signing time:             Thu 30 Apr 2026 21:40:32 +0000
ROA not before:           Thu 30 Apr 2026 21:35:32 +0000
ROA not after:            Thu 29 Apr 2027 21:40:32 +0000
asID:                     263750
IP address blocks:        138.99.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 20:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:2d:55:a1:e3:d8:0d:0c:91:e4:15:1d:7a:83:31:cb:f2:e8:15:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
        Validity
            Not Before: Apr 30 21:35:32 2026 GMT
            Not After : Apr 29 21:40:32 2027 GMT
        Subject: CN=380EF3E3F2CD0BC721542731F0C4528983227F54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e9:b6:54:27:52:df:e8:34:53:72:a3:eb:b7:
                    74:c9:84:2a:f1:d5:e8:bc:4d:2f:f1:f3:b3:30:d3:
                    09:4e:e9:6d:7d:b0:9b:81:0d:9e:2c:d1:7f:ea:d1:
                    33:e6:c4:e1:58:97:27:63:95:6a:ce:21:cf:57:7a:
                    f4:c6:23:04:ad:8a:a1:65:a0:02:15:95:c6:39:ac:
                    d3:af:e0:f2:6c:83:9b:22:1d:ad:cf:41:bd:e1:5f:
                    04:e9:f8:a8:4f:13:0a:49:00:35:09:13:30:e4:ea:
                    75:d2:92:88:5e:d3:98:d9:44:2c:d1:48:f8:ed:27:
                    43:d4:db:1c:2b:52:10:cd:37:50:3a:48:bc:e7:93:
                    6b:9f:4f:ed:f4:12:e6:8a:54:19:ce:df:0f:03:21:
                    5a:e0:bb:ae:c8:68:40:5c:e9:38:b0:b2:0c:61:ea:
                    d0:ac:64:02:9e:c0:25:01:c4:49:a9:31:e0:18:5d:
                    cd:6a:1d:9a:4d:14:d3:5a:38:ca:d5:5e:14:d2:f1:
                    6d:81:31:3a:07:30:6b:74:86:2d:2e:b6:5e:f4:df:
                    f7:a9:f9:2d:6e:4d:fa:80:11:6d:d9:b4:4c:6b:c8:
                    1a:55:31:e9:a2:74:3d:de:a1:22:73:ce:14:ca:aa:
                    12:7b:cd:a2:f7:07:88:a4:b2:84:d9:91:21:67:86:
                    a1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0E:F3:E3:F2:CD:0B:C7:21:54:27:31:F0:C4:52:89:83:22:7F:54
            X509v3 Authority Key Identifier:
                keyid:2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130332e302f32342d3234203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:95:ff:67:7c:67:33:93:36:8d:a7:04:7b:26:c0:f7:bd:3b:
         0d:3d:0c:72:f9:6a:08:2a:05:b9:92:6e:85:90:00:9d:a3:d6:
         45:2a:be:ab:ea:a1:6e:c9:1f:63:ee:50:f0:56:60:67:cf:15:
         93:37:f6:9a:bb:a8:cb:69:44:f1:2c:69:ad:a0:ac:b9:c0:fb:
         14:ab:63:a0:b7:d9:e1:ff:04:91:09:03:eb:f9:ab:c3:30:5d:
         50:6a:09:90:3d:89:b0:5a:93:79:05:b6:5f:30:39:91:c2:49:
         e6:22:29:4d:4a:b2:ca:58:e5:7d:98:d4:0f:20:5b:87:92:63:
         33:80:1b:63:e2:37:53:11:4f:8b:03:81:f9:27:32:79:6e:14:
         b8:a2:ad:42:ea:46:b5:e7:98:dc:52:33:75:de:41:cd:5d:ca:
         0a:dd:a4:9a:5c:42:d7:ee:a9:82:c6:64:a1:4f:38:b7:a7:88:
         dd:76:79:13:a9:e7:52:10:b3:db:84:55:26:f1:13:59:b4:c3:
         37:78:27:7d:de:6e:a0:5a:35:7d:19:57:aa:93:a1:ce:2e:ed:
         d5:14:91:93:1d:b2:e0:af:a5:60:b9:f2:6a:6d:54:e3:cd:98:
         72:84:01:38:57:0f:52:98:c7:23:ec:2e:0e:e1:67:30:48:5b:
         c6:4d:1b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:01:34 2026 by rpki-client