Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F99FF5801B2459EEC31A6FFF2D986852EF2EF686382661B869B9A371D6DF6E1/0/3133382e3138352e3230382e302f32322d3234203d3e203238313034.roa
File:                     3133382e3138352e3230382e302f32322d3234203d3e203238313034.roa (raw, json)
Hash identifier:          VDD92l/QXjkKeDlwWLxcwpgBhh1f5BMx4ene4oIaAV4=
Subject key identifier:   22:9B:2F:03:A4:A7:94:1C:14:94:F6:C8:57:CB:B8:21:9B:4C:FC:45
Certificate issuer:       /CN=07B279A78014BD804AEF302752B00CB986444A33
Certificate serial:       55BEE9BFBAB0A1B958BBBA2600781B6E290A7CBD
Authority key identifier: 07:B2:79:A7:80:14:BD:80:4A:EF:30:27:52:B0:0C:B9:86:44:4A:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07B279A78014BD804AEF302752B00CB986444A33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F99FF5801B2459EEC31A6FFF2D986852EF2EF686382661B869B9A371D6DF6E1/0/3133382e3138352e3230382e302f32322d3234203d3e203238313034.roa
Signing time:             Thu 25 Jun 2026 15:49:43 +0000
ROA not before:           Thu 25 Jun 2026 15:44:43 +0000
ROA not after:            Thu 24 Jun 2027 15:49:43 +0000
asID:                     28104
IP address blocks:        138.185.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F99FF5801B2459EEC31A6FFF2D986852EF2EF686382661B869B9A371D6DF6E1/0/07B279A78014BD804AEF302752B00CB986444A33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F99FF5801B2459EEC31A6FFF2D986852EF2EF686382661B869B9A371D6DF6E1/0/07B279A78014BD804AEF302752B00CB986444A33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07B279A78014BD804AEF302752B00CB986444A33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 03:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:be:e9:bf:ba:b0:a1:b9:58:bb:ba:26:00:78:1b:6e:29:0a:7c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07B279A78014BD804AEF302752B00CB986444A33
        Validity
            Not Before: Jun 25 15:44:43 2026 GMT
            Not After : Jun 24 15:49:43 2027 GMT
        Subject: CN=229B2F03A4A7941C1494F6C857CBB8219B4CFC45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:52:fb:bc:64:8e:2b:62:0a:95:09:ab:0c:d8:
                    ea:c4:ef:f6:17:83:c9:a6:f5:0a:02:43:bf:7a:cf:
                    51:69:d8:e0:63:19:78:7e:94:5c:68:25:fb:62:0c:
                    98:51:4c:ce:46:f9:13:66:62:04:63:bc:bb:9c:21:
                    44:b9:e8:0e:c8:ef:aa:3e:50:5b:24:c5:d2:a7:5c:
                    79:5a:85:f7:8d:30:73:70:49:27:5a:fd:14:38:64:
                    33:d5:05:42:7a:94:ac:95:30:d4:18:09:51:f5:e6:
                    38:b7:20:3e:40:43:40:aa:64:fa:19:1c:11:df:de:
                    b5:cb:8e:37:95:b7:47:47:3d:56:e5:fc:92:6b:13:
                    90:3a:ef:f7:25:6b:69:61:86:74:19:cd:33:53:70:
                    0e:fa:0a:66:80:b1:5b:a2:70:c1:d5:f1:32:a9:bd:
                    2a:5b:32:52:d4:a2:ca:81:c8:d0:f6:4e:11:20:8a:
                    28:52:ab:fd:a4:97:ec:75:b5:14:08:30:f9:c5:ab:
                    3e:0c:b2:03:b5:c6:f7:6e:8a:5f:b5:6e:c1:0f:b0:
                    21:7d:b2:f4:58:64:c0:96:af:76:cb:36:31:37:0f:
                    b1:1f:0c:d6:9e:d4:b1:a4:f7:51:d8:a2:36:e7:47:
                    f3:c1:f3:d1:9a:46:15:4c:b4:18:e6:0f:2a:15:b2:
                    1e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9B:2F:03:A4:A7:94:1C:14:94:F6:C8:57:CB:B8:21:9B:4C:FC:45
            X509v3 Authority Key Identifier:
                keyid:07:B2:79:A7:80:14:BD:80:4A:EF:30:27:52:B0:0C:B9:86:44:4A:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F99FF5801B2459EEC31A6FFF2D986852EF2EF686382661B869B9A371D6DF6E1/0/07B279A78014BD804AEF302752B00CB986444A33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07B279A78014BD804AEF302752B00CB986444A33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F99FF5801B2459EEC31A6FFF2D986852EF2EF686382661B869B9A371D6DF6E1/0/3133382e3138352e3230382e302f32322d3234203d3e203238313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:32:7e:5f:b5:02:6e:58:79:eb:35:e3:df:0e:d4:36:9d:de:
         e2:a7:1e:0a:6d:7c:4e:1b:a0:80:72:58:92:44:19:55:f5:69:
         e5:bc:93:9e:f2:67:f0:a6:56:9b:be:5c:5d:37:79:cd:0e:11:
         f3:ea:08:ef:36:2b:4d:6f:eb:ac:73:0e:42:a4:25:b2:fa:aa:
         e7:9f:39:d0:14:82:f3:96:2a:bc:b3:e7:ab:f1:d9:f8:cc:35:
         e7:bc:eb:12:97:8b:22:bd:d6:b4:0a:79:71:43:ef:e9:14:90:
         fb:9c:fe:ed:bc:e9:3b:c3:5b:a9:e0:e3:a8:8f:87:ee:87:b5:
         8a:07:22:ce:eb:b6:78:2f:59:4e:7f:df:99:b2:91:29:d2:96:
         5b:b3:e9:3e:4b:d6:f9:c1:eb:5b:68:04:47:dd:ed:5d:1c:bb:
         40:2a:49:1d:4f:60:01:27:f4:08:e9:1a:96:f8:c4:50:b7:01:
         4c:d1:e7:10:eb:03:4d:60:34:51:4b:48:5a:b0:80:fa:34:4c:
         e7:1e:8a:88:b5:0c:fc:59:3d:82:d6:3f:45:74:05:2a:36:aa:
         47:30:77:62:d4:08:54:51:0a:27:fc:c4:09:7b:f4:27:08:17:
         cd:dc:f0:e5:21:50:b2:51:fd:f5:89:9f:0a:59:20:5a:83:38:
         2e:37:f4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:32:13 2026 by rpki-client