Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F99FF5801B2459EEC31A6FFF2D986852EF2EF686382661B869B9A371D6DF6E1/0/3133382e3138352e3230382e302f32322d3234203d3e203238313034.roa
File:                     3133382e3138352e3230382e302f32322d3234203d3e203238313034.roa (raw, json)
Hash identifier:          dQLbc3gprtQ1GDPs+pvEES3p2jdntTEV1hELEfLegOg=
Subject key identifier:   C0:59:61:81:17:9F:08:D3:13:55:F6:BB:85:D9:78:72:FD:26:D8:F4
Certificate issuer:       /CN=07B279A78014BD804AEF302752B00CB986444A33
Certificate serial:       437C19E3EBEE301E92705BC8800950967D13CADD
Authority key identifier: 07:B2:79:A7:80:14:BD:80:4A:EF:30:27:52:B0:0C:B9:86:44:4A:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07B279A78014BD804AEF302752B00CB986444A33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F99FF5801B2459EEC31A6FFF2D986852EF2EF686382661B869B9A371D6DF6E1/0/3133382e3138352e3230382e302f32322d3234203d3e203238313034.roa
Signing time:             Thu 24 Jul 2025 15:26:32 +0000
ROA not before:           Thu 24 Jul 2025 15:21:32 +0000
ROA not after:            Thu 23 Jul 2026 15:26:32 +0000
asID:                     28104
IP address blocks:        138.185.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F99FF5801B2459EEC31A6FFF2D986852EF2EF686382661B869B9A371D6DF6E1/0/07B279A78014BD804AEF302752B00CB986444A33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F99FF5801B2459EEC31A6FFF2D986852EF2EF686382661B869B9A371D6DF6E1/0/07B279A78014BD804AEF302752B00CB986444A33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07B279A78014BD804AEF302752B00CB986444A33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:7c:19:e3:eb:ee:30:1e:92:70:5b:c8:80:09:50:96:7d:13:ca:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07B279A78014BD804AEF302752B00CB986444A33
        Validity
            Not Before: Jul 24 15:21:32 2025 GMT
            Not After : Jul 23 15:26:32 2026 GMT
        Subject: CN=C0596181179F08D31355F6BB85D97872FD26D8F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:92:bb:65:2f:25:81:c8:da:2a:ca:86:6a:32:
                    aa:19:fb:36:97:e7:58:f7:cf:c5:47:55:c7:7b:26:
                    7c:b1:a8:e7:b5:13:8e:75:ec:80:67:4e:f5:40:d4:
                    b6:d9:ea:9b:f5:bb:fb:39:b3:5c:29:03:24:ef:fb:
                    dc:12:74:a4:6a:1a:67:78:ae:12:00:75:6b:5b:93:
                    b4:10:32:37:c8:0f:21:aa:33:83:fd:c1:45:f6:44:
                    79:fd:bd:b1:8a:e7:3e:42:c0:72:0f:71:a4:e8:d3:
                    b2:4e:cf:fe:c6:39:e5:10:90:90:89:f8:be:fd:f0:
                    b2:bf:d3:11:a4:0b:8f:d0:58:73:c4:e8:0a:a2:c4:
                    b6:6f:f1:2c:bc:3a:cc:7b:13:82:9b:5c:17:f6:67:
                    18:09:7e:aa:bd:05:cc:1d:44:6f:1b:1f:ad:24:2f:
                    de:f2:9d:a0:6b:2d:fd:ba:35:31:57:b7:ac:5e:2c:
                    a2:56:dd:01:e8:a8:14:d1:fc:e3:d1:0e:8d:66:62:
                    24:15:b4:0b:ef:34:15:bb:f8:0e:95:23:c0:90:cc:
                    9e:9b:2e:68:3a:1a:83:cd:78:a3:34:e2:d1:20:38:
                    8d:7a:08:9a:da:ce:3d:2b:78:b2:19:ff:e8:c0:97:
                    60:e8:f9:a3:29:20:bb:4a:4d:03:2a:95:ae:10:e3:
                    ce:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:59:61:81:17:9F:08:D3:13:55:F6:BB:85:D9:78:72:FD:26:D8:F4
            X509v3 Authority Key Identifier:
                keyid:07:B2:79:A7:80:14:BD:80:4A:EF:30:27:52:B0:0C:B9:86:44:4A:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F99FF5801B2459EEC31A6FFF2D986852EF2EF686382661B869B9A371D6DF6E1/0/07B279A78014BD804AEF302752B00CB986444A33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07B279A78014BD804AEF302752B00CB986444A33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F99FF5801B2459EEC31A6FFF2D986852EF2EF686382661B869B9A371D6DF6E1/0/3133382e3138352e3230382e302f32322d3234203d3e203238313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:51:95:ff:0a:5d:fb:fb:fb:16:0f:66:a0:75:2b:6c:79:d2:
         94:69:09:a9:e7:22:f9:5b:42:3a:1b:f7:be:01:8d:ac:0e:6d:
         73:1c:b9:fd:cc:94:aa:04:d4:e3:c1:39:c8:72:9c:ee:50:f9:
         47:15:7c:20:53:07:f0:ef:ab:eb:41:ff:00:29:d4:95:f0:92:
         c0:5c:7a:72:93:99:e8:ef:ae:2f:c1:41:38:0a:49:e3:99:35:
         2d:fd:3b:a2:83:2f:76:6a:82:84:ed:b7:c2:cf:35:8e:f0:47:
         9a:7b:a1:21:df:76:67:2d:40:ed:bc:28:d3:61:10:cb:d8:19:
         e1:6f:f1:5d:93:a5:03:0f:8d:93:c5:2e:b6:2f:e5:ae:63:2e:
         e3:ab:fc:ad:e7:1e:f0:6b:98:f2:17:1a:33:60:69:9e:10:f8:
         c5:2a:e8:45:85:71:14:f8:55:5e:15:ec:28:75:e5:ed:68:db:
         f3:db:8e:7d:ee:0d:39:7a:6a:b4:b0:64:2e:df:88:1f:9c:4f:
         b1:76:96:eb:be:09:04:66:77:dd:7a:79:e7:a6:ee:8a:e9:e3:
         65:56:50:be:e3:b9:92:cf:c2:f6:02:cd:3f:f8:8c:bb:13:2a:
         4b:67:f2:d6:e4:88:9d:a8:bb:fa:f8:d6:5c:0b:67:66:cf:4d:
         83:8d:9b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:38:19 2025 by rpki-client