Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45F452914C03FE67B267035F4F43DA68A9B91C23B85FB0A95A509436B4634EC7/0/3133382e33362e3134362e302f32342d3234203d3e20323639383739.roa
File:                     3133382e33362e3134362e302f32342d3234203d3e20323639383739.roa (raw, json)
Hash identifier:          gmIVpew+7lUh7QfuP0nDJ7z4uPPXJJ9+RfLk1zXNn0o=
Subject key identifier:   88:27:A4:22:65:66:A7:98:21:71:43:19:94:AA:B3:87:E1:A8:25:5A
Certificate issuer:       /CN=0876357D23A3C9EA0B1482697310BD71CC75DCA7
Certificate serial:       2ADBEFB64AF9DFDBC03DBD8CC102A97CAB9015C4
Authority key identifier: 08:76:35:7D:23:A3:C9:EA:0B:14:82:69:73:10:BD:71:CC:75:DC:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0876357D23A3C9EA0B1482697310BD71CC75DCA7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45F452914C03FE67B267035F4F43DA68A9B91C23B85FB0A95A509436B4634EC7/0/3133382e33362e3134362e302f32342d3234203d3e20323639383739.roa
Signing time:             Fri 10 Jul 2026 00:40:00 +0000
ROA not before:           Fri 10 Jul 2026 00:35:00 +0000
ROA not after:            Fri 09 Jul 2027 00:40:00 +0000
asID:                     269879
IP address blocks:        138.36.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/45F452914C03FE67B267035F4F43DA68A9B91C23B85FB0A95A509436B4634EC7/0/0876357D23A3C9EA0B1482697310BD71CC75DCA7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/45F452914C03FE67B267035F4F43DA68A9B91C23B85FB0A95A509436B4634EC7/0/0876357D23A3C9EA0B1482697310BD71CC75DCA7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0876357D23A3C9EA0B1482697310BD71CC75DCA7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:db:ef:b6:4a:f9:df:db:c0:3d:bd:8c:c1:02:a9:7c:ab:90:15:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0876357D23A3C9EA0B1482697310BD71CC75DCA7
        Validity
            Not Before: Jul 10 00:35:00 2026 GMT
            Not After : Jul  9 00:40:00 2027 GMT
        Subject: CN=8827A4226566A7982171431994AAB387E1A8255A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:6d:7b:97:19:3d:d5:97:0c:a2:c8:14:92:
                    e3:41:12:36:b3:07:4a:9e:94:bd:6e:53:55:18:6f:
                    22:6b:31:b2:a6:5b:c9:f8:e6:a5:bb:de:10:8d:26:
                    37:68:22:59:4a:97:43:05:eb:b1:97:64:69:14:f2:
                    fc:9b:66:38:60:bd:3f:c3:27:be:c5:11:88:87:c5:
                    a7:13:13:b4:8d:6e:c0:a4:94:70:1c:1a:5b:0f:c9:
                    85:2c:b0:4b:72:d2:08:4f:15:f1:95:05:4a:27:61:
                    55:36:af:b0:65:76:db:7a:7f:6f:27:b3:63:29:c9:
                    c8:1f:27:a8:fb:81:5f:08:ff:a1:97:74:32:b1:43:
                    5b:17:8f:67:52:a2:b3:63:3e:8d:2b:26:37:0d:04:
                    30:a6:43:80:e1:9b:4c:5a:59:15:bf:d4:e6:f4:bc:
                    62:23:be:c7:f4:ab:22:5f:b3:9e:8b:39:7a:03:65:
                    0f:7d:b6:a6:b8:e2:cf:cf:c8:1d:d7:0a:5f:5e:00:
                    56:5d:ff:d3:eb:54:a9:74:3f:c2:44:ff:df:64:3b:
                    d8:a4:92:37:88:18:20:38:ec:d2:4a:23:2a:ba:5b:
                    c5:e1:ae:01:68:62:63:17:9e:cd:48:99:c5:6c:9a:
                    93:61:27:18:ed:39:9e:17:0e:d2:14:39:e1:0b:82:
                    f7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:27:A4:22:65:66:A7:98:21:71:43:19:94:AA:B3:87:E1:A8:25:5A
            X509v3 Authority Key Identifier:
                keyid:08:76:35:7D:23:A3:C9:EA:0B:14:82:69:73:10:BD:71:CC:75:DC:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45F452914C03FE67B267035F4F43DA68A9B91C23B85FB0A95A509436B4634EC7/0/0876357D23A3C9EA0B1482697310BD71CC75DCA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0876357D23A3C9EA0B1482697310BD71CC75DCA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45F452914C03FE67B267035F4F43DA68A9B91C23B85FB0A95A509436B4634EC7/0/3133382e33362e3134362e302f32342d3234203d3e20323639383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:07:30:b8:67:eb:60:38:76:91:07:bd:69:66:b6:3c:5a:e1:
         07:80:42:bf:01:c2:3f:99:97:5f:b3:68:1d:b7:95:b5:46:e2:
         2f:5a:03:1c:ec:f4:5c:9d:2d:48:e7:ff:c6:e5:68:c6:99:cc:
         f5:f3:2f:e7:fa:95:82:fd:49:12:4f:d1:84:43:6f:33:ff:97:
         20:98:78:bd:66:d0:ca:82:f4:e8:c9:d0:c7:f4:07:5a:bd:e6:
         9f:f4:03:18:e4:e0:98:67:e6:58:1b:f0:15:0a:41:05:e0:0f:
         7a:6c:2b:73:b4:a9:13:97:1f:b6:79:d1:ae:d9:f0:43:72:a6:
         3a:4b:b2:43:94:f2:2b:ba:75:ad:89:f3:dc:42:28:74:50:ef:
         93:81:65:16:aa:61:66:11:a4:ce:6c:52:6c:35:d1:df:fa:3e:
         09:72:10:db:4b:e0:64:b8:a8:0a:41:49:74:6a:66:2d:85:58:
         3e:39:50:20:b8:20:0a:97:d2:21:0c:3b:d5:10:37:33:6c:8f:
         6f:10:43:db:1e:0f:fa:8c:9b:a8:ab:35:19:7b:bd:40:f9:f1:
         82:0b:9e:00:ff:8b:9d:0e:49:4d:65:2e:6a:33:d9:76:7a:f9:
         8f:d9:c9:12:c5:9b:b4:eb:0e:e0:d8:cc:e8:ad:74:e1:cf:30:
         a1:71:88:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:44:33 2026 by rpki-client