Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/3133382e3131372e37362e3234302f32392d3239203d3e20323733393432.roa
File:                     3133382e3131372e37362e3234302f32392d3239203d3e20323733393432.roa (raw, json)
Hash identifier:          rmC4+2OVob4sgdnxKgYUY3/MT8pUgvupq6sbVEZNsb4=
Subject key identifier:   B8:93:77:CF:40:BC:A2:29:C5:96:21:86:31:F8:CE:43:E6:EA:1A:B9
Certificate issuer:       /CN=4B7687F569E5893215BAF86B72C4274237504316
Certificate serial:       15580A3390F2219909EA1943FEB5CD4215D06CD5
Authority key identifier: 4B:76:87:F5:69:E5:89:32:15:BA:F8:6B:72:C4:27:42:37:50:43:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B7687F569E5893215BAF86B72C4274237504316.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/3133382e3131372e37362e3234302f32392d3239203d3e20323733393432.roa
Signing time:             Wed 23 Sep 2026 19:36:29 +0000
ROA not before:           Wed 23 Sep 2026 19:31:29 +0000
ROA not after:            Wed 22 Sep 2027 19:36:29 +0000
asID:                     273942
IP address blocks:        138.117.76.240/29 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/4B7687F569E5893215BAF86B72C4274237504316.crl
                          rsync://repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/4B7687F569E5893215BAF86B72C4274237504316.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B7687F569E5893215BAF86B72C4274237504316.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 11:50:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:58:0a:33:90:f2:21:99:09:ea:19:43:fe:b5:cd:42:15:d0:6c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B7687F569E5893215BAF86B72C4274237504316
        Validity
            Not Before: Sep 23 19:31:29 2026 GMT
            Not After : Sep 22 19:36:29 2027 GMT
        Subject: CN=B89377CF40BCA229C596218631F8CE43E6EA1AB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:95:82:be:c5:a8:e3:5d:cb:f0:d3:e7:c8:a4:
                    d2:1e:19:b7:22:02:51:b2:61:9f:2b:92:f5:c2:2e:
                    2e:fa:b9:4d:76:33:25:08:e8:4d:fe:51:70:3f:84:
                    88:99:cc:a7:8c:9f:45:76:32:a2:2b:40:a2:43:f1:
                    b8:57:6d:fc:2f:d4:ac:03:79:10:20:06:4a:c7:c8:
                    a7:0e:39:77:5e:2d:27:27:0f:f3:d3:43:f2:ad:b9:
                    ff:52:e5:97:16:90:d5:1a:db:a9:95:1d:67:ae:35:
                    af:61:b2:bb:58:bc:e5:73:48:02:ac:c0:73:3c:50:
                    d1:90:bc:ea:74:53:45:c0:5c:c5:f6:b5:c5:76:45:
                    48:b4:fe:1b:29:5e:a4:1d:eb:3e:d8:1c:d1:6c:1f:
                    89:67:fc:da:b2:5b:f3:63:73:bc:d3:29:47:f2:6f:
                    58:ff:8e:0c:ad:2c:72:66:16:bf:9c:6e:a8:c8:ad:
                    57:ff:46:b6:35:1b:1a:84:67:44:ad:6b:16:c3:69:
                    0d:d4:a4:0b:3e:7b:ad:cb:32:36:77:ee:2e:23:cc:
                    31:b8:0e:c6:02:bc:1c:e0:55:74:9b:d5:4a:2d:c8:
                    80:23:a8:a8:48:8e:7d:8f:49:6d:62:3d:0b:dd:b2:
                    cd:13:5c:12:e7:32:b4:c8:cc:cf:9b:a1:ae:17:94:
                    aa:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:93:77:CF:40:BC:A2:29:C5:96:21:86:31:F8:CE:43:E6:EA:1A:B9
            X509v3 Authority Key Identifier:
                keyid:4B:76:87:F5:69:E5:89:32:15:BA:F8:6B:72:C4:27:42:37:50:43:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/4B7687F569E5893215BAF86B72C4274237504316.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B7687F569E5893215BAF86B72C4274237504316.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/3133382e3131372e37362e3234302f32392d3239203d3e20323733393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.76.240/29

    Signature Algorithm: sha256WithRSAEncryption
         39:bb:b6:06:82:d9:a1:a3:90:fa:ca:4a:9d:29:e0:17:bf:59:
         bd:e5:7d:d1:b9:b2:01:ba:23:f4:9b:da:3c:29:e5:67:50:7c:
         e7:bb:46:e8:90:89:32:a7:0c:1d:e5:c3:2d:7f:fa:5c:ae:0d:
         1a:9d:3a:b0:99:c9:d3:d1:80:74:64:bc:8e:33:fa:27:87:93:
         e5:55:41:27:50:89:5f:e7:24:df:c4:f8:c8:a5:7b:aa:82:d7:
         03:bd:7a:af:28:8a:0f:f3:0b:b6:6c:d3:6a:3a:c6:17:5d:e5:
         de:e5:1f:c4:55:aa:3f:05:f1:99:25:cb:b2:72:8e:1a:9a:65:
         c9:c4:00:92:a6:91:8b:e0:80:33:67:62:90:26:ea:17:41:2f:
         91:07:b7:f7:82:9d:78:40:37:d5:ec:65:b9:29:f9:57:3e:5d:
         f6:17:b0:50:49:47:81:21:d5:ca:dd:2e:fb:d0:c4:24:03:77:
         d6:1a:e3:4d:49:09:cb:d9:28:3a:1d:bf:e8:43:18:61:85:39:
         d7:0d:db:eb:b0:d1:8a:78:a4:c0:a1:14:87:08:63:21:cb:04:
         90:02:08:df:7f:05:f8:c7:19:37:cf:57:33:72:9a:3a:83:24:
         43:43:a4:5d:77:94:6c:1f:ef:cf:d3:dd:9d:85:71:ae:56:42:
         1c:cb:af:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:38:31 2026 by rpki-client