Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/3133382e3138362e36372e302f32342d3234203d3e203238343035.roa
File:                     3133382e3138362e36372e302f32342d3234203d3e203238343035.roa (raw, json)
Hash identifier:          r2wZFViTHP6rKcXn87CvQV2iv57EvQ0ymHshGBgKR6U=
Subject key identifier:   FA:00:28:11:D4:4B:5E:7C:C8:15:8D:FE:CF:93:32:DA:5B:E0:D1:4D
Certificate issuer:       /CN=78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7
Certificate serial:       2EA6099E23387E6F8318F090D0B39E63F7A89C5F
Authority key identifier: 78:A6:FD:AE:32:5A:33:5A:2C:C8:9A:8D:2F:CB:2F:98:8B:8A:2C:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/3133382e3138362e36372e302f32342d3234203d3e203238343035.roa
Signing time:             Mon 21 Sep 2026 16:36:15 +0000
ROA not before:           Mon 21 Sep 2026 16:31:15 +0000
ROA not after:            Mon 20 Sep 2027 16:36:15 +0000
asID:                     28405
IP address blocks:        138.186.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 19:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a6:09:9e:23:38:7e:6f:83:18:f0:90:d0:b3:9e:63:f7:a8:9c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7
        Validity
            Not Before: Sep 21 16:31:15 2026 GMT
            Not After : Sep 20 16:36:15 2027 GMT
        Subject: CN=FA002811D44B5E7CC8158DFECF9332DA5BE0D14D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:4a:7d:dd:fa:11:7f:36:f5:08:89:71:ed:
                    09:17:9a:6a:7d:5f:6f:f6:68:aa:8b:7e:2d:92:a7:
                    0e:37:ca:30:f7:42:31:5e:ca:2d:c6:82:ea:0f:9a:
                    75:1b:ee:04:79:cd:4b:95:47:07:31:1f:e7:c0:77:
                    53:1f:d8:14:d6:a9:e7:ae:bb:fd:2f:4a:5a:ad:bd:
                    5b:b4:17:01:bc:a4:99:02:ca:03:9d:ac:54:fc:d3:
                    c1:eb:50:53:6e:33:4b:90:a5:64:45:cd:a3:ed:c5:
                    da:07:30:a6:56:33:d3:08:8b:2d:91:38:a8:c5:35:
                    46:1d:bf:78:10:ee:66:4d:8c:3f:d8:14:c6:3e:9a:
                    63:7a:7e:36:f1:36:56:8a:fe:db:8c:ed:9c:37:a4:
                    bc:57:7d:b1:60:78:06:81:4d:23:d9:f6:a7:9a:0a:
                    d8:99:f8:b1:ee:d9:ea:ac:b4:5f:fa:2f:ef:92:04:
                    34:ee:ac:4d:ef:60:47:e8:e9:41:61:bd:20:6f:0a:
                    a1:67:8c:c2:12:e2:70:5c:9f:84:44:4f:25:a2:67:
                    54:76:75:ce:6e:61:75:cb:df:d3:c7:a7:79:66:a6:
                    e2:f8:86:12:bc:69:74:d9:11:6e:05:7c:2c:9a:ea:
                    4f:d3:c3:b0:40:d8:9b:b8:1d:2c:34:c7:4c:11:a4:
                    8f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:00:28:11:D4:4B:5E:7C:C8:15:8D:FE:CF:93:32:DA:5B:E0:D1:4D
            X509v3 Authority Key Identifier:
                keyid:78:A6:FD:AE:32:5A:33:5A:2C:C8:9A:8D:2F:CB:2F:98:8B:8A:2C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/3133382e3138362e36372e302f32342d3234203d3e203238343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:ca:60:62:a1:c7:9e:76:37:4f:9c:ad:28:ea:be:e6:68:d1:
         fa:0e:bb:6c:33:37:a3:5b:b0:0d:b2:7c:29:40:97:98:6a:be:
         31:c1:ef:65:98:9c:65:de:2a:4c:42:25:fa:ed:e7:82:c5:e7:
         71:60:9b:87:7f:35:63:95:f3:73:fc:c2:27:09:a9:1a:81:08:
         bc:24:f1:0c:9a:22:ab:ed:3e:bc:4f:22:91:ba:80:2f:9f:b2:
         21:ec:cf:bb:2d:f8:e3:23:3b:a1:30:49:b3:26:6a:0b:56:5f:
         cf:87:cf:a0:b6:b7:72:90:3b:5e:32:ff:c5:9f:e0:4a:65:f2:
         75:00:74:8a:f3:2a:6c:bc:21:b7:61:f8:46:6c:48:ed:aa:ea:
         3f:33:4b:a1:4c:2e:15:da:7b:e6:7c:80:f3:af:d1:31:bf:93:
         fb:9c:5a:b7:bf:c7:20:03:71:76:0b:f0:6f:c8:be:69:7c:91:
         2f:05:f8:4b:e7:97:88:be:4b:e3:b7:4d:dc:0b:5c:ad:10:7f:
         14:9f:f4:ea:2e:47:51:b4:fb:54:10:75:1c:47:3a:24:85:f8:
         fe:fb:38:fb:bb:81:09:dc:ec:98:51:ab:06:4d:1f:a3:50:73:
         7c:b8:3f:d7:58:23:e2:c0:e4:d5:40:12:de:76:fe:a6:21:40:
         cc:24:d7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 18:42:03 2026 by rpki-client