Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132322e3234342e302f32342d3234203d3e20323633373936.roa
File:                     3133382e3132322e3234342e302f32342d3234203d3e20323633373936.roa (raw, json)
Hash identifier:          4PWOD1hNiRJs1VvEGgIR7WDKIo47rVJ8QgXhqYEMPyg=
Subject key identifier:   2F:BD:CC:01:5A:41:1F:21:28:23:B5:B2:20:04:5F:EF:50:D0:46:6E
Certificate issuer:       /CN=858889372446EF678E35E9D349C0785A81B8FBB7
Certificate serial:       7AEA4DDEF7F43689CCDA586157509DFD729FF9E5
Authority key identifier: 85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132322e3234342e302f32342d3234203d3e20323633373936.roa
Signing time:             Tue 09 Sep 2025 15:44:03 +0000
ROA not before:           Tue 09 Sep 2025 15:39:03 +0000
ROA not after:            Tue 08 Sep 2026 15:44:03 +0000
asID:                     263796
IP address blocks:        138.122.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Oct 2025 08:44:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ea:4d:de:f7:f4:36:89:cc:da:58:61:57:50:9d:fd:72:9f:f9:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=858889372446EF678E35E9D349C0785A81B8FBB7
        Validity
            Not Before: Sep  9 15:39:03 2025 GMT
            Not After : Sep  8 15:44:03 2026 GMT
        Subject: CN=2FBDCC015A411F212823B5B220045FEF50D0466E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:27:3a:b4:61:89:ec:d4:a3:d0:51:5d:b1:9c:
                    15:37:58:b6:cc:15:44:0a:a3:a9:56:67:b4:fa:5c:
                    2b:eb:5f:26:ad:d5:7e:6d:3f:fa:c5:88:84:d8:35:
                    cb:33:1b:b5:14:1d:e4:38:ad:81:31:1f:42:0e:51:
                    b5:19:2c:f5:90:cc:39:d2:2c:1d:3a:f5:fd:b6:f9:
                    94:79:6f:ab:25:ca:d8:7d:1c:cb:cd:2a:15:ba:ec:
                    b5:1d:5d:85:02:ca:22:56:83:be:a1:b1:8b:f8:81:
                    26:6a:96:44:c3:ad:51:2b:bc:73:9f:b7:a1:de:53:
                    b5:7d:4d:57:95:34:bb:e4:e7:76:10:77:fe:c0:e2:
                    d4:f8:2c:51:cd:70:d1:97:65:af:f0:09:6f:79:b0:
                    ff:3f:61:b0:b3:a7:91:9c:31:c1:64:35:0c:49:90:
                    20:c9:b2:e4:90:34:32:c6:27:11:c9:f0:6a:b4:cb:
                    85:88:93:8b:1b:d3:eb:3e:2c:4e:a9:01:73:41:13:
                    ca:c3:27:9a:7e:f2:e0:cc:28:60:2d:22:ba:03:e6:
                    fb:85:e9:79:db:ba:51:aa:57:85:b3:38:f4:bd:82:
                    bd:ae:d2:95:9a:f8:17:56:1c:c7:62:37:c1:f4:21:
                    be:87:44:4f:94:e9:61:a4:93:cf:76:2b:11:9c:52:
                    a0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BD:CC:01:5A:41:1F:21:28:23:B5:B2:20:04:5F:EF:50:D0:46:6E
            X509v3 Authority Key Identifier:
                keyid:85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132322e3234342e302f32342d3234203d3e20323633373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:40:fc:c0:8d:c6:68:44:9f:36:4a:d0:05:0b:5c:17:4b:ca:
         f3:a5:7c:77:20:43:b3:e9:ee:f1:7c:db:ec:ae:f9:c1:42:79:
         13:55:18:11:37:62:65:b2:33:07:cb:94:33:2c:b3:5c:bc:75:
         c1:4b:ea:b2:4b:74:b3:a9:50:84:20:01:b0:27:19:5b:d6:37:
         c9:44:c7:38:f0:1f:d3:ee:a9:7f:9c:2a:42:3c:7c:6d:e9:51:
         23:ce:7f:04:34:ec:5b:d6:49:ef:f1:35:dd:22:70:47:03:e4:
         2d:66:a4:07:38:f2:d2:05:5d:52:8e:52:2f:ae:9e:67:6c:87:
         a6:d0:83:55:6b:fe:37:62:f5:24:3e:12:6d:13:6a:33:16:ad:
         7e:a4:d9:95:95:f8:ea:89:59:08:f3:1a:9d:fa:98:5a:ca:9b:
         0e:1b:76:58:d6:64:99:d8:68:0d:47:99:2c:f0:c8:2a:9a:46:
         07:92:58:81:70:51:47:f3:3f:14:1c:9b:4d:6b:95:0c:92:6e:
         76:78:11:01:3a:9f:7f:55:ad:b9:12:c6:de:8e:3b:63:02:3d:
         54:69:d4:a3:24:18:de:53:44:07:8f:fb:d7:db:56:86:c0:7c:
         25:1e:11:42:d5:ff:00:7f:f7:81:69:2b:81:e8:2a:5b:bc:ea:
         03:4d:ce:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:36:53 2025 by rpki-client