Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132322e3234372e302f32342d3234203d3e203238333137.roa
File:                     3133382e3132322e3234372e302f32342d3234203d3e203238333137.roa (raw, json)
Hash identifier:          rpmCDHoCIqGe7T3028Q3P1js7vYt/2URGQPF6UhQjHs=
Subject key identifier:   EF:B3:0A:AF:24:B4:3F:78:0F:8D:65:50:35:02:CA:AA:A8:49:79:45
Certificate issuer:       /CN=858889372446EF678E35E9D349C0785A81B8FBB7
Certificate serial:       1300C2CE7DF13443800A671E1FDEA3018549FF03
Authority key identifier: 85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132322e3234372e302f32342d3234203d3e203238333137.roa
Signing time:             Fri 17 Jul 2026 05:00:36 +0000
ROA not before:           Fri 17 Jul 2026 04:55:36 +0000
ROA not after:            Fri 16 Jul 2027 05:00:36 +0000
asID:                     28317
IP address blocks:        138.122.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:00:c2:ce:7d:f1:34:43:80:0a:67:1e:1f:de:a3:01:85:49:ff:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=858889372446EF678E35E9D349C0785A81B8FBB7
        Validity
            Not Before: Jul 17 04:55:36 2026 GMT
            Not After : Jul 16 05:00:36 2027 GMT
        Subject: CN=EFB30AAF24B43F780F8D65503502CAAAA8497945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:75:5d:01:01:9f:3a:9f:14:2c:b9:32:c9:29:
                    ae:22:43:53:2a:69:b7:e3:f9:32:6b:26:10:2c:e3:
                    a7:11:7b:22:7d:cf:b7:3f:2d:94:9b:41:b4:4f:24:
                    45:04:33:ee:09:5a:a8:8a:f7:d0:ae:10:cb:77:86:
                    b8:54:75:d4:75:cc:7a:6a:35:a9:5c:44:dd:39:68:
                    b8:84:32:bb:74:9b:08:ba:03:90:0f:70:18:9f:22:
                    90:9e:b0:89:a5:66:eb:df:66:09:f6:b3:8c:b9:72:
                    f3:58:b4:f9:fc:f3:71:57:c4:fc:bd:b5:45:26:8e:
                    9d:a8:b5:06:61:63:52:fd:17:71:e1:91:a9:7f:54:
                    c5:31:3e:e1:bf:37:bd:40:68:11:9c:bf:1f:85:a6:
                    76:92:1d:44:52:4d:d8:1e:23:a7:d7:b5:bd:a6:df:
                    e4:e8:01:e1:12:ad:d9:06:47:96:e6:59:9e:d1:9b:
                    04:4d:1a:6a:a4:13:c9:fb:17:98:75:95:2d:cb:3d:
                    45:78:9b:62:a8:5e:5e:30:4b:71:7c:8f:88:d9:33:
                    2d:b7:4a:af:9b:21:71:ff:b6:df:7f:ea:13:46:27:
                    e7:6b:40:5d:df:d0:df:ce:63:5e:71:4e:1a:90:bc:
                    4f:91:42:fc:41:11:b0:14:89:0c:eb:4c:8c:36:ab:
                    98:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B3:0A:AF:24:B4:3F:78:0F:8D:65:50:35:02:CA:AA:A8:49:79:45
            X509v3 Authority Key Identifier:
                keyid:85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132322e3234372e302f32342d3234203d3e203238333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:b5:67:69:99:8c:90:e5:48:b7:0d:e0:17:80:1c:cb:bc:6f:
         5b:c9:37:55:e9:c5:c8:52:dc:17:98:0c:32:32:b2:c7:af:93:
         ca:19:0d:51:80:9c:c6:90:5f:b5:c4:78:dc:98:a8:91:14:e7:
         8b:30:03:c8:2d:70:b2:bf:50:33:82:61:10:89:f0:6d:51:3f:
         72:ad:be:6b:ae:4e:6e:27:3b:b8:db:05:18:2c:dd:9f:3f:ea:
         9b:f9:45:27:b9:d0:70:a5:1b:5a:41:27:4b:6b:a6:dc:95:2b:
         cf:b7:aa:45:eb:fe:e5:9c:89:06:ff:3a:29:26:94:19:6f:ab:
         df:1d:ab:5d:8d:da:b3:2c:e9:ff:14:72:40:ee:2a:e0:ef:64:
         6f:79:ad:ca:48:b4:39:7e:87:ec:84:e5:ff:2f:63:53:b1:3a:
         67:36:36:df:d3:d9:4b:30:3e:0a:33:d6:4e:5f:62:66:37:d1:
         b7:b0:74:07:cd:45:58:13:b9:48:4d:eb:32:f5:33:35:22:8c:
         df:02:06:47:cc:71:7f:64:a8:1d:15:74:e3:56:ce:df:e1:a2:
         8c:d1:37:a8:e6:5b:93:ea:ed:45:40:c3:0c:ee:65:7a:59:ac:
         db:56:98:b3:16:58:e8:49:cc:0f:c6:e9:e0:7e:30:20:73:d1:
         c5:a2:87:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:06:35 2026 by rpki-client