Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3232382e302f32322d3234203d3e20323633373832.roa
File:                     3133382e3132312e3232382e302f32322d3234203d3e20323633373832.roa (raw, json)
Hash identifier:          OkqvDIgqLKbSPP/5dqNsi2+yM6cS+M4SdLIarRXXuyQ=
Subject key identifier:   4C:4D:D2:0A:50:D1:2F:EE:16:9D:58:94:B7:D2:A3:18:41:3E:D8:E3
Certificate issuer:       /CN=9546A908853C34D10445938EC0A727E092D120C7
Certificate serial:       409F4CC082A6F6503784CD8F833CE13A2A1C05B8
Authority key identifier: 95:46:A9:08:85:3C:34:D1:04:45:93:8E:C0:A7:27:E0:92:D1:20:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9546A908853C34D10445938EC0A727E092D120C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3232382e302f32322d3234203d3e20323633373832.roa
Signing time:             Fri 08 May 2026 14:45:00 +0000
ROA not before:           Fri 08 May 2026 14:40:00 +0000
ROA not after:            Fri 07 May 2027 14:45:00 +0000
asID:                     263782
IP address blocks:        138.121.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/9546A908853C34D10445938EC0A727E092D120C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/9546A908853C34D10445938EC0A727E092D120C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9546A908853C34D10445938EC0A727E092D120C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:9f:4c:c0:82:a6:f6:50:37:84:cd:8f:83:3c:e1:3a:2a:1c:05:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9546A908853C34D10445938EC0A727E092D120C7
        Validity
            Not Before: May  8 14:40:00 2026 GMT
            Not After : May  7 14:45:00 2027 GMT
        Subject: CN=4C4DD20A50D12FEE169D5894B7D2A318413ED8E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:af:f4:d8:cf:d3:41:51:bc:27:aa:31:a9:15:
                    c2:44:4d:5b:79:e1:8c:34:63:09:24:f6:1b:d9:e5:
                    53:8c:ad:45:63:d3:70:74:20:e1:56:62:ae:fc:c8:
                    b8:29:eb:7f:df:eb:40:3b:fa:33:3f:2d:4f:fd:7c:
                    02:78:a6:49:17:84:da:c8:b9:fd:48:1f:31:a7:de:
                    26:80:a1:28:60:72:4d:46:e1:92:ea:23:65:97:49:
                    4c:c0:9b:6e:03:c6:be:41:c1:60:de:9f:ca:69:80:
                    d8:77:0e:04:a8:80:5b:50:8b:ab:ae:16:f9:e7:39:
                    c0:ce:4a:a5:83:de:8e:d3:d3:d8:6a:24:1c:9c:a3:
                    fa:f1:4b:f7:e7:95:84:01:b8:00:59:1c:0d:93:29:
                    17:fd:08:12:3d:65:d7:47:8b:d8:25:93:2c:a0:b9:
                    1d:12:83:be:cf:96:8c:97:e0:15:a1:5c:a2:ca:44:
                    dc:bc:a5:ea:25:79:66:42:d8:80:9c:dd:a3:b3:92:
                    d2:5e:ad:8b:14:04:ca:8c:20:65:b5:12:3d:b3:84:
                    75:e0:4b:f8:c6:5b:3a:49:c1:12:6a:62:48:c3:00:
                    fc:e6:70:c4:6b:88:23:79:52:1c:8f:14:40:33:33:
                    52:cf:80:d0:28:f4:30:81:6d:9a:0c:10:e6:b7:6d:
                    1b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4D:D2:0A:50:D1:2F:EE:16:9D:58:94:B7:D2:A3:18:41:3E:D8:E3
            X509v3 Authority Key Identifier:
                keyid:95:46:A9:08:85:3C:34:D1:04:45:93:8E:C0:A7:27:E0:92:D1:20:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/9546A908853C34D10445938EC0A727E092D120C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9546A908853C34D10445938EC0A727E092D120C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3232382e302f32322d3234203d3e20323633373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:30:4e:f1:51:ea:90:64:d4:f1:e6:9d:8f:23:4d:75:e1:a0:
         0b:e2:90:ab:89:41:a1:ec:a3:06:22:b2:a1:7d:06:ba:b1:76:
         ed:80:4d:2e:8b:11:b7:a1:42:9b:62:75:7d:85:34:a8:60:ce:
         e9:5a:87:5e:41:09:04:b7:ee:28:64:4d:49:92:11:7a:03:7f:
         d8:fa:bc:57:32:35:a7:37:e8:15:5b:d8:6a:a3:14:2e:23:7c:
         f8:8c:a9:1d:59:2c:ae:09:80:12:c4:0b:6f:73:18:a5:89:85:
         57:db:1f:dd:a0:d6:94:c8:ac:5b:28:8d:22:72:bd:32:cf:c3:
         c6:3f:48:5a:9f:97:f9:b1:73:20:17:8c:7b:a5:5a:e7:eb:51:
         a2:d0:58:0e:ee:32:a1:25:71:cb:8c:4b:bf:7e:74:46:b5:b4:
         7a:fa:0f:a3:7d:f1:50:24:66:59:15:c5:b1:bb:49:ea:3f:9c:
         89:57:1b:e9:6b:bf:69:db:2b:9f:36:f0:27:fd:b4:74:d7:8c:
         21:e4:79:df:b6:60:c1:eb:1f:64:13:e7:2c:5d:94:1c:b7:76:
         a9:5c:72:c9:fe:0f:a1:9d:fe:60:4e:eb:fd:22:b6:6f:4e:73:
         ae:a5:4e:e3:a8:42:48:6f:c6:7b:c8:ef:e3:5a:a0:3e:ff:4a:
         8b:30:83:60
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUQJ9MwIKm9lA3hM2PgzzhOiocBbgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU0NkE5MDg4NTNDMzREMTA0NDU5MzhFQzBBNzI3RTA5
MkQxMjBDNzAeFw0yNjA1MDgxNDQwMDBaFw0yNzA1MDcxNDQ1MDBaMDMxMTAvBgNV
BAMTKDRDNEREMjBBNTBEMTJGRUUxNjlENTg5NEI3RDJBMzE4NDEzRUQ4RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnr/TYz9NBUbwnqjGpFcJETVt5
4Yw0Ywkk9hvZ5VOMrUVj03B0IOFWYq78yLgp63/f60A7+jM/LU/9fAJ4pkkXhNrI
uf1IHzGn3iaAoShgck1G4ZLqI2WXSUzAm24Dxr5BwWDen8ppgNh3DgSogFtQi6uu
FvnnOcDOSqWD3o7T09hqJByco/rxS/fnlYQBuABZHA2TKRf9CBI9ZddHi9glkyyg
uR0Sg77PloyX4BWhXKLKRNy8peoleWZC2ICc3aOzktJerYsUBMqMIGW1Ej2zhHXg
S/jGWzpJwRJqYkjDAPzmcMRriCN5UhyPFEAzM1LPgNAo9DCBbZoMEOa3bRu3AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUTE3SClDRL+4WnViUt9KjGEE+2OMwHwYDVR0j
BBgwFoAUlUapCIU8NNEERZOOwKcn4JLRIMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MDI2RjlFQUIzNTdGNDcxM0NFOTc3QTQ0RjBFQ0U3OThD
RENFNDc5QjRBNERDQkIwMEZCRkJCRkNCMDQzRDlCLzAvOTU0NkE5MDg4NTNDMzRE
MTA0NDU5MzhFQzBBNzI3RTA5MkQxMjBDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NTQ2QTkwODg1M0MzNEQxMDQ0
NTkzOEVDMEE3MjdFMDkyRDEyMEM3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODAyNkY5RUFCMzU3RjQ3MTNDRTk3N0E0NEYwRUNFNzk4Q0RDRTQ3OUI0
QTREQ0JCMDBGQkZCQkZDQjA0M0Q5Qi8wLzMxMzMzODJlMzEzMjMxMmUzMjMyMzgy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzMzNzM4MzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKK
eeQwDQYJKoZIhvcNAQELBQADggEBAL0wTvFR6pBk1PHmnY8jTXXhoAvikKuJQaHs
owYisqF9Brqxdu2ATS6LEbehQptidX2FNKhgzulah15BCQS37ihkTUmSEXoDf9j6
vFcyNac36BVb2GqjFC4jfPiMqR1ZLK4JgBLEC29zGKWJhVfbH92g1pTIrFsojSJy
vTLPw8Y/SFqfl/mxcyAXjHulWufrUaLQWA7uMqElccuMS79+dEa1tHr6D6N98VAk
ZlkVxbG7Seo/nIlXG+lrv2nbK5828Cf9tHTXjCHked+2YMHrH2QT5yxdlBy3dqlc
csn+D6Gd/mBO6/0itm9Oc66lTuOoQkhvxnvI7+NaoD7/Soswg2A=
-----END CERTIFICATE-----
Generated at Wed May 13 18:46:42 2026 by rpki-client