Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3233312e302f32342d3234203d3e20333936333536.roa
File:                     3133382e3132312e3233312e302f32342d3234203d3e20333936333536.roa (raw, json)
Hash identifier:          +++F3G8Gn50iRhEL17pzGbhCn7EN26mu0s/VBmHN+us=
Subject key identifier:   92:AE:1C:CD:CC:B3:F8:3D:87:38:0E:6E:EB:A8:FE:88:00:A9:4C:AE
Certificate issuer:       /CN=9546A908853C34D10445938EC0A727E092D120C7
Certificate serial:       5B39F5D01C921F915D5D337C154B153DD847E936
Authority key identifier: 95:46:A9:08:85:3C:34:D1:04:45:93:8E:C0:A7:27:E0:92:D1:20:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9546A908853C34D10445938EC0A727E092D120C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3233312e302f32342d3234203d3e20333936333536.roa
Signing time:             Fri 08 May 2026 13:45:00 +0000
ROA not before:           Fri 08 May 2026 13:40:00 +0000
ROA not after:            Fri 07 May 2027 13:45:00 +0000
asID:                     396356
IP address blocks:        138.121.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/9546A908853C34D10445938EC0A727E092D120C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/9546A908853C34D10445938EC0A727E092D120C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9546A908853C34D10445938EC0A727E092D120C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 May 2026 14:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:39:f5:d0:1c:92:1f:91:5d:5d:33:7c:15:4b:15:3d:d8:47:e9:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9546A908853C34D10445938EC0A727E092D120C7
        Validity
            Not Before: May  8 13:40:00 2026 GMT
            Not After : May  7 13:45:00 2027 GMT
        Subject: CN=92AE1CCDCCB3F83D87380E6EEBA8FE8800A94CAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b1:63:55:18:e1:4f:fd:00:40:d0:59:81:0c:
                    da:6b:ed:ef:69:d7:df:eb:2a:70:81:cb:05:76:a0:
                    ce:7b:5f:a7:b6:31:ae:91:6a:0a:81:ae:5d:72:a6:
                    a6:3a:1b:74:c7:bf:f9:f1:0b:36:04:f1:88:a2:6e:
                    c5:c8:49:2b:6a:0a:f2:3a:b3:0a:2e:96:55:c4:1a:
                    b3:19:36:ae:ee:69:69:0e:8b:18:70:f2:3d:f4:fc:
                    35:1f:c9:06:c4:56:01:24:4e:9b:9c:e7:37:73:90:
                    be:ab:b4:85:38:61:fc:c9:04:68:af:23:d2:9a:9b:
                    27:36:6c:5d:86:4b:b4:8b:bc:5a:ae:16:14:13:bb:
                    b6:25:1c:54:bc:20:9c:e7:6c:75:c3:55:42:d1:4d:
                    21:7e:7f:85:a0:08:84:ea:8d:c9:11:f3:b9:ce:09:
                    4b:d6:a6:66:06:9f:a7:30:46:c5:21:42:68:b9:06:
                    c0:89:92:99:d4:8c:cb:23:a6:79:06:7a:41:bd:9d:
                    1a:52:06:56:82:05:46:06:2e:7c:1c:2e:5b:ab:d5:
                    0e:6f:08:8b:aa:7e:92:71:41:4c:d4:f2:d3:ae:60:
                    69:6f:4d:2b:3f:39:55:8f:48:63:e2:4e:a3:ce:25:
                    cc:71:62:47:0f:00:8b:45:f5:37:42:1b:54:89:7c:
                    27:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AE:1C:CD:CC:B3:F8:3D:87:38:0E:6E:EB:A8:FE:88:00:A9:4C:AE
            X509v3 Authority Key Identifier:
                keyid:95:46:A9:08:85:3C:34:D1:04:45:93:8E:C0:A7:27:E0:92:D1:20:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/9546A908853C34D10445938EC0A727E092D120C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9546A908853C34D10445938EC0A727E092D120C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3233312e302f32342d3234203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:1c:fd:b4:05:db:c2:c5:6f:c5:7e:64:fe:9b:4c:8f:e8:01:
         f2:c5:99:70:30:f9:90:82:96:17:4e:c8:b3:1b:be:7d:ee:f4:
         60:0f:06:d1:7f:c2:79:13:d1:35:44:23:61:3b:de:d4:8f:70:
         8d:16:13:f7:3a:e6:05:3f:7d:66:f9:d9:8b:01:b1:af:66:f6:
         d9:bf:d1:65:96:12:eb:ff:82:ee:96:02:62:51:55:05:ef:dd:
         dc:c5:59:a9:9f:e7:90:8c:61:ec:97:95:31:19:88:48:b4:33:
         07:7c:82:e6:93:ec:d2:7e:e0:02:70:9b:4a:68:3d:70:17:b0:
         b8:5c:70:b9:42:11:bd:a2:07:60:d0:0b:86:c1:a7:1d:72:b7:
         ab:4d:08:85:52:41:24:b0:bc:00:e5:0c:b3:7d:73:0b:08:ce:
         9f:b5:43:77:7d:29:ad:0e:2f:fb:46:52:1f:e3:c8:d9:ed:c9:
         44:83:a5:57:d2:85:74:e7:f2:b3:de:8a:d6:39:a8:51:ed:90:
         3e:e8:d5:fe:4a:c9:f4:f8:a9:b1:15:73:62:36:64:c3:f8:43:
         05:73:e8:f7:69:3f:21:e7:70:a1:f8:18:e2:65:cf:4d:38:17:
         b0:81:2b:d6:ef:c9:d3:6a:36:b6:76:43:56:1d:7e:71:e4:29:
         2c:16:05:e0
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUWzn10BySH5FdXTN8FUsVPdhH6TYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU0NkE5MDg4NTNDMzREMTA0NDU5MzhFQzBBNzI3RTA5
MkQxMjBDNzAeFw0yNjA1MDgxMzQwMDBaFw0yNzA1MDcxMzQ1MDBaMDMxMTAvBgNV
BAMTKDkyQUUxQ0NEQ0NCM0Y4M0Q4NzM4MEU2RUVCQThGRTg4MDBBOTRDQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMsWNVGOFP/QBA0FmBDNpr7e9p
19/rKnCBywV2oM57X6e2Ma6RagqBrl1ypqY6G3THv/nxCzYE8YiibsXISStqCvI6
swoullXEGrMZNq7uaWkOixhw8j30/DUfyQbEVgEkTpuc5zdzkL6rtIU4YfzJBGiv
I9Kamyc2bF2GS7SLvFquFhQTu7YlHFS8IJznbHXDVULRTSF+f4WgCITqjckR87nO
CUvWpmYGn6cwRsUhQmi5BsCJkpnUjMsjpnkGekG9nRpSBlaCBUYGLnwcLlur1Q5v
CIuqfpJxQUzU8tOuYGlvTSs/OVWPSGPiTqPOJcxxYkcPAItF9TdCG1SJfCetAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUkq4czcyz+D2HOA5u66j+iACpTK4wHwYDVR0j
BBgwFoAUlUapCIU8NNEERZOOwKcn4JLRIMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MDI2RjlFQUIzNTdGNDcxM0NFOTc3QTQ0RjBFQ0U3OThD
RENFNDc5QjRBNERDQkIwMEZCRkJCRkNCMDQzRDlCLzAvOTU0NkE5MDg4NTNDMzRE
MTA0NDU5MzhFQzBBNzI3RTA5MkQxMjBDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NTQ2QTkwODg1M0MzNEQxMDQ0
NTkzOEVDMEE3MjdFMDkyRDEyMEM3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODAyNkY5RUFCMzU3RjQ3MTNDRTk3N0E0NEYwRUNFNzk4Q0RDRTQ3OUI0
QTREQ0JCMDBGQkZCQkZDQjA0M0Q5Qi8wLzMxMzMzODJlMzEzMjMxMmUzMjMzMzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM5MzYzMzM1MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACK
eecwDQYJKoZIhvcNAQELBQADggEBAA4c/bQF28LFb8V+ZP6bTI/oAfLFmXAw+ZCC
lhdOyLMbvn3u9GAPBtF/wnkT0TVEI2E73tSPcI0WE/c65gU/fWb52YsBsa9m9tm/
0WWWEuv/gu6WAmJRVQXv3dzFWamf55CMYeyXlTEZiEi0Mwd8guaT7NJ+4AJwm0po
PXAXsLhccLlCEb2iB2DQC4bBpx1yt6tNCIVSQSSwvADlDLN9cwsIzp+1Q3d9Ka0O
L/tGUh/jyNntyUSDpVfShXTn8rPeitY5qFHtkD7o1f5KyfT4qbEVc2I2ZMP4QwVz
6PdpPyHncKH4GOJlz004F7CBK9bvydNqNrZ2Q1YdfnHkKSwWBeA=
-----END CERTIFICATE-----
Generated at Wed May 13 17:48:48 2026 by rpki-client