Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3137302e302f32332d3234203d3e20323633383333.roa
File:                     3133382e3235352e3137302e302f32332d3234203d3e20323633383333.roa (raw, json)
Hash identifier:          Uwk7xKdulNF1e6zT6sm5y7/HpNb44toFE8Yh7fORoHs=
Subject key identifier:   6B:8F:CD:EF:EE:5B:B6:7B:7A:2E:2D:79:5E:FA:14:AD:BD:20:47:9D
Certificate issuer:       /CN=8F2EC5CC34344AABC1D5C4185A622142C1213AEF
Certificate serial:       73D97D3EE7A1D8D0430C6B4A779C7933CD7ACC3E
Authority key identifier: 8F:2E:C5:CC:34:34:4A:AB:C1:D5:C4:18:5A:62:21:42:C1:21:3A:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3137302e302f32332d3234203d3e20323633383333.roa
Signing time:             Fri 06 Mar 2026 11:33:08 +0000
ROA not before:           Fri 06 Mar 2026 11:28:08 +0000
ROA not after:            Fri 05 Mar 2027 11:33:08 +0000
asID:                     263833
IP address blocks:        138.255.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d9:7d:3e:e7:a1:d8:d0:43:0c:6b:4a:77:9c:79:33:cd:7a:cc:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F2EC5CC34344AABC1D5C4185A622142C1213AEF
        Validity
            Not Before: Mar  6 11:28:08 2026 GMT
            Not After : Mar  5 11:33:08 2027 GMT
        Subject: CN=6B8FCDEFEE5BB67B7A2E2D795EFA14ADBD20479D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4d:69:42:92:dd:69:fb:d7:7b:0d:59:aa:36:
                    bf:e5:b3:be:e9:29:6b:c2:40:58:57:ca:e2:46:6e:
                    b6:25:6f:27:be:38:e0:9b:d9:70:e3:e3:f4:92:a1:
                    ee:30:1e:82:26:23:f5:a8:62:47:33:28:e6:83:61:
                    83:e8:86:8d:e6:e6:92:69:11:d5:32:79:4d:02:02:
                    36:9e:57:2c:2f:2a:42:6f:49:90:67:55:19:e8:33:
                    76:66:34:1f:82:91:32:7f:0a:82:a6:8f:0a:86:f5:
                    98:d9:fa:15:f9:e9:18:c1:00:04:f7:5c:38:27:b1:
                    98:6f:0d:1b:ca:99:b1:f7:7e:74:b2:9c:12:bd:be:
                    6a:95:cf:36:82:bd:91:18:63:b7:24:01:81:f2:6a:
                    7f:26:b7:d3:36:9d:c0:e9:bf:17:ad:f5:d6:61:57:
                    6f:f1:d1:e6:11:bd:4b:21:e1:16:3a:80:f8:c0:78:
                    2b:9d:26:ee:39:18:06:6a:c7:c3:d6:5e:b3:b4:de:
                    f3:e6:b0:d5:8c:05:ac:37:ec:42:6c:a0:3b:68:c2:
                    01:54:6a:f5:c3:d9:5d:cc:c2:a2:04:f9:ce:3f:9f:
                    ef:7e:40:22:5f:54:85:33:08:11:b5:b4:44:78:0f:
                    a1:f5:c9:ea:2a:a7:68:3b:b2:de:f8:10:83:f8:4a:
                    3f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8F:CD:EF:EE:5B:B6:7B:7A:2E:2D:79:5E:FA:14:AD:BD:20:47:9D
            X509v3 Authority Key Identifier:
                keyid:8F:2E:C5:CC:34:34:4A:AB:C1:D5:C4:18:5A:62:21:42:C1:21:3A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3137302e302f32332d3234203d3e20323633383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:03:ca:6c:05:95:56:da:2b:8e:70:3d:2e:fd:3a:96:76:62:
         81:d9:3e:0c:0e:0f:5c:09:fe:56:26:cb:51:ca:e8:be:32:11:
         9f:53:4e:88:aa:36:0c:f6:c7:11:6d:d2:3a:87:38:d7:65:9c:
         41:c8:c0:00:67:e7:71:11:7a:64:40:1e:cb:f9:96:e9:c0:6f:
         2b:32:b4:0d:07:b4:c4:37:dd:5a:a2:cd:14:e7:17:a2:bb:05:
         32:df:2e:4d:e5:41:e2:69:34:76:a6:c0:4c:3f:30:c2:6f:f5:
         ed:76:ae:7a:a9:0d:cc:ba:8d:5a:42:d4:e5:57:53:ba:eb:56:
         8f:59:b7:a6:de:76:b8:47:25:65:9a:cd:45:82:4a:ad:b6:6c:
         87:13:a9:c8:93:1a:e6:7b:70:7f:1b:4a:7e:82:64:ee:7a:52:
         1a:5b:c3:b7:d0:97:0a:41:c6:1d:86:73:03:ad:dc:0e:ae:01:
         b6:df:33:32:6c:e4:c8:84:db:6c:4b:4f:9e:65:7c:63:95:1b:
         11:88:3f:aa:b8:9d:1e:1f:9b:bd:f7:4e:ef:72:aa:7f:43:ba:
         83:2b:e0:f7:a2:ba:9b:8c:0d:4a:bc:55:18:ad:ff:d9:5b:d4:
         fe:25:ec:22:35:a6:46:e2:f8:89:4c:b6:ca:a6:4f:1f:d4:50:
         d9:d7:6a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:57:25 2026 by rpki-client