Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/3133382e35392e3136342e302f32322d3234203d3e20323633373332.roa
File:                     3133382e35392e3136342e302f32322d3234203d3e20323633373332.roa (raw, json)
Hash identifier:          OItwlzzkcVobOjFMctzS+nn9vxhvfLK7d2bW/rdzAwY=
Subject key identifier:   7F:B8:14:AC:ED:40:03:EC:B4:FA:F1:AD:D1:5D:71:6C:99:4D:34:2F
Certificate issuer:       /CN=D65CF4F69AC888255A41BFC6B6F0E71DA81E954B
Certificate serial:       366AFDD749E37AAAC9F50D0931055472F8B00FA0
Authority key identifier: D6:5C:F4:F6:9A:C8:88:25:5A:41:BF:C6:B6:F0:E7:1D:A8:1E:95:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/3133382e35392e3136342e302f32322d3234203d3e20323633373332.roa
Signing time:             Tue 30 Sep 2025 10:49:12 +0000
ROA not before:           Tue 30 Sep 2025 10:44:12 +0000
ROA not after:            Tue 29 Sep 2026 10:49:12 +0000
asID:                     263732
IP address blocks:        138.59.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6a:fd:d7:49:e3:7a:aa:c9:f5:0d:09:31:05:54:72:f8:b0:0f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D65CF4F69AC888255A41BFC6B6F0E71DA81E954B
        Validity
            Not Before: Sep 30 10:44:12 2025 GMT
            Not After : Sep 29 10:49:12 2026 GMT
        Subject: CN=7FB814ACED4003ECB4FAF1ADD15D716C994D342F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:89:8f:75:92:23:4e:27:d8:2f:b9:89:e8:e5:
                    fb:02:92:ed:4c:35:5d:14:58:c3:6b:56:8c:e9:1b:
                    b0:0f:c2:9f:68:59:bd:bc:8c:1d:97:04:6a:f2:d9:
                    b4:2b:25:35:ae:50:68:65:ee:8c:e9:59:a6:32:68:
                    f5:1b:f2:dd:73:26:71:86:57:0c:54:b0:2d:74:ee:
                    23:22:0f:5a:3d:2d:df:25:41:ee:79:c6:88:2f:15:
                    f2:df:d6:3c:d6:34:de:e1:d0:20:03:1c:e7:aa:cc:
                    73:b4:60:fc:53:14:3b:a1:fd:9f:7c:03:be:7d:08:
                    71:0f:0b:cc:67:02:5c:ec:d6:77:80:20:75:1f:75:
                    0f:be:e6:ec:82:10:19:6c:ea:0d:bd:d7:0b:b7:48:
                    b1:e5:64:d6:a7:3f:34:bd:fd:df:58:df:18:6d:eb:
                    48:fa:b3:dc:b6:32:16:26:12:5f:c6:0f:9f:77:39:
                    69:7c:7a:a7:82:09:b6:f3:c0:56:ef:3a:6d:0b:dc:
                    09:a7:88:e3:e4:29:85:b7:7a:63:3c:6f:46:c5:34:
                    e9:2d:91:10:a6:3f:86:fd:8c:f6:a8:48:ae:0c:b7:
                    a1:90:cb:93:90:f6:8f:9c:84:6a:3d:4b:c0:18:df:
                    d9:47:1e:d2:76:6f:de:a9:b6:e2:8c:0f:8e:ea:03:
                    3c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B8:14:AC:ED:40:03:EC:B4:FA:F1:AD:D1:5D:71:6C:99:4D:34:2F
            X509v3 Authority Key Identifier:
                keyid:D6:5C:F4:F6:9A:C8:88:25:5A:41:BF:C6:B6:F0:E7:1D:A8:1E:95:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/3133382e35392e3136342e302f32322d3234203d3e20323633373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:c3:91:5d:51:2c:1b:f8:ab:a3:91:a8:99:d7:b8:6e:e4:66:
         4a:73:13:f8:92:e3:4b:f5:e6:f7:92:8f:11:40:87:e1:b3:29:
         56:99:1c:76:12:7e:fa:fc:ea:68:f0:ac:0a:af:92:08:d4:94:
         9d:2c:f2:09:99:7b:c5:ab:aa:d8:d3:37:5e:99:2c:47:a5:c7:
         4b:d8:22:9b:d9:75:b1:fb:e1:21:23:c2:17:f0:d1:e6:a3:bb:
         fc:aa:2f:f3:fe:f8:96:3f:f5:75:d6:ea:40:db:0d:e3:8f:8a:
         77:3b:f4:e1:d8:e6:b9:68:b1:fc:2d:f1:96:9d:b7:c5:12:65:
         c0:ef:6c:06:1b:12:87:dd:77:3f:fa:1d:44:dd:23:32:83:c9:
         55:66:57:de:39:0b:c9:00:5b:15:05:c0:8c:4e:0f:7e:0c:54:
         7a:af:b3:3e:89:a7:ee:31:82:9c:a5:d8:a2:2e:92:9f:79:69:
         46:5a:b8:96:b3:bb:2f:c2:ad:5f:a8:a3:8f:30:37:54:a5:85:
         3d:5a:bc:3b:d6:7d:32:38:ba:0d:c5:58:98:d5:57:40:ee:84:
         06:23:8d:60:9a:82:a0:5f:bc:1c:d1:4c:cd:83:21:46:4a:8f:
         18:a9:2f:17:ea:25:f9:33:86:93:ed:8c:32:d2:66:18:14:27:
         3e:28:fa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:51:09 2025 by rpki-client