Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130342e302f32342d3234203d3e20323632323136.roa
File:                     3133382e302e3130342e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          IpEsz4Fjt5fmStNlb+pZ6JVBHIi1rcEBbzgU0XV66+w=
Subject key identifier:   AA:6F:B4:86:F5:70:70:A7:57:5A:19:B6:C9:9E:AD:6B:55:AB:D1:A3
Certificate issuer:       /CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Certificate serial:       4498017383F96431112ECD35C856F894E187F822
Authority key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130342e302f32342d3234203d3e20323632323136.roa
Signing time:             Fri 10 Oct 2025 14:50:03 +0000
ROA not before:           Fri 10 Oct 2025 14:45:03 +0000
ROA not after:            Fri 09 Oct 2026 14:50:03 +0000
asID:                     262216
IP address blocks:        138.0.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:98:01:73:83:f9:64:31:11:2e:cd:35:c8:56:f8:94:e1:87:f8:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
        Validity
            Not Before: Oct 10 14:45:03 2025 GMT
            Not After : Oct  9 14:50:03 2026 GMT
        Subject: CN=AA6FB486F57070A7575A19B6C99EAD6B55ABD1A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:30:de:00:c4:2d:d0:dc:8a:f4:4f:a7:27:38:
                    08:5a:25:cd:53:a9:c5:93:6d:0d:4b:bf:9c:10:8d:
                    3d:20:2f:f4:de:bf:4d:b0:f2:83:0e:51:99:3c:b1:
                    a2:08:8b:84:42:6a:f8:bc:08:5d:21:4f:14:ac:d9:
                    9f:ce:73:13:20:f4:55:cd:2a:06:af:a6:c1:96:d2:
                    73:1a:98:46:88:cc:e1:d7:f0:61:42:57:38:c5:8f:
                    00:ca:9c:17:b3:ec:ff:72:ae:89:03:78:90:44:b8:
                    46:a1:76:58:60:a4:b7:26:a8:ad:67:5e:ca:8c:51:
                    95:42:a7:b3:84:4d:4e:b5:83:5e:43:dd:e5:83:8c:
                    a4:c1:7d:d3:d4:61:c8:eb:af:a2:4c:af:6c:0c:90:
                    3e:0b:ac:56:47:87:22:cf:6b:85:44:c6:5c:a9:a8:
                    46:69:2f:dd:28:d4:a9:f7:84:20:67:07:c7:c5:9a:
                    a0:26:6c:85:35:61:07:0a:4c:f0:c0:4d:bb:ed:a9:
                    d9:ff:fa:2b:93:4f:bf:8a:e0:3b:f3:ff:de:2a:a8:
                    9c:43:b5:39:1a:0e:d9:72:6e:c5:4a:49:a3:a3:9d:
                    d1:c1:3b:9e:04:a4:4f:38:0c:a6:fe:2f:1d:cf:45:
                    6f:5c:7b:51:6b:63:48:0d:0f:77:2e:0d:09:7f:6e:
                    90:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6F:B4:86:F5:70:70:A7:57:5A:19:B6:C9:9E:AD:6B:55:AB:D1:A3
            X509v3 Authority Key Identifier:
                keyid:7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130342e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:17:9a:d7:50:e3:54:cd:9a:80:70:5a:da:46:1c:8b:d2:3f:
         a0:09:85:bd:ac:b0:ba:9b:0c:0b:17:75:0c:b8:64:4b:50:c6:
         5f:44:75:9c:d4:91:b6:30:6d:71:61:21:7f:55:a6:cf:b4:fd:
         45:77:bf:e7:b8:d0:0a:4b:91:90:00:bb:b3:77:47:2e:c0:84:
         5a:95:55:14:05:c1:3c:1d:60:b7:4a:d0:72:d8:2f:91:17:30:
         8c:0e:3b:c2:15:42:3c:b7:6e:07:6d:a6:dd:c4:0c:14:89:81:
         a9:d8:73:de:37:4a:df:00:ee:ef:7f:0f:59:ae:56:85:f4:56:
         48:f2:a6:8e:13:6a:ca:82:13:78:cd:dd:97:48:69:f3:cf:95:
         d5:f1:3a:b4:b5:e7:ae:6c:1c:56:ab:6c:07:d2:0f:01:35:ef:
         62:90:17:f2:b0:5d:85:ac:5a:71:5c:ea:7a:02:32:21:29:a6:
         f9:05:3d:a3:f2:8f:59:d8:fd:b2:f9:90:d4:eb:c7:c4:55:4d:
         42:42:dc:82:b4:47:e3:e2:8d:f9:96:92:d7:bc:f3:86:96:dc:
         67:02:91:c8:0b:53:c9:f7:4a:7d:c9:f3:3f:bb:a3:2d:52:a2:
         a2:5e:5a:13:e1:f4:e2:eb:cc:6e:ee:32:f9:7a:8e:e4:18:57:
         7a:2d:8b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:43:28 2025 by rpki-client