Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130352e302f32342d3234203d3e20323632323136.roa
File:                     3133382e302e3130352e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          vY4YAS0xjVuoAvX4mF6T+F4WyLACw0qU8xrIv84w0tM=
Subject key identifier:   9B:97:A7:21:51:40:83:01:9E:43:17:A9:E8:EA:E7:4D:2F:7B:70:86
Certificate issuer:       /CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Certificate serial:       76966F69C94A456A2A639A2F7B7534C9BEA95EB3
Authority key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130352e302f32342d3234203d3e20323632323136.roa
Signing time:             Fri 10 Oct 2025 14:50:01 +0000
ROA not before:           Fri 10 Oct 2025 14:45:01 +0000
ROA not after:            Fri 09 Oct 2026 14:50:01 +0000
asID:                     262216
IP address blocks:        138.0.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:96:6f:69:c9:4a:45:6a:2a:63:9a:2f:7b:75:34:c9:be:a9:5e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
        Validity
            Not Before: Oct 10 14:45:01 2025 GMT
            Not After : Oct  9 14:50:01 2026 GMT
        Subject: CN=9B97A721514083019E4317A9E8EAE74D2F7B7086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f8:82:c6:e0:ed:c1:4e:49:3e:c8:14:42:1d:
                    15:5a:b3:26:eb:e2:18:bb:d4:22:a1:7a:7f:b3:e3:
                    11:57:f3:93:7a:c8:e4:d2:7c:c6:e1:91:20:c4:3c:
                    32:85:c9:31:2d:8a:bc:5c:c3:15:fc:2d:64:71:db:
                    16:f4:c5:1a:38:21:66:99:7f:39:0f:9c:55:40:e8:
                    35:b2:fe:fb:1e:59:a9:74:3d:84:30:2b:c6:fe:e6:
                    65:cf:4a:58:19:01:b1:c4:bc:d1:b0:28:b1:ed:61:
                    54:23:91:13:d4:23:ff:fe:b4:07:18:b1:7e:99:f0:
                    47:29:a5:dc:41:df:c5:d8:84:bd:14:2d:a2:37:fc:
                    e4:15:02:ba:1b:47:8a:a2:45:30:65:e5:07:25:ff:
                    f8:2b:b0:42:26:7e:33:00:bf:44:29:9c:a5:35:01:
                    9d:4b:d2:c9:05:35:4c:f7:96:a4:86:84:8e:e0:85:
                    e9:a0:a6:64:fc:11:fe:e1:7d:dd:0e:6c:e0:f9:b3:
                    88:84:c5:56:38:b6:a4:0c:ed:11:54:28:1e:06:78:
                    3e:40:6e:8c:01:4f:ea:f7:49:ed:5b:71:33:88:8a:
                    9e:0b:6c:c2:b8:4a:be:2d:55:cb:bf:f0:d3:0d:2f:
                    e8:fd:bf:fe:fc:57:b4:c1:5c:30:1e:81:1f:b6:ef:
                    1c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:97:A7:21:51:40:83:01:9E:43:17:A9:E8:EA:E7:4D:2F:7B:70:86
            X509v3 Authority Key Identifier:
                keyid:7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130352e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:95:33:65:18:0b:17:4f:51:5a:6b:ec:22:9a:85:0c:cb:6c:
         dc:47:82:7c:41:68:00:b5:9c:cd:3b:42:31:e3:04:46:75:53:
         8b:a4:4f:50:d0:e5:26:8e:c3:a8:2e:ed:e9:f5:46:8e:fa:a4:
         4d:dc:22:a3:67:0e:9c:ad:5e:53:a9:d9:18:87:c0:b4:85:c7:
         61:4f:8f:62:04:aa:3b:26:2d:c5:02:4a:de:56:a8:b4:c2:63:
         bd:29:2b:4c:d5:b4:b2:9e:fa:4c:06:8b:db:dd:b1:19:d7:e9:
         50:6f:66:72:f4:95:ae:de:75:5e:d0:7b:88:34:1f:6f:bb:c5:
         67:78:ad:d6:d3:bf:fd:ce:09:de:d2:80:21:8e:b7:ba:b1:34:
         74:f7:10:fd:93:0a:c9:67:68:d1:cd:46:f9:9b:dd:af:27:94:
         11:59:c0:06:66:a9:94:61:da:1d:20:72:18:59:21:fa:62:7d:
         1d:67:bc:f5:fc:c4:4b:a3:85:86:b2:e1:b3:7d:d3:34:3c:fa:
         76:ad:b3:de:9c:b4:d0:b7:ca:95:08:4f:30:1e:e7:2b:e3:37:
         a3:10:84:fe:33:93:ef:22:55:d0:ae:75:10:6d:8d:69:f3:d6:
         04:65:85:1d:0b:1a:d9:af:72:92:cd:d0:d8:d0:81:da:7f:18:
         5c:8e:24:c0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUdpZvaclKRWoqY5ove3U0yb6pXrMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0QxRjE3NEJGQkIxN0I3ODIyRTgyRDNBQTE0RTg2RDM4
NTQ4MzA4OTAeFw0yNTEwMTAxNDQ1MDFaFw0yNjEwMDkxNDUwMDFaMDMxMTAvBgNV
BAMTKDlCOTdBNzIxNTE0MDgzMDE5RTQzMTdBOUU4RUFFNzREMkY3QjcwODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp+ILG4O3BTkk+yBRCHRVasybr
4hi71CKhen+z4xFX85N6yOTSfMbhkSDEPDKFyTEtirxcwxX8LWRx2xb0xRo4IWaZ
fzkPnFVA6DWy/vseWal0PYQwK8b+5mXPSlgZAbHEvNGwKLHtYVQjkRPUI//+tAcY
sX6Z8EcppdxB38XYhL0ULaI3/OQVArobR4qiRTBl5Qcl//grsEImfjMAv0QpnKU1
AZ1L0skFNUz3lqSGhI7ghemgpmT8Ef7hfd0ObOD5s4iExVY4tqQM7RFUKB4GeD5A
bowBT+r3Se1bcTOIip4LbMK4Sr4tVcu/8NMNL+j9v/78V7TBXDAegR+27xwBAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUm5enIVFAgwGeQxep6OrnTS97cIYwHwYDVR0j
BBgwFoAUfR8XS/uxe3gi6C06oU6G04VIMIkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQkNFMzNENUE4NEVDM0VCRTU4MDNCNDM5ODc5OTA4NzE4
QjE2MzdGREYwMjBFRjlDODJEQjdCRTIwMjAwN0NDLzAvN0QxRjE3NEJGQkIxN0I3
ODIyRTgyRDNBQTE0RTg2RDM4NTQ4MzA4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RDFGMTc0QkZCQjE3Qjc4MjJF
ODJEM0FBMTRFODZEMzg1NDgzMDg5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREJDRTMzRDVBODRFQzNFQkU1ODAzQjQzOTg3OTkwODcxOEIxNjM3RkRG
MDIwRUY5QzgyREI3QkUyMDIwMDdDQy8wLzMxMzMzODJlMzAyZTMxMzAzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjMyMzEzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIoAaTAN
BgkqhkiG9w0BAQsFAAOCAQEAnJUzZRgLF09RWmvsIpqFDMts3EeCfEFoALWczTtC
MeMERnVTi6RPUNDlJo7DqC7t6fVGjvqkTdwio2cOnK1eU6nZGIfAtIXHYU+PYgSq
OyYtxQJK3laotMJjvSkrTNW0sp76TAaL292xGdfpUG9mcvSVrt51XtB7iDQfb7vF
Z3it1tO//c4J3tKAIY63urE0dPcQ/ZMKyWdo0c1G+ZvdryeUEVnABmaplGHaHSBy
GFkh+mJ9HWe89fzES6OFhrLhs33TNDz6dq2z3py00LfKlQhPMB7nK+M3oxCE/jOT
7yJV0K51EG2NafPWBGWFHQsa2a9yks3Q2NCB2n8YXI4kwA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:45:16 2025 by rpki-client