Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130372e302f32342d3234203d3e20323632323136.roa
File:                     3133382e302e3130372e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          FLm61xQotRN2iz5ibeWok9v6jXmdKSH2PaywI0PJgX8=
Subject key identifier:   2D:17:31:55:9A:FC:CD:23:C4:09:A5:2C:42:5A:D3:A3:E6:07:68:77
Certificate issuer:       /CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Certificate serial:       6C3875155F128443D36AD85015A334456A311466
Authority key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130372e302f32342d3234203d3e20323632323136.roa
Signing time:             Fri 10 Oct 2025 14:50:03 +0000
ROA not before:           Fri 10 Oct 2025 14:45:03 +0000
ROA not after:            Fri 09 Oct 2026 14:50:03 +0000
asID:                     262216
IP address blocks:        138.0.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:38:75:15:5f:12:84:43:d3:6a:d8:50:15:a3:34:45:6a:31:14:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
        Validity
            Not Before: Oct 10 14:45:03 2025 GMT
            Not After : Oct  9 14:50:03 2026 GMT
        Subject: CN=2D1731559AFCCD23C409A52C425AD3A3E6076877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bb:43:08:1c:f6:4f:08:a3:e2:b0:8c:ce:3a:
                    32:24:33:bf:5a:2f:2f:f8:32:be:48:fb:ec:b4:8e:
                    0e:2c:c1:20:d1:07:61:7b:6d:9f:94:00:eb:04:42:
                    02:0c:77:2c:9e:b9:ee:54:7d:7a:11:a6:e7:ba:16:
                    d5:99:ee:bf:a4:1e:a3:f7:d2:75:18:1e:7f:06:98:
                    ad:39:cb:95:37:32:31:0d:7b:2c:8d:cc:73:42:25:
                    1b:c4:23:7b:61:1c:b1:b2:d6:52:03:3d:d3:08:ab:
                    5a:76:8a:6a:b3:22:ee:99:e9:d5:e1:4e:a3:16:06:
                    96:39:ba:f9:83:3c:a9:fd:8f:9a:e3:52:1c:50:c3:
                    80:00:30:c3:75:94:1d:6d:69:d2:d7:04:62:44:7d:
                    8b:4a:92:54:30:f9:83:fe:0d:e5:34:cb:7b:11:fb:
                    1e:2a:ff:c9:3f:7e:9f:68:64:dc:24:bb:94:8f:63:
                    4d:07:c2:65:34:f4:76:e7:bb:97:06:06:43:83:05:
                    b7:00:7e:60:1e:60:a9:0f:2b:e7:90:9b:cc:a7:42:
                    2c:82:24:6f:b3:4b:ab:0b:78:82:7a:a0:61:d3:15:
                    10:cb:6a:15:77:4d:05:c9:a9:30:df:fe:d0:23:f8:
                    ec:c7:8a:c7:ba:ae:1e:8a:ee:b5:f7:7f:ed:cd:57:
                    f0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:17:31:55:9A:FC:CD:23:C4:09:A5:2C:42:5A:D3:A3:E6:07:68:77
            X509v3 Authority Key Identifier:
                keyid:7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130372e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:52:91:3e:89:be:23:1c:05:33:94:f3:f8:65:39:c5:05:82:
         cc:66:c3:78:7b:0f:2c:39:3e:b5:67:d4:29:ab:b8:cf:de:5b:
         b5:ab:5c:71:5e:f6:51:94:13:dd:f1:1e:cf:f4:cc:d2:6c:73:
         df:69:24:67:28:f9:60:0d:e3:ce:85:c2:9f:2f:e6:e0:89:03:
         e6:64:f3:e4:0c:ac:e3:bf:9a:42:bb:d6:46:8b:35:6f:4d:d3:
         86:01:27:a0:b7:65:8e:15:92:06:7e:54:95:8d:07:b3:61:25:
         a2:4d:5f:93:0d:a2:5f:35:8d:ab:4e:a7:97:70:7d:95:b4:5a:
         18:2e:6a:ff:f2:68:98:40:70:b1:8f:0f:f5:ab:dc:8c:c8:af:
         23:65:84:32:cb:ea:69:91:75:90:47:e6:bb:5a:2f:3e:d1:02:
         3f:89:b7:ed:7a:e3:ad:f6:5a:2e:92:05:c0:9f:70:a5:58:60:
         c3:49:54:6b:c3:7e:ad:58:dc:65:5d:81:c8:4f:67:5e:e2:b2:
         00:65:6d:00:6f:57:d3:7f:1d:d9:bb:b3:1e:9a:96:10:89:fa:
         10:cd:bb:fe:38:2e:dc:ff:60:2b:3f:7a:50:ff:37:a1:8e:40:
         d3:c4:1b:46:82:b2:7c:7d:31:6c:b8:3b:53:82:54:67:d7:dd:
         1e:76:91:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:43:07 2025 by rpki-client