Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130372e302f32342d3234203d3e20323632323136.roa
File:                     3133382e302e3130372e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          365BFb1Td0ZE9/IV63Z0wMOuhhlB6Y7fTDMQKAOPLV8=
Subject key identifier:   3D:B7:07:29:C5:11:5C:50:C8:0E:BA:08:98:81:2F:B0:16:0B:AC:DA
Certificate issuer:       /CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Certificate serial:       0C9A9458B4615E7AA65C8006B42A76101BFEAC2A
Authority key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130372e302f32342d3234203d3e20323632323136.roa
Signing time:             Fri 11 Sep 2026 15:35:32 +0000
ROA not before:           Fri 11 Sep 2026 15:30:32 +0000
ROA not after:            Fri 10 Sep 2027 15:35:32 +0000
asID:                     262216
IP address blocks:        138.0.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 18:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:9a:94:58:b4:61:5e:7a:a6:5c:80:06:b4:2a:76:10:1b:fe:ac:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
        Validity
            Not Before: Sep 11 15:30:32 2026 GMT
            Not After : Sep 10 15:35:32 2027 GMT
        Subject: CN=3DB70729C5115C50C80EBA0898812FB0160BACDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:45:fc:58:aa:64:3d:8f:0f:52:63:79:2b:e6:
                    e6:75:0a:8f:bc:01:95:e5:81:69:6b:43:73:0e:be:
                    c0:1e:93:ec:90:56:04:4e:57:2b:15:8f:a3:3b:59:
                    d5:a1:f3:9a:50:e4:91:1f:a0:9e:f4:a1:27:15:2e:
                    16:4f:98:d7:a4:80:09:d4:5c:dd:70:14:e4:cf:91:
                    19:20:da:7b:5e:db:78:c7:2b:bd:38:63:30:55:13:
                    a6:89:16:04:bb:d0:32:e8:8d:9b:2d:ec:00:c5:e0:
                    73:31:89:70:8e:b7:22:2b:aa:c4:29:a2:73:11:a9:
                    1b:d7:05:12:2e:d6:f4:e3:65:9c:25:ba:ad:d7:d5:
                    bd:5a:80:06:62:0e:56:f6:5f:93:2f:83:9b:6c:a5:
                    6f:b6:b2:52:21:90:4d:c2:5b:5e:c5:f6:8b:1e:ee:
                    c5:77:e2:97:29:ed:49:10:43:ae:b9:cd:a9:00:09:
                    eb:9c:c6:bd:41:e5:35:28:78:99:4c:b8:e8:cb:03:
                    d7:79:2c:95:89:96:4e:24:7d:81:16:3b:da:0f:36:
                    fe:35:df:21:9b:42:19:61:b7:04:11:49:3c:db:82:
                    ff:14:ed:27:e8:91:8d:6b:fe:d2:41:5a:0c:90:52:
                    c2:18:03:93:44:c0:4d:24:48:0f:e2:cf:84:5d:3c:
                    43:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B7:07:29:C5:11:5C:50:C8:0E:BA:08:98:81:2F:B0:16:0B:AC:DA
            X509v3 Authority Key Identifier:
                keyid:7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130372e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:b4:f0:0c:f4:b8:51:d3:34:ba:92:04:66:e5:61:ad:ff:cd:
         ec:28:e1:22:71:ed:17:26:7a:31:cd:4d:dd:c0:06:ad:16:7a:
         a0:8e:e1:ec:4e:10:27:80:21:9b:da:19:ab:f4:8b:aa:8b:2b:
         f8:3e:73:82:eb:e1:58:d4:32:7c:2f:17:6f:ad:8e:e2:e3:55:
         ed:69:9d:97:98:45:06:30:c2:0d:b2:83:24:d0:68:ba:15:25:
         57:b9:1f:1a:7f:e3:84:7f:97:bc:6f:95:1b:d8:de:61:7d:7c:
         06:a4:4e:60:9e:17:27:63:6a:b5:24:4f:29:b5:11:5d:04:cf:
         a5:34:eb:37:3b:25:d3:2d:58:96:fe:d4:a5:22:db:9b:a6:f2:
         77:f2:a2:9a:b9:04:52:9a:d9:8a:75:8a:54:9a:7e:da:31:73:
         53:40:b6:cc:dd:73:f7:1e:a1:7d:92:90:fc:5a:08:a7:3b:0f:
         b5:9f:22:06:e3:7d:08:19:e8:ed:58:47:9d:b3:bf:de:43:f8:
         7c:76:ea:de:75:da:e7:42:25:70:6b:46:0b:23:b7:5d:38:20:
         80:50:2c:a8:05:78:0a:3f:da:43:ce:ca:b7:8d:b1:38:c5:d5:
         93:c4:ab:cb:7c:57:51:fa:24:59:cf:0a:70:ce:25:31:f2:6a:
         69:3e:f8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 06:48:16 2026 by rpki-client