Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/3133382e3138352e3134302e302f32322d3232203d3e203532333037.roa
File:                     3133382e3138352e3134302e302f32322d3232203d3e203532333037.roa (raw, json)
Hash identifier:          RCf/MmsWb+9tUlYHZfH8uemxUaWyVjNC04cfHsUvfy0=
Subject key identifier:   ED:64:5F:1C:AE:B0:86:81:3B:08:13:DB:1B:92:25:29:87:C2:7E:67
Certificate issuer:       /CN=4C1381453502913CB38DA6219251958EE6E0F09E
Certificate serial:       6BCDD8BEC88D118BACB6CF9D5531C042C47EDB27
Authority key identifier: 4C:13:81:45:35:02:91:3C:B3:8D:A6:21:92:51:95:8E:E6:E0:F0:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C1381453502913CB38DA6219251958EE6E0F09E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/3133382e3138352e3134302e302f32322d3232203d3e203532333037.roa
Signing time:             Mon 20 Jul 2026 16:15:02 +0000
ROA not before:           Mon 20 Jul 2026 16:10:02 +0000
ROA not after:            Mon 19 Jul 2027 16:15:02 +0000
asID:                     52307
IP address blocks:        138.185.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/4C1381453502913CB38DA6219251958EE6E0F09E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/4C1381453502913CB38DA6219251958EE6E0F09E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C1381453502913CB38DA6219251958EE6E0F09E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:cd:d8:be:c8:8d:11:8b:ac:b6:cf:9d:55:31:c0:42:c4:7e:db:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C1381453502913CB38DA6219251958EE6E0F09E
        Validity
            Not Before: Jul 20 16:10:02 2026 GMT
            Not After : Jul 19 16:15:02 2027 GMT
        Subject: CN=ED645F1CAEB086813B0813DB1B92252987C27E67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:67:20:2c:92:0a:5c:f1:c9:92:d7:5b:0a:ce:
                    23:45:1a:92:bc:a7:d3:bf:66:1b:6f:18:6d:b5:d7:
                    38:1d:ad:6e:de:49:a5:06:68:c6:b3:94:08:5b:75:
                    cc:cd:32:fe:be:3a:f0:2d:aa:3d:d7:85:8f:63:75:
                    c9:15:8f:1f:df:ff:39:6f:15:38:92:fd:94:5e:c5:
                    f8:fa:a4:f9:fa:e7:78:36:01:89:1d:10:b5:58:d3:
                    7a:89:a3:97:67:a6:0a:d0:ae:ae:f2:47:fe:c8:a6:
                    73:12:28:03:57:30:4e:81:1c:c4:59:a4:4e:cd:45:
                    22:c5:fd:dd:eb:01:4b:05:cf:03:90:5e:81:5e:f5:
                    2a:4c:af:c0:48:84:89:a0:e8:7f:1e:d5:af:6e:6e:
                    72:a7:0b:c0:18:fc:d0:95:dc:ef:1e:2f:ca:79:45:
                    eb:2e:12:6f:38:6d:3b:e9:e7:4a:5a:b6:58:22:b3:
                    b8:ad:f5:ee:d5:91:e7:2c:6f:a1:c1:8b:1e:10:76:
                    1c:ed:97:46:48:18:5b:a0:e0:aa:0f:0a:b0:c0:ad:
                    bc:65:ea:b2:ea:3f:7a:35:97:9c:53:81:cf:84:f4:
                    7e:89:81:67:1b:7c:cd:ee:43:f8:ea:1a:d4:4d:28:
                    e8:e8:88:cc:39:a0:ab:95:0f:3d:fd:88:8b:c0:69:
                    62:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:64:5F:1C:AE:B0:86:81:3B:08:13:DB:1B:92:25:29:87:C2:7E:67
            X509v3 Authority Key Identifier:
                keyid:4C:13:81:45:35:02:91:3C:B3:8D:A6:21:92:51:95:8E:E6:E0:F0:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/4C1381453502913CB38DA6219251958EE6E0F09E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C1381453502913CB38DA6219251958EE6E0F09E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E74586C5CF7D8384EB451796F4BDBB838E26209A1C87865F396EAEF86FA1BE9D/0/3133382e3138352e3134302e302f32322d3232203d3e203532333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:5c:f7:81:72:52:6c:0d:2b:de:a4:80:a2:07:a8:60:27:e5:
         5d:32:76:09:91:47:2b:03:c4:5f:4b:56:b7:af:5a:90:c6:e8:
         89:38:ef:40:fc:82:88:b6:0f:55:bb:c7:54:ac:61:b5:d8:0c:
         04:74:57:be:66:9b:2e:67:33:69:fa:f1:40:e9:3b:a2:4e:2b:
         44:c3:44:57:84:eb:c3:b4:f9:9b:79:29:dc:7c:99:2e:dd:c7:
         dc:77:f8:69:aa:f0:f1:3d:94:c9:5f:b1:7c:53:50:77:ff:86:
         ed:3f:9f:c0:60:bf:11:87:98:17:dd:8c:de:ae:65:fb:73:dc:
         fc:13:10:95:57:b9:d0:73:8e:ba:a2:b2:19:6c:d9:89:62:80:
         36:f4:5f:4d:0e:9d:1d:2e:fc:a2:5f:e7:81:09:e7:e9:fd:30:
         16:05:ed:4d:43:d3:c4:4a:5c:d7:bc:d0:00:78:cd:99:55:62:
         cb:ab:bc:21:fa:ae:7b:e0:ab:66:f8:dd:8e:09:02:47:c2:97:
         9b:8c:5e:6b:72:61:5b:7a:4e:df:e0:a1:9f:49:ed:91:d4:92:
         60:65:90:d3:e8:eb:4d:91:59:e4:44:13:53:ac:d1:46:b1:76:
         35:23:4b:18:ed:88:bd:75:c3:aa:28:80:5c:3c:8e:30:1d:9c:
         18:cb:2b:ac
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUa83YvsiNEYusts+dVTHAQsR+2ycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEMxMzgxNDUzNTAyOTEzQ0IzOERBNjIxOTI1MTk1OEVF
NkUwRjA5RTAeFw0yNjA3MjAxNjEwMDJaFw0yNzA3MTkxNjE1MDJaMDMxMTAvBgNV
BAMTKEVENjQ1RjFDQUVCMDg2ODEzQjA4MTNEQjFCOTIyNTI5ODdDMjdFNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgZyAskgpc8cmS11sKziNFGpK8
p9O/ZhtvGG211zgdrW7eSaUGaMazlAhbdczNMv6+OvAtqj3XhY9jdckVjx/f/zlv
FTiS/ZRexfj6pPn653g2AYkdELVY03qJo5dnpgrQrq7yR/7IpnMSKANXME6BHMRZ
pE7NRSLF/d3rAUsFzwOQXoFe9SpMr8BIhImg6H8e1a9ubnKnC8AY/NCV3O8eL8p5
ResuEm84bTvp50patlgis7it9e7Vkecsb6HBix4Qdhztl0ZIGFug4KoPCrDArbxl
6rLqP3o1l5xTgc+E9H6JgWcbfM3uQ/jqGtRNKOjoiMw5oKuVDz39iIvAaWIPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU7WRfHK6whoE7CBPbG5IlKYfCfmcwHwYDVR0j
BBgwFoAUTBOBRTUCkTyzjaYhklGVjubg8J4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNzQ1ODZDNUNGN0Q4Mzg0RUI0NTE3OTZGNEJEQkI4MzhF
MjYyMDlBMUM4Nzg2NUYzOTZFQUVGODZGQTFCRTlELzAvNEMxMzgxNDUzNTAyOTEz
Q0IzOERBNjIxOTI1MTk1OEVFNkUwRjA5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QzEzODE0NTM1MDI5MTNDQjM4
REE2MjE5MjUxOTU4RUU2RTBGMDlFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTc0NTg2QzVDRjdEODM4NEVCNDUxNzk2RjRCREJCODM4RTI2MjA5QTFD
ODc4NjVGMzk2RUFFRjg2RkExQkU5RC8wLzMxMzMzODJlMzEzODM1MmUzMTM0MzAy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMyMzMzMDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCirmM
MA0GCSqGSIb3DQEBCwUAA4IBAQCGXPeBclJsDSvepICiB6hgJ+VdMnYJkUcrA8Rf
S1a3r1qQxuiJOO9A/IKItg9Vu8dUrGG12AwEdFe+ZpsuZzNp+vFA6TuiTitEw0RX
hOvDtPmbeSncfJku3cfcd/hpqvDxPZTJX7F8U1B3/4btP5/AYL8Rh5gX3YzermX7
c9z8ExCVV7nQc466orIZbNmJYoA29F9NDp0dLvyiX+eBCefp/TAWBe1NQ9PESlzX
vNAAeM2ZVWLLq7wh+q574Ktm+N2OCQJHwpebjF5rcmFbek7f4KGfSe2R1JJgZZDT
6OtNkVnkRBNTrNFGsXY1I0sY7Yi9dcOqKIBcPI4wHZwYyyus
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:44:24 2026 by rpki-client