Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/F041E97FC25328E301432D3B86BA161B44AB94DE18C328B3D81C7CD2B1940743/0/3133382e3138352e302e302f32322d3234203d3e20323632393136.roa
File:                     3133382e3138352e302e302f32322d3234203d3e20323632393136.roa (raw, json)
Hash identifier:          hrSqH1Ja8cGErqxJdHM1jcxrQpBB6IPfwamBEtvm59I=
Subject key identifier:   4D:63:F6:61:52:AD:0A:15:E6:E6:52:0B:61:7F:DD:A6:79:59:77:50
Certificate issuer:       /CN=C18DA1C41E1FC424F0B02EF6A8AFA953394262DC
Certificate serial:       0A1095F83562189A9B4E27D30C3D322EED0DB8D2
Authority key identifier: C1:8D:A1:C4:1E:1F:C4:24:F0:B0:2E:F6:A8:AF:A9:53:39:42:62:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C18DA1C41E1FC424F0B02EF6A8AFA953394262DC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F041E97FC25328E301432D3B86BA161B44AB94DE18C328B3D81C7CD2B1940743/0/3133382e3138352e302e302f32322d3234203d3e20323632393136.roa
Signing time:             Tue 29 Sep 2026 07:10:00 +0000
ROA not before:           Tue 29 Sep 2026 07:05:00 +0000
ROA not after:            Tue 28 Sep 2027 07:10:00 +0000
asID:                     262916
IP address blocks:        138.185.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F041E97FC25328E301432D3B86BA161B44AB94DE18C328B3D81C7CD2B1940743/0/C18DA1C41E1FC424F0B02EF6A8AFA953394262DC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F041E97FC25328E301432D3B86BA161B44AB94DE18C328B3D81C7CD2B1940743/0/C18DA1C41E1FC424F0B02EF6A8AFA953394262DC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C18DA1C41E1FC424F0B02EF6A8AFA953394262DC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:10:95:f8:35:62:18:9a:9b:4e:27:d3:0c:3d:32:2e:ed:0d:b8:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C18DA1C41E1FC424F0B02EF6A8AFA953394262DC
        Validity
            Not Before: Sep 29 07:05:00 2026 GMT
            Not After : Sep 28 07:10:00 2027 GMT
        Subject: CN=4D63F66152AD0A15E6E6520B617FDDA679597750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:be:75:38:ec:d9:54:52:df:4d:0a:99:1f:b6:
                    ae:07:f4:30:cd:9a:57:9b:ce:c2:83:ad:0e:03:4d:
                    0a:cf:08:d8:b3:f8:23:a7:3d:d2:dd:b6:19:53:4d:
                    3c:5e:00:e6:0d:e3:cb:24:f0:96:2b:ea:e4:75:ca:
                    fe:c3:f2:38:01:7f:d4:2f:da:d7:4f:a0:1c:71:57:
                    82:8c:73:30:ab:e1:96:2b:19:a2:e3:cb:22:f0:f3:
                    87:0b:45:f3:a6:f9:bd:3d:b3:c9:6d:cb:61:18:d6:
                    cd:13:ee:bc:6c:70:2a:1c:60:45:e2:37:c5:80:48:
                    f2:a8:ee:d2:2c:1c:98:a1:e9:5a:4b:9f:0c:14:04:
                    82:d7:08:c5:3e:67:21:f9:35:fb:0f:33:87:12:18:
                    f8:e4:d3:db:d0:94:3a:b3:41:c3:3a:5c:48:db:b6:
                    7f:a5:0b:6e:f8:e9:23:47:17:27:54:85:85:a0:61:
                    9e:d8:e7:f5:f9:29:1a:44:85:b3:d8:c9:55:38:a0:
                    9e:60:62:54:b8:9d:ca:c4:d9:01:ca:9e:d3:91:42:
                    0c:a2:57:62:b1:36:82:30:6a:46:4f:cf:a2:13:a1:
                    84:33:49:11:ad:38:b7:a4:76:7e:ea:cf:17:74:f3:
                    fd:f8:ca:6c:26:8f:4d:db:cb:05:f4:e0:04:0e:23:
                    e6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:63:F6:61:52:AD:0A:15:E6:E6:52:0B:61:7F:DD:A6:79:59:77:50
            X509v3 Authority Key Identifier:
                keyid:C1:8D:A1:C4:1E:1F:C4:24:F0:B0:2E:F6:A8:AF:A9:53:39:42:62:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F041E97FC25328E301432D3B86BA161B44AB94DE18C328B3D81C7CD2B1940743/0/C18DA1C41E1FC424F0B02EF6A8AFA953394262DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C18DA1C41E1FC424F0B02EF6A8AFA953394262DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F041E97FC25328E301432D3B86BA161B44AB94DE18C328B3D81C7CD2B1940743/0/3133382e3138352e302e302f32322d3234203d3e20323632393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:61:0c:ba:3f:65:60:cc:9b:73:12:65:5a:ad:a3:f6:3c:43:
         aa:be:80:0d:ee:32:f8:33:da:5c:cc:13:22:94:de:a6:66:18:
         b5:d9:8b:a2:03:ca:43:e3:a2:22:91:f4:17:70:0a:11:4f:e9:
         fc:1d:95:93:94:e9:1c:5b:a8:ce:92:a2:1c:b5:26:c5:bb:a6:
         24:81:3c:fb:52:d2:13:9b:f2:bf:77:10:ae:bb:8a:dd:39:6a:
         f1:fe:ae:c7:64:3c:b2:0e:de:5a:83:06:0e:4f:f0:47:70:60:
         da:fd:9d:c5:88:d9:f5:cf:3a:be:1b:ba:26:d7:6b:27:60:5b:
         28:74:5d:bc:b1:c3:3b:6a:c3:61:30:a5:7f:f9:9c:38:2a:73:
         a3:77:7c:3d:5f:b1:04:4c:bb:91:ed:12:ca:d0:5c:b1:cc:6d:
         11:63:03:e5:f6:11:43:db:16:48:ec:1b:cb:4b:ca:29:08:94:
         97:2f:2e:6e:f9:08:58:74:9f:dd:54:74:a8:37:27:30:fc:37:
         60:4e:39:9c:df:d6:7e:64:6e:d7:43:83:c0:7b:bf:21:10:a6:
         59:ed:b5:09:71:4f:48:3a:d7:f9:de:ec:70:52:19:a8:6b:ea:
         16:79:86:97:34:25:82:7e:cb:62:ae:b7:9f:25:14:86:a3:0d:
         b9:64:91:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:10:34 2026 by rpki-client