Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/3133382e3131372e342e302f32322d3232203d3e20323633373635.roa
File:                     3133382e3131372e342e302f32322d3232203d3e20323633373635.roa (raw, json)
Hash identifier:          JOM1o4c9Sp4ZB9CuzyCYDKDODO4Atl3z+PW182A2oac=
Subject key identifier:   A1:1C:2F:67:94:A2:E2:5F:32:59:C2:22:51:75:AD:0E:5E:6D:96:34
Certificate issuer:       /CN=B9C920C3F82E080EFF6CD0269962DD3BECD5697A
Certificate serial:       5B00E0490C808ABC52FB67A35130153C4D48C628
Authority key identifier: B9:C9:20:C3:F8:2E:08:0E:FF:6C:D0:26:99:62:DD:3B:EC:D5:69:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/3133382e3131372e342e302f32322d3232203d3e20323633373635.roa
Signing time:             Tue 21 Jul 2026 18:15:18 +0000
ROA not before:           Tue 21 Jul 2026 18:10:18 +0000
ROA not after:            Tue 20 Jul 2027 18:15:18 +0000
asID:                     263765
IP address blocks:        138.117.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:00:e0:49:0c:80:8a:bc:52:fb:67:a3:51:30:15:3c:4d:48:c6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9C920C3F82E080EFF6CD0269962DD3BECD5697A
        Validity
            Not Before: Jul 21 18:10:18 2026 GMT
            Not After : Jul 20 18:15:18 2027 GMT
        Subject: CN=A11C2F6794A2E25F3259C2225175AD0E5E6D9634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e8:2a:5c:29:8e:02:bf:92:66:df:35:19:6e:
                    fc:d4:dd:c5:85:80:26:38:11:76:90:67:4c:5e:90:
                    a0:ac:04:40:f5:20:43:9f:66:3a:31:0b:4b:41:54:
                    84:d6:17:bd:e4:54:3f:ee:88:c7:a3:3d:52:bc:75:
                    c4:8e:65:f2:41:20:cd:6d:78:1f:bc:c1:12:71:74:
                    dd:ae:61:5d:13:43:79:39:80:d5:50:ea:c7:68:02:
                    b2:b7:00:db:88:d5:f7:90:62:ca:90:18:37:52:05:
                    ce:e0:26:90:2b:93:e3:a8:db:5c:25:80:cd:7e:ae:
                    b4:47:52:be:f7:cd:8a:cd:25:28:ef:6d:02:e2:77:
                    5c:63:64:31:4e:4a:24:26:9b:08:9f:99:b3:5a:77:
                    f3:6a:7f:d1:d5:34:84:17:da:16:4b:86:38:95:2f:
                    5e:95:2f:87:91:b0:b5:e4:af:d9:51:0d:0f:e3:3c:
                    56:77:d9:e7:2a:9f:2f:dc:49:3b:a7:2e:d0:5a:21:
                    0b:42:e8:b5:e5:c1:9f:56:9b:f7:4a:dd:72:57:f0:
                    12:93:e8:f3:45:50:95:05:0d:7f:f0:29:8d:e5:c3:
                    2e:18:39:c2:0b:01:70:59:b6:fb:ae:77:12:e5:ba:
                    57:ee:41:a5:21:3b:cb:42:8a:f1:f0:2e:01:d0:58:
                    57:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1C:2F:67:94:A2:E2:5F:32:59:C2:22:51:75:AD:0E:5E:6D:96:34
            X509v3 Authority Key Identifier:
                keyid:B9:C9:20:C3:F8:2E:08:0E:FF:6C:D0:26:99:62:DD:3B:EC:D5:69:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/3133382e3131372e342e302f32322d3232203d3e20323633373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:e6:94:85:ee:da:cf:d4:e4:1d:da:4b:35:82:19:33:74:41:
         df:96:7c:91:11:fd:22:30:51:62:fa:73:da:4b:4a:79:0f:ee:
         d7:fc:4d:85:5e:b3:10:f7:38:da:47:e6:e6:db:6f:38:cb:51:
         48:5d:87:88:0e:67:cb:e9:d8:f6:73:bd:19:17:ca:dd:23:c2:
         d8:16:33:69:7e:02:71:a3:c5:04:12:2c:23:f5:21:92:f0:9e:
         a8:60:a7:b7:17:d1:93:2c:f3:f0:e5:73:d6:56:a7:95:ab:4e:
         1a:db:cb:62:78:b9:14:96:77:11:f8:39:91:22:58:46:c8:88:
         f5:24:c3:21:01:f9:8b:e5:d6:91:01:2a:8b:e2:bb:ec:a9:a7:
         cc:da:04:81:61:cb:07:e6:39:ca:0a:f5:d3:8a:72:5f:c2:67:
         4a:77:92:e3:1d:e9:75:32:af:ea:40:aa:2b:6e:9e:be:98:2c:
         52:a8:8a:e6:94:fb:39:97:75:27:8d:81:23:0a:e8:12:33:9f:
         c6:3a:96:a8:c2:48:ed:f6:5f:25:eb:08:ef:2e:63:90:1c:e6:
         bc:0b:73:0e:2d:29:3a:c0:53:2b:e9:4f:e1:d1:82:a9:ba:51:
         ee:b6:9d:8b:33:53:72:31:c4:81:ef:63:8c:ad:c7:51:6a:ca:
         c3:f1:ad:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:32:47 2026 by rpki-client