Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0AA27CACE6842E5BE34152BEB4C68C684BC2B3B2A9A24309FF06977DBAD6623B/0/3134332e3133372e3134392e302f32342d3234203d3e20323634363135.roa
File:                     3134332e3133372e3134392e302f32342d3234203d3e20323634363135.roa (raw, json)
Hash identifier:          224IVTd7tfKnnsMspS2XHyhx5+ujvSnATyrsMoG0cgA=
Subject key identifier:   9B:12:59:41:F9:82:7E:8E:7B:0A:61:07:3D:CB:F5:C8:98:C2:0C:45
Certificate issuer:       /CN=3406C2D7B8E2087F6B962B0C946D7C877E63E63E
Certificate serial:       4DB501149FBE58388BEBB8C242C3A2F5583E5974
Authority key identifier: 34:06:C2:D7:B8:E2:08:7F:6B:96:2B:0C:94:6D:7C:87:7E:63:E6:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3406C2D7B8E2087F6B962B0C946D7C877E63E63E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0AA27CACE6842E5BE34152BEB4C68C684BC2B3B2A9A24309FF06977DBAD6623B/0/3134332e3133372e3134392e302f32342d3234203d3e20323634363135.roa
Signing time:             Fri 03 Jul 2026 18:55:00 +0000
ROA not before:           Fri 03 Jul 2026 18:50:00 +0000
ROA not after:            Fri 02 Jul 2027 18:55:00 +0000
asID:                     264615
IP address blocks:        143.137.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0AA27CACE6842E5BE34152BEB4C68C684BC2B3B2A9A24309FF06977DBAD6623B/0/3406C2D7B8E2087F6B962B0C946D7C877E63E63E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0AA27CACE6842E5BE34152BEB4C68C684BC2B3B2A9A24309FF06977DBAD6623B/0/3406C2D7B8E2087F6B962B0C946D7C877E63E63E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3406C2D7B8E2087F6B962B0C946D7C877E63E63E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b5:01:14:9f:be:58:38:8b:eb:b8:c2:42:c3:a2:f5:58:3e:59:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3406C2D7B8E2087F6B962B0C946D7C877E63E63E
        Validity
            Not Before: Jul  3 18:50:00 2026 GMT
            Not After : Jul  2 18:55:00 2027 GMT
        Subject: CN=9B125941F9827E8E7B0A61073DCBF5C898C20C45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fd:e4:c0:49:15:65:7e:53:7b:87:1a:f1:69:
                    db:9b:36:87:04:f5:88:b7:69:e9:33:6f:c9:f7:60:
                    f0:0c:8c:00:df:01:0f:18:59:9c:49:e6:51:f6:9c:
                    7d:aa:04:3e:2b:7f:d3:07:91:65:71:42:83:ff:f3:
                    79:4c:95:15:99:97:99:67:09:20:fd:92:fe:ea:a9:
                    be:52:7c:1a:ee:d8:4b:fc:4c:0c:c8:aa:d7:e9:05:
                    4d:0d:00:4a:46:43:b5:88:31:ed:ea:f4:20:d1:89:
                    11:8a:c9:a7:37:b8:9c:46:ed:c5:61:d8:08:ba:8d:
                    88:cf:2c:72:d0:60:9c:7c:3d:7d:1e:31:de:80:5b:
                    7b:db:5d:50:d5:7e:ae:a9:02:2c:f2:74:5b:8b:4d:
                    6c:61:3d:a6:30:b0:f9:db:b6:ff:9a:fd:9b:75:6e:
                    be:1a:0e:43:af:f9:37:20:10:7f:84:78:6c:d1:58:
                    88:9a:67:a3:30:7e:f4:ea:ef:45:97:0b:d6:cb:63:
                    17:73:51:d9:fe:77:5d:fe:9b:52:78:ce:a4:d4:83:
                    05:15:94:7a:26:d7:db:f0:1f:e6:d3:31:9a:bc:a9:
                    e7:b2:4d:23:9f:42:6d:86:dd:bd:df:a2:34:99:b4:
                    bc:f3:44:1d:92:ab:ee:16:d3:d7:1a:0c:cb:ce:95:
                    9e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:12:59:41:F9:82:7E:8E:7B:0A:61:07:3D:CB:F5:C8:98:C2:0C:45
            X509v3 Authority Key Identifier:
                keyid:34:06:C2:D7:B8:E2:08:7F:6B:96:2B:0C:94:6D:7C:87:7E:63:E6:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0AA27CACE6842E5BE34152BEB4C68C684BC2B3B2A9A24309FF06977DBAD6623B/0/3406C2D7B8E2087F6B962B0C946D7C877E63E63E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3406C2D7B8E2087F6B962B0C946D7C877E63E63E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0AA27CACE6842E5BE34152BEB4C68C684BC2B3B2A9A24309FF06977DBAD6623B/0/3134332e3133372e3134392e302f32342d3234203d3e20323634363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:7a:e6:ec:db:46:b7:c8:d6:f1:1f:57:07:8f:ee:9c:a5:12:
         7a:ba:54:bd:92:74:45:db:27:4b:98:fa:c8:d1:a9:82:b1:7b:
         e9:e1:2c:9c:c3:f4:d0:5c:be:4b:75:c5:4e:c0:5e:bd:0f:1f:
         3a:f4:c4:1b:c8:85:b9:8d:d8:b1:bd:0b:fa:fa:87:46:72:eb:
         c8:25:96:93:33:8d:6a:09:55:8e:54:69:64:f8:48:d9:c9:e5:
         b1:53:61:d9:af:94:73:e0:4c:17:c6:df:80:b6:e4:81:9d:3e:
         89:02:e2:fb:a5:22:b2:80:e9:c7:02:fd:e6:fa:27:f5:fa:ca:
         16:a9:b2:9c:4f:01:09:77:ca:ec:9d:d8:77:af:31:c6:f3:2f:
         b1:13:e2:0e:ea:e5:25:03:4e:48:b2:b6:15:6e:2c:bf:aa:ee:
         b2:32:e8:f2:c7:34:09:07:c2:e5:c2:51:0e:e1:b1:3e:ce:82:
         5e:25:77:c8:3c:c4:0f:52:08:31:eb:f2:4e:87:48:ed:ea:4d:
         37:10:bb:a2:c9:19:d6:bc:61:b7:ff:c2:14:6d:40:c3:d6:31:
         9e:ab:fb:9c:fa:13:a0:36:ff:69:b3:6c:a9:01:8c:db:53:9e:
         eb:42:4f:9a:56:60:1a:05:e3:1e:33:40:c4:48:6f:4d:e4:4c:
         63:95:b8:41
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUTbUBFJ++WDiL67jCQsOi9Vg+WXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwNkMyRDdCOEUyMDg3RjZCOTYyQjBDOTQ2RDdDODc3
RTYzRTYzRTAeFw0yNjA3MDMxODUwMDBaFw0yNzA3MDIxODU1MDBaMDMxMTAvBgNV
BAMTKDlCMTI1OTQxRjk4MjdFOEU3QjBBNjEwNzNEQ0JGNUM4OThDMjBDNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN/eTASRVlflN7hxrxadubNocE
9Yi3aekzb8n3YPAMjADfAQ8YWZxJ5lH2nH2qBD4rf9MHkWVxQoP/83lMlRWZl5ln
CSD9kv7qqb5SfBru2Ev8TAzIqtfpBU0NAEpGQ7WIMe3q9CDRiRGKyac3uJxG7cVh
2Ai6jYjPLHLQYJx8PX0eMd6AW3vbXVDVfq6pAizydFuLTWxhPaYwsPnbtv+a/Zt1
br4aDkOv+TcgEH+EeGzRWIiaZ6MwfvTq70WXC9bLYxdzUdn+d13+m1J4zqTUgwUV
lHom19vwH+bTMZq8qeeyTSOfQm2G3b3fojSZtLzzRB2Sq+4W09caDMvOlZ5/AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUmxJZQfmCfo57CmEHPcv1yJjCDEUwHwYDVR0j
BBgwFoAUNAbC17jiCH9rlisMlG18h35j5j4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQUEyN0NBQ0U2ODQyRTVCRTM0MTUyQkVCNEM2OEM2ODRC
QzJCM0IyQTlBMjQzMDlGRjA2OTc3REJBRDY2MjNCLzAvMzQwNkMyRDdCOEUyMDg3
RjZCOTYyQjBDOTQ2RDdDODc3RTYzRTYzRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDA2QzJEN0I4RTIwODdGNkI5
NjJCMEM5NDZEN0M4NzdFNjNFNjNFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEFBMjdDQUNFNjg0MkU1QkUzNDE1MkJFQjRDNjhDNjg0QkMyQjNCMkE5
QTI0MzA5RkYwNjk3N0RCQUQ2NjIzQi8wLzMxMzQzMzJlMzEzMzM3MmUzMTM0Mzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzNjMxMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACP
iZUwDQYJKoZIhvcNAQELBQADggEBAEV65uzbRrfI1vEfVweP7pylEnq6VL2SdEXb
J0uY+sjRqYKxe+nhLJzD9NBcvkt1xU7AXr0PHzr0xBvIhbmN2LG9C/r6h0Zy68gl
lpMzjWoJVY5UaWT4SNnJ5bFTYdmvlHPgTBfG34C25IGdPokC4vulIrKA6ccC/eb6
J/X6yhapspxPAQl3yuyd2HevMcbzL7ET4g7q5SUDTkiythVuLL+q7rIy6PLHNAkH
wuXCUQ7hsT7Ogl4ld8g8xA9SCDHr8k6HSO3qTTcQu6LJGda8Ybf/whRtQMPWMZ6r
+5z6E6A2/2mzbKkBjNtTnutCT5pWYBoF4x4zQMRIb03kTGOVuEE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:52:26 2026 by rpki-client