Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0AA27CACE6842E5BE34152BEB4C68C684BC2B3B2A9A24309FF06977DBAD6623B/0/3134332e3133372e3135302e302f32342d3234203d3e20323634363135.roa
File:                     3134332e3133372e3135302e302f32342d3234203d3e20323634363135.roa (raw, json)
Hash identifier:          t7pSFi/GZFbDyEgRz4Daxzie4/oNUVegFBtf0k+D4AA=
Subject key identifier:   81:2F:E1:B1:0B:D5:83:85:ED:25:D0:0B:B2:83:B3:22:D1:D1:60:C2
Certificate issuer:       /CN=3406C2D7B8E2087F6B962B0C946D7C877E63E63E
Certificate serial:       B24900527EFFA8BD376659E9A96C1EBB51E006
Authority key identifier: 34:06:C2:D7:B8:E2:08:7F:6B:96:2B:0C:94:6D:7C:87:7E:63:E6:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3406C2D7B8E2087F6B962B0C946D7C877E63E63E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0AA27CACE6842E5BE34152BEB4C68C684BC2B3B2A9A24309FF06977DBAD6623B/0/3134332e3133372e3135302e302f32342d3234203d3e20323634363135.roa
Signing time:             Fri 03 Jul 2026 18:55:00 +0000
ROA not before:           Fri 03 Jul 2026 18:50:00 +0000
ROA not after:            Fri 02 Jul 2027 18:55:00 +0000
asID:                     264615
IP address blocks:        143.137.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0AA27CACE6842E5BE34152BEB4C68C684BC2B3B2A9A24309FF06977DBAD6623B/0/3406C2D7B8E2087F6B962B0C946D7C877E63E63E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0AA27CACE6842E5BE34152BEB4C68C684BC2B3B2A9A24309FF06977DBAD6623B/0/3406C2D7B8E2087F6B962B0C946D7C877E63E63E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3406C2D7B8E2087F6B962B0C946D7C877E63E63E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b2:49:00:52:7e:ff:a8:bd:37:66:59:e9:a9:6c:1e:bb:51:e0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3406C2D7B8E2087F6B962B0C946D7C877E63E63E
        Validity
            Not Before: Jul  3 18:50:00 2026 GMT
            Not After : Jul  2 18:55:00 2027 GMT
        Subject: CN=812FE1B10BD58385ED25D00BB283B322D1D160C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f7:f6:e5:8f:81:4c:51:69:a4:18:00:a5:67:
                    c2:5d:1b:eb:d8:b9:34:92:68:9b:15:81:90:37:24:
                    b6:2f:56:03:5f:e5:f4:d6:6f:88:c3:cc:6c:d7:cd:
                    50:1a:ba:95:89:13:5f:25:83:ff:f9:1e:e3:32:04:
                    52:8e:8b:3e:5f:5f:57:7c:be:e6:f3:b3:e6:09:48:
                    03:24:8e:dc:9b:1e:b6:c9:0c:9e:9e:92:e2:21:6c:
                    08:f8:45:6a:a3:b8:0d:69:83:ce:81:f4:8e:76:1b:
                    49:1e:73:6e:92:84:70:9d:12:b7:d8:2c:37:35:1f:
                    79:40:da:81:32:8d:32:f7:f6:75:29:c5:fe:d1:4e:
                    9b:b5:08:d3:01:34:88:b9:df:5c:16:64:fb:32:04:
                    9b:0f:ac:97:cb:aa:d1:e6:ec:32:10:87:69:5c:fc:
                    d4:73:09:76:53:c0:51:54:57:66:ab:28:39:60:db:
                    8b:e0:46:66:40:c7:53:fe:33:33:78:95:f1:55:54:
                    ae:94:d8:3e:86:00:26:37:4e:bc:53:45:da:ae:5d:
                    e9:e0:6d:89:2f:70:c7:1e:ed:0e:e0:58:aa:cc:af:
                    53:a3:f3:8f:66:88:d2:0f:6f:2d:4d:58:68:6e:70:
                    a0:58:e3:b1:f1:30:f1:bd:13:71:1f:b3:63:55:b7:
                    cf:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2F:E1:B1:0B:D5:83:85:ED:25:D0:0B:B2:83:B3:22:D1:D1:60:C2
            X509v3 Authority Key Identifier:
                keyid:34:06:C2:D7:B8:E2:08:7F:6B:96:2B:0C:94:6D:7C:87:7E:63:E6:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0AA27CACE6842E5BE34152BEB4C68C684BC2B3B2A9A24309FF06977DBAD6623B/0/3406C2D7B8E2087F6B962B0C946D7C877E63E63E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3406C2D7B8E2087F6B962B0C946D7C877E63E63E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0AA27CACE6842E5BE34152BEB4C68C684BC2B3B2A9A24309FF06977DBAD6623B/0/3134332e3133372e3135302e302f32342d3234203d3e20323634363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:84:b3:74:2f:11:d1:20:e5:d1:e1:d7:02:28:1e:55:91:52:
         fa:b1:71:55:d9:86:9c:2a:fc:96:86:51:8a:ab:11:93:e8:94:
         e5:5c:ab:b4:ae:1c:d6:b7:65:b8:ad:72:7e:9d:82:2e:cd:23:
         1d:5b:4a:4e:fb:23:ac:be:01:16:12:bb:ec:0e:60:c6:fb:da:
         ee:11:2a:17:00:5e:18:52:c7:fb:a4:6d:59:21:68:c1:9d:c4:
         69:fe:13:a3:02:db:ae:c7:82:d0:f6:9b:5b:62:07:d0:59:43:
         90:2c:0d:d8:b1:ba:64:a7:e7:88:bc:d0:26:49:b9:ba:71:4b:
         a0:58:71:44:2b:6a:65:12:c7:20:5b:54:eb:08:20:74:90:2e:
         19:24:2d:0e:3f:cb:22:a7:d5:39:bc:da:94:bd:97:56:e4:a8:
         fa:48:da:2a:31:09:d4:35:5b:31:86:58:b1:c5:72:81:56:32:
         69:d4:d3:bc:ca:91:6b:91:18:fc:af:68:68:9b:e7:5b:21:07:
         07:72:7c:b8:ce:e1:2f:5c:9e:b5:d7:27:4f:3e:1e:eb:eb:5b:
         9b:3d:e3:5f:2a:b1:d0:54:69:a8:63:41:b3:4e:ef:b9:2c:25:
         ff:7e:7c:d8:14:0a:f2:9a:95:e9:49:a6:08:47:ac:4e:25:17:
         05:bd:97:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:42:48 2026 by rpki-client