Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0AA27CACE6842E5BE34152BEB4C68C684BC2B3B2A9A24309FF06977DBAD6623B/0/3134332e3133372e3135312e302f32342d3234203d3e20323634363135.roa
File:                     3134332e3133372e3135312e302f32342d3234203d3e20323634363135.roa (raw, json)
Hash identifier:          5KQLyG4cvFpf+OcOE2WTV9FR/7VRa1+lqBcTvC4LCfo=
Subject key identifier:   F2:76:D6:E1:57:45:8A:23:95:46:5B:0F:64:89:CF:13:B0:72:A2:E8
Certificate issuer:       /CN=3406C2D7B8E2087F6B962B0C946D7C877E63E63E
Certificate serial:       421781EB16F01A030CD6440341B49F6AAC2748E3
Authority key identifier: 34:06:C2:D7:B8:E2:08:7F:6B:96:2B:0C:94:6D:7C:87:7E:63:E6:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3406C2D7B8E2087F6B962B0C946D7C877E63E63E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0AA27CACE6842E5BE34152BEB4C68C684BC2B3B2A9A24309FF06977DBAD6623B/0/3134332e3133372e3135312e302f32342d3234203d3e20323634363135.roa
Signing time:             Fri 03 Jul 2026 18:55:00 +0000
ROA not before:           Fri 03 Jul 2026 18:50:00 +0000
ROA not after:            Fri 02 Jul 2027 18:55:00 +0000
asID:                     264615
IP address blocks:        143.137.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0AA27CACE6842E5BE34152BEB4C68C684BC2B3B2A9A24309FF06977DBAD6623B/0/3406C2D7B8E2087F6B962B0C946D7C877E63E63E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0AA27CACE6842E5BE34152BEB4C68C684BC2B3B2A9A24309FF06977DBAD6623B/0/3406C2D7B8E2087F6B962B0C946D7C877E63E63E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3406C2D7B8E2087F6B962B0C946D7C877E63E63E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:17:81:eb:16:f0:1a:03:0c:d6:44:03:41:b4:9f:6a:ac:27:48:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3406C2D7B8E2087F6B962B0C946D7C877E63E63E
        Validity
            Not Before: Jul  3 18:50:00 2026 GMT
            Not After : Jul  2 18:55:00 2027 GMT
        Subject: CN=F276D6E157458A2395465B0F6489CF13B072A2E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d6:eb:56:9c:83:7b:da:57:85:1b:47:79:fc:
                    2a:81:de:ad:7c:76:c7:c1:43:65:3e:3d:b1:20:1a:
                    e7:dc:7c:85:97:a8:93:14:37:b1:83:8c:bc:72:80:
                    27:70:df:ab:58:c0:5e:31:43:17:c9:53:6d:0a:89:
                    2d:3e:45:4a:49:fb:31:91:ad:80:ba:9d:a6:41:5d:
                    8b:cd:ac:99:ff:51:62:fb:76:15:bd:03:ec:27:5d:
                    f3:5f:68:ea:47:c8:0b:26:1b:6b:fe:fa:6b:fc:9c:
                    0d:1c:62:03:f2:62:7f:cc:b9:ac:31:a5:b7:92:1d:
                    ae:a6:fe:9e:0b:5d:60:9d:be:c9:b5:11:e8:7d:a5:
                    18:8c:83:c5:b6:38:19:b2:b3:41:b0:24:e7:8e:09:
                    1c:9c:01:58:ac:a8:be:09:36:08:13:d2:29:d1:26:
                    23:dd:50:96:5b:d1:b1:71:df:07:87:35:1f:91:a3:
                    ab:65:6e:1e:4a:e6:6e:1d:70:71:2f:d3:69:fb:72:
                    5a:3f:e7:6c:a5:df:2a:d0:da:58:8c:56:cf:91:4c:
                    80:b2:99:b3:bd:77:de:22:a2:73:11:a7:50:57:87:
                    cd:07:34:75:39:6e:20:a2:f3:5a:f8:a2:46:8f:fd:
                    63:af:da:86:a6:7e:da:64:3f:ab:70:fb:e8:d0:c6:
                    de:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:76:D6:E1:57:45:8A:23:95:46:5B:0F:64:89:CF:13:B0:72:A2:E8
            X509v3 Authority Key Identifier:
                keyid:34:06:C2:D7:B8:E2:08:7F:6B:96:2B:0C:94:6D:7C:87:7E:63:E6:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0AA27CACE6842E5BE34152BEB4C68C684BC2B3B2A9A24309FF06977DBAD6623B/0/3406C2D7B8E2087F6B962B0C946D7C877E63E63E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3406C2D7B8E2087F6B962B0C946D7C877E63E63E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0AA27CACE6842E5BE34152BEB4C68C684BC2B3B2A9A24309FF06977DBAD6623B/0/3134332e3133372e3135312e302f32342d3234203d3e20323634363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:18:77:ae:7d:54:77:bd:20:4a:61:91:d0:8a:06:95:35:d1:
         5e:61:9d:35:66:09:a0:c1:c8:d5:02:95:ba:3a:04:11:c3:b3:
         06:ba:b7:50:38:9a:46:f7:84:e7:79:fd:80:39:c2:78:9b:5f:
         38:48:34:d2:47:68:5f:39:5a:46:aa:b5:90:1a:fe:45:53:7f:
         71:64:f2:ee:08:9c:ee:b0:d0:ed:0d:c9:ee:0b:e7:fe:5b:82:
         7a:db:ae:03:df:8e:68:57:31:c2:c3:89:b3:94:6d:c8:ea:6f:
         fa:ee:10:1a:f1:ab:65:98:7a:74:25:03:d0:ec:57:1e:30:02:
         a0:36:07:07:99:24:b1:19:0d:0a:a4:6f:0a:a0:2a:94:1e:78:
         fa:01:26:0e:89:85:05:74:e2:bb:89:61:81:7b:d0:65:91:66:
         3b:6c:44:26:77:f1:49:a8:04:a3:4d:29:ae:20:ba:79:47:4b:
         e3:89:04:f2:09:74:ae:af:c5:19:ba:4b:cc:87:ed:6e:74:10:
         82:b6:1d:ea:0e:fd:d5:8c:6d:e4:7f:e0:05:b0:5a:1c:ca:32:
         92:24:8b:d2:b8:d9:57:f2:b4:16:e0:c0:9d:a4:0d:33:7f:32:
         89:80:0a:37:40:60:e9:2c:1f:fc:8f:30:52:db:c3:10:81:76:
         d7:93:cf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:42:04 2026 by rpki-client