Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134322e302f32342d3234203d3e20323730313036.roa
File:                     3139312e3234312e3134322e302f32342d3234203d3e20323730313036.roa (raw, json)
Hash identifier:          kyGG5NFXxVhSHYo19J8sJXl0g3FXH6F73l1nOWZ8zYM=
Subject key identifier:   12:26:79:5C:45:BD:A6:90:36:0B:BA:66:40:4F:7A:D1:47:C8:3F:8D
Certificate issuer:       /CN=8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83
Certificate serial:       27C3BC340F28DFB1A6A1372D7919612E25C35944
Authority key identifier: 8F:3A:F6:49:2C:8F:EF:73:1C:BF:ED:BF:D0:8A:6B:91:8F:DA:4D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134322e302f32342d3234203d3e20323730313036.roa
Signing time:             Sat 21 Mar 2026 20:35:26 +0000
ROA not before:           Sat 21 Mar 2026 20:30:26 +0000
ROA not after:            Sat 20 Mar 2027 20:35:26 +0000
asID:                     270106
IP address blocks:        191.241.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Mar 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c3:bc:34:0f:28:df:b1:a6:a1:37:2d:79:19:61:2e:25:c3:59:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83
        Validity
            Not Before: Mar 21 20:30:26 2026 GMT
            Not After : Mar 20 20:35:26 2027 GMT
        Subject: CN=1226795C45BDA690360BBA66404F7AD147C83F8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4e:b2:19:27:ad:c0:77:6c:f1:a0:6e:c2:0d:
                    34:eb:78:61:cd:f7:ee:f9:03:c0:cc:67:03:52:34:
                    fa:47:21:3e:18:0a:82:d5:e3:8d:dd:0b:e3:13:b2:
                    db:2e:a9:a8:6e:3f:cb:f1:20:a9:eb:bd:80:7d:d4:
                    73:14:f2:a1:0d:73:e4:db:f4:f9:09:90:56:0a:a3:
                    83:54:a9:7e:f3:c5:6e:06:6d:08:89:c9:08:33:1f:
                    fc:a7:5a:5e:75:e1:b0:7a:90:b1:84:99:8e:81:06:
                    c2:1a:43:5f:46:cd:6a:af:be:2f:89:8e:44:17:bf:
                    72:49:fc:e8:9d:a7:b5:35:50:00:c6:99:76:9a:39:
                    d3:5c:fa:90:4f:26:2c:c8:08:2a:42:60:37:82:5f:
                    b6:c1:25:b3:e5:a0:cf:ed:6a:38:0e:e1:ce:eb:7c:
                    4e:ed:de:8d:0c:cb:a1:24:c8:1e:9c:0c:bf:ba:9e:
                    b8:11:94:5f:4c:4c:95:60:ea:f1:61:bc:19:1d:9d:
                    08:12:67:9e:0c:5d:b4:56:2d:5f:6b:66:f0:8e:f0:
                    64:f3:bd:49:c1:0c:87:29:bf:d5:cc:0f:7a:76:6c:
                    c4:af:a8:6b:0e:6f:d9:ea:35:64:28:5c:ea:4d:09:
                    05:4c:eb:aa:a3:2b:c8:a2:27:34:58:6b:1d:75:46:
                    97:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:26:79:5C:45:BD:A6:90:36:0B:BA:66:40:4F:7A:D1:47:C8:3F:8D
            X509v3 Authority Key Identifier:
                keyid:8F:3A:F6:49:2C:8F:EF:73:1C:BF:ED:BF:D0:8A:6B:91:8F:DA:4D:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134322e302f32342d3234203d3e20323730313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:39:77:a7:43:04:da:d9:60:15:82:d4:ed:17:50:3c:e9:a4:
         d5:78:42:72:e6:26:07:0f:23:d4:b1:41:d9:23:ef:a9:3d:9d:
         fa:12:23:0e:35:69:a1:5d:28:0a:ca:c4:71:f9:ab:ad:7a:e4:
         29:cb:e9:2c:20:4b:f6:ad:06:2e:73:1f:5f:da:0f:4f:77:70:
         93:49:c7:72:5c:39:75:67:94:cd:77:50:f4:7b:4b:bd:d4:ab:
         ac:17:fe:cb:fe:f2:bd:b3:41:0a:98:4c:2e:03:97:1c:4f:0a:
         d5:bc:f2:5f:f3:e2:ee:e1:06:7e:4d:72:42:9e:8a:37:db:12:
         1e:44:05:88:8b:a0:4c:fd:b8:06:be:df:1a:89:d1:6e:8a:18:
         4f:84:3e:4f:db:1a:40:60:36:15:99:c6:8a:45:c4:72:8f:b0:
         30:8e:10:43:65:3e:8a:8e:bb:fc:10:29:dd:4a:0b:87:7a:f6:
         c8:29:c7:c9:fb:24:44:6f:7c:4c:88:05:7d:a8:f5:76:50:7d:
         08:5f:73:87:aa:e7:86:fc:d0:02:35:7f:27:b2:eb:08:84:3d:
         46:0e:2c:d6:ce:c9:d3:d7:6c:d6:35:00:f7:44:38:86:3a:d0:
         ab:38:18:94:6d:c5:a0:42:e8:b5:3b:80:6e:2b:77:e0:7b:a9:
         7c:78:88:5b
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUJ8O8NA8o37GmoTcteRlhLiXDWUQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEYzQUY2NDkyQzhGRUY3MzFDQkZFREJGRDA4QTZCOTE4
RkRBNEQ4MzAeFw0yNjAzMjEyMDMwMjZaFw0yNzAzMjAyMDM1MjZaMDMxMTAvBgNV
BAMTKDEyMjY3OTVDNDVCREE2OTAzNjBCQkE2NjQwNEY3QUQxNDdDODNGOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQTrIZJ63Ad2zxoG7CDTTreGHN
9+75A8DMZwNSNPpHIT4YCoLV443dC+MTstsuqahuP8vxIKnrvYB91HMU8qENc+Tb
9PkJkFYKo4NUqX7zxW4GbQiJyQgzH/ynWl514bB6kLGEmY6BBsIaQ19GzWqvvi+J
jkQXv3JJ/Oidp7U1UADGmXaaOdNc+pBPJizICCpCYDeCX7bBJbPloM/tajgO4c7r
fE7t3o0My6EkyB6cDL+6nrgRlF9MTJVg6vFhvBkdnQgSZ54MXbRWLV9rZvCO8GTz
vUnBDIcpv9XMD3p2bMSvqGsOb9nqNWQoXOpNCQVM66qjK8iiJzRYax11Rpf1AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUEiZ5XEW9ppA2C7pmQE960UfIP40wHwYDVR0j
BBgwFoAUjzr2SSyP73Mcv+2/0IprkY/aTYMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NEU5Q0ZEMEJDQzQ0RDFDRjA4RkRBMjQ1QjBBMzA4OEIw
MjQ5Q0ExRjYyOUZBMkVDMzBCRUU4MDA2ODA5OTVDLzAvOEYzQUY2NDkyQzhGRUY3
MzFDQkZFREJGRDA4QTZCOTE4RkRBNEQ4My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RjNBRjY0OTJDOEZFRjczMUNC
RkVEQkZEMDhBNkI5MThGREE0RDgzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODRFOUNGRDBCQ0M0NEQxQ0YwOEZEQTI0NUIwQTMwODhCMDI0OUNBMUY2
MjlGQTJFQzMwQkVFODAwNjgwOTk1Qy8wLzMxMzkzMTJlMzIzNDMxMmUzMTM0MzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzAzMTMwMzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC/
8Y4wDQYJKoZIhvcNAQELBQADggEBAGI5d6dDBNrZYBWC1O0XUDzppNV4QnLmJgcP
I9SxQdkj76k9nfoSIw41aaFdKArKxHH5q6165CnL6SwgS/atBi5zH1/aD093cJNJ
x3JcOXVnlM13UPR7S73Uq6wX/sv+8r2zQQqYTC4DlxxPCtW88l/z4u7hBn5NckKe
ijfbEh5EBYiLoEz9uAa+3xqJ0W6KGE+EPk/bGkBgNhWZxopFxHKPsDCOEENlPoqO
u/wQKd1KC4d69sgpx8n7JERvfEyIBX2o9XZQfQhfc4eq54b80AI1fyey6wiEPUYO
LNbOydPXbNY1APdEOIY60Ks4GJRtxaBC6LU7gG4rd+B7qXx4iFs=
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:37:31 2026 by rpki-client