Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139382e31322e33392e302f32342d3234203d3e20323733303838.roa
File:                     3139382e31322e33392e302f32342d3234203d3e20323733303838.roa (raw, json)
Hash identifier:          5iIqV5u0W9MFS79aFuJbcRjjohOvg+R145hVaHy0ot0=
Subject key identifier:   EC:C4:A0:7E:E6:85:93:D5:09:90:38:54:9E:B7:67:FD:3A:6A:5F:33
Certificate issuer:       /CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
Certificate serial:       3FABD9CC4530FA14120A52B823D1B6490EFC0E38
Authority key identifier: DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139382e31322e33392e302f32342d3234203d3e20323733303838.roa
Signing time:             Mon 18 Aug 2025 20:40:08 +0000
ROA not before:           Mon 18 Aug 2025 20:35:08 +0000
ROA not after:            Mon 17 Aug 2026 20:40:08 +0000
asID:                     273088
IP address blocks:        198.12.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ab:d9:cc:45:30:fa:14:12:0a:52:b8:23:d1:b6:49:0e:fc:0e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
        Validity
            Not Before: Aug 18 20:35:08 2025 GMT
            Not After : Aug 17 20:40:08 2026 GMT
        Subject: CN=ECC4A07EE68593D5099038549EB767FD3A6A5F33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:f2:9f:f8:7c:38:97:5b:13:cd:9a:4e:3f:
                    05:89:0c:a1:73:cd:26:9e:0a:e0:af:bf:55:04:3b:
                    94:2f:9a:ed:f5:ba:0d:21:d8:72:a5:72:bf:c3:a2:
                    de:91:7e:75:b7:eb:55:83:77:56:92:ed:2c:53:2a:
                    98:b7:75:e8:95:6a:04:24:f9:3e:46:78:33:3b:22:
                    30:7d:f8:24:1f:ef:01:ef:51:40:bb:d6:58:f8:99:
                    39:86:6d:c3:52:ee:99:e5:0f:cc:a4:2e:77:db:e0:
                    ea:18:4c:47:46:d8:e0:d4:b3:f4:6f:64:3d:28:52:
                    25:9a:42:9b:78:88:e4:38:6b:6b:c9:e5:d1:df:ca:
                    01:6a:c0:bc:f0:93:39:97:ce:01:92:3c:01:76:a6:
                    65:94:fb:69:1e:66:63:ba:68:f3:42:b4:12:aa:52:
                    d4:0b:03:a4:c7:9e:8f:1b:5a:12:39:67:02:4b:62:
                    3b:af:c9:96:7c:19:d1:5f:6b:5e:b0:db:39:31:b6:
                    30:33:80:af:20:43:00:f9:87:e8:55:54:58:1f:aa:
                    90:36:02:3a:9b:10:8e:59:bb:c5:b4:c2:d9:4c:30:
                    bd:42:1c:42:08:f7:9d:4a:76:88:b3:06:c7:7a:a0:
                    80:b1:7c:b3:83:77:22:24:a3:ba:30:fe:e4:57:cb:
                    bc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C4:A0:7E:E6:85:93:D5:09:90:38:54:9E:B7:67:FD:3A:6A:5F:33
            X509v3 Authority Key Identifier:
                keyid:DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/3139382e31322e33392e302f32342d3234203d3e20323733303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.12.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:19:54:7c:6f:69:0b:c0:7d:60:12:59:e3:5c:cf:56:05:34:
         15:1b:e6:03:d2:97:91:4c:fd:e1:97:c4:fa:d5:4b:34:c6:84:
         22:e7:9d:6f:a8:fb:41:f4:60:90:ef:f2:b7:7a:6e:68:d9:d8:
         e0:41:0f:93:f4:a6:bf:d7:cc:6f:7f:16:ee:b1:b4:ce:4d:0f:
         2a:dd:5b:2c:00:d9:8d:44:94:3b:54:1b:98:8f:6f:a8:31:60:
         06:04:d0:e4:d5:50:c6:b2:78:13:76:9c:84:f9:54:81:64:f0:
         69:a7:ec:81:28:ae:86:dd:28:fb:63:5a:be:d4:cd:b9:51:b0:
         8a:79:f0:3e:e5:d5:25:b1:d5:6d:78:1b:59:8d:c6:87:1c:0b:
         af:b7:c1:0f:a7:2a:bf:bf:c2:86:18:b4:8c:1e:49:ec:a4:be:
         ea:f0:b9:30:42:6a:26:38:23:0a:01:20:89:8d:75:10:bc:5c:
         3c:d4:55:11:68:6b:32:93:82:b9:16:5a:74:21:15:d1:e4:fc:
         b0:d6:fb:07:c5:7c:7f:b3:da:8d:ad:39:93:23:cc:4e:20:8b:
         ae:58:6e:be:ec:66:ec:0c:ec:03:a6:ae:09:6f:af:4c:ad:96:
         b2:27:1b:11:18:5d:6d:b0:1f:90:1a:da:e0:53:ac:b5:12:44:
         63:44:d3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:26:31 2025 by rpki-client