Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3134332e3133372e3130382e302f32322d3234203d3e203232303131.roa
File:                     3134332e3133372e3130382e302f32322d3234203d3e203232303131.roa (raw, json)
Hash identifier:          Qi4RuU7YHazKjFQ1xaxOk5stUopHcw3zKk9+4hkVzAQ=
Subject key identifier:   21:89:09:0B:1B:C7:ED:2F:64:51:3C:89:F6:0E:CE:0E:92:F1:55:83
Certificate issuer:       /CN=49F51DA6C4B18E80CACE58916331C212E02860C4
Certificate serial:       17C0B06D90F49BA9A8D47ED7F9A26F63C54F0FC9
Authority key identifier: 49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3134332e3133372e3130382e302f32322d3234203d3e203232303131.roa
Signing time:             Tue 07 Jul 2026 19:45:00 +0000
ROA not before:           Tue 07 Jul 2026 19:40:00 +0000
ROA not after:            Tue 06 Jul 2027 19:45:00 +0000
asID:                     22011
IP address blocks:        143.137.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c0:b0:6d:90:f4:9b:a9:a8:d4:7e:d7:f9:a2:6f:63:c5:4f:0f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49F51DA6C4B18E80CACE58916331C212E02860C4
        Validity
            Not Before: Jul  7 19:40:00 2026 GMT
            Not After : Jul  6 19:45:00 2027 GMT
        Subject: CN=2189090B1BC7ED2F64513C89F60ECE0E92F15583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:16:83:0c:52:da:b7:67:98:94:39:25:46:6f:
                    94:82:b4:35:f7:4b:fe:32:67:a4:a0:28:fd:08:53:
                    4f:8f:04:b6:e4:66:b7:68:b3:78:fb:ba:2e:94:b2:
                    ba:4b:90:5b:e6:25:34:e5:c7:61:cb:9e:9b:60:88:
                    db:35:2e:22:06:50:9e:09:df:db:40:1c:6c:33:ae:
                    8a:fd:d7:ca:76:44:b0:a8:0f:b7:81:e4:cd:91:f1:
                    82:35:f7:66:89:72:dc:68:0c:3e:47:5b:6e:21:ea:
                    7f:74:de:fb:c1:f5:25:fb:df:af:ca:e9:75:11:00:
                    d4:39:5c:e0:4b:93:9c:f2:c5:37:a7:82:ea:cf:4d:
                    42:98:2d:24:13:15:08:b7:9a:af:9e:43:65:17:63:
                    0d:c3:8e:ec:09:67:51:55:03:cc:61:c4:72:18:42:
                    bf:ca:42:7d:42:b5:e8:49:04:ce:b4:0a:2e:09:a8:
                    dc:a5:5a:2b:4c:4b:4e:f6:86:9e:0b:c6:de:52:ee:
                    63:99:01:08:39:b6:7d:64:2f:89:5d:5c:30:5a:1e:
                    35:5b:0d:32:5b:fc:25:19:7e:94:e6:4b:38:26:8f:
                    66:71:f1:c2:70:4c:57:9c:af:71:18:42:c7:ef:77:
                    61:16:cc:3a:95:c7:53:94:02:67:cc:15:7b:ce:5f:
                    ea:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:89:09:0B:1B:C7:ED:2F:64:51:3C:89:F6:0E:CE:0E:92:F1:55:83
            X509v3 Authority Key Identifier:
                keyid:49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3134332e3133372e3130382e302f32322d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:e6:94:b5:3c:3f:b3:9c:ea:fd:df:ee:6c:39:14:ab:8e:e8:
         eb:04:3f:da:fe:40:b0:44:67:b8:b3:29:c2:1d:25:97:ce:8b:
         c6:89:89:fa:97:b4:ca:2c:13:36:e9:f9:58:64:2a:1a:57:19:
         03:48:b8:50:1f:ce:c3:69:11:55:02:2a:ad:a8:b9:f0:b9:2c:
         5b:98:cd:5b:49:03:bd:2d:1d:bd:05:27:e9:82:2b:7a:5b:57:
         3b:b2:1a:35:d9:76:ed:d0:48:70:84:79:b4:09:86:c3:e4:ff:
         82:2f:f4:76:d8:ce:1e:cd:43:39:8b:ae:81:88:c0:e6:c0:a5:
         8f:16:66:ce:a2:e2:9e:7d:4a:79:15:59:4e:41:8c:6a:06:41:
         41:46:3d:9f:b4:18:d3:c8:f0:db:21:75:e5:52:6c:52:ab:fa:
         16:0a:85:63:64:5a:30:68:f2:7a:fc:f0:0f:ae:b9:86:23:8f:
         6e:b3:f5:9f:b5:c2:52:ba:f3:db:89:69:24:03:ba:77:e3:3b:
         29:25:aa:70:22:c9:6f:5e:6b:68:57:85:75:34:69:c0:0b:dc:
         31:af:83:81:5b:87:a4:b8:db:60:05:ad:c4:73:83:e6:76:0e:
         e9:f9:cb:ad:a3:36:28:20:5e:7c:7d:66:b2:c2:13:6f:38:e1:
         97:d9:da:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:37:54 2026 by rpki-client