Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3134332e3133372e3130382e302f32322d3234203d3e203232393038.roa
File:                     3134332e3133372e3130382e302f32322d3234203d3e203232393038.roa (raw, json)
Hash identifier:          cxsLZ5nPHnkZTULVijCNYcBducbF8PrbJYVyP4GWRD8=
Subject key identifier:   BD:9F:19:B7:7A:D5:87:83:38:A8:E8:6C:79:F2:D3:9E:7B:2F:B0:90
Certificate issuer:       /CN=49F51DA6C4B18E80CACE58916331C212E02860C4
Certificate serial:       6EC415552C559BF82B14FD39054FD0458A9E9B56
Authority key identifier: 49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3134332e3133372e3130382e302f32322d3234203d3e203232393038.roa
Signing time:             Tue 07 Jul 2026 19:45:00 +0000
ROA not before:           Tue 07 Jul 2026 19:40:00 +0000
ROA not after:            Tue 06 Jul 2027 19:45:00 +0000
asID:                     22908
IP address blocks:        143.137.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c4:15:55:2c:55:9b:f8:2b:14:fd:39:05:4f:d0:45:8a:9e:9b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49F51DA6C4B18E80CACE58916331C212E02860C4
        Validity
            Not Before: Jul  7 19:40:00 2026 GMT
            Not After : Jul  6 19:45:00 2027 GMT
        Subject: CN=BD9F19B77AD5878338A8E86C79F2D39E7B2FB090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fd:12:44:40:23:1c:7a:27:86:f9:74:8a:33:
                    9a:b9:88:2e:fb:b4:0d:60:4f:aa:22:83:f5:cd:a2:
                    8d:80:ee:51:61:ca:5a:d0:ba:62:e4:3d:19:6f:f1:
                    e6:b3:cc:39:72:7b:48:7a:3a:d2:41:9b:92:fe:d0:
                    1d:53:66:33:8e:eb:0e:4c:b9:7e:29:e5:3b:44:bc:
                    b1:31:5b:77:0d:12:5f:06:9f:6e:5c:6a:a1:41:4f:
                    52:0f:61:4d:d3:14:b5:20:c2:6c:d3:59:f0:44:1a:
                    cb:55:6d:51:8c:9a:5d:e9:91:ac:13:57:7b:98:fa:
                    9c:7d:be:a6:7e:a0:3d:07:6d:16:cd:06:ae:38:0b:
                    3c:84:5f:93:ea:7b:89:a6:16:f5:73:77:24:6b:f0:
                    3a:6f:85:27:64:66:e9:44:78:13:60:26:86:14:0c:
                    c7:40:49:4d:50:1c:98:e7:73:5d:49:4b:7f:38:3b:
                    03:23:f8:de:09:2d:38:37:5c:26:56:d6:fb:3b:b8:
                    67:c6:83:ad:ed:4c:df:e2:69:fa:8c:c5:04:0e:28:
                    57:c5:b0:02:73:5c:83:37:a2:e9:28:69:ce:58:7c:
                    e9:7d:95:f7:7d:b2:09:ed:9d:1e:ba:db:7b:ea:6e:
                    7a:0b:d3:94:6c:c9:9b:a8:67:bd:3f:ee:dd:aa:d2:
                    ef:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9F:19:B7:7A:D5:87:83:38:A8:E8:6C:79:F2:D3:9E:7B:2F:B0:90
            X509v3 Authority Key Identifier:
                keyid:49:F5:1D:A6:C4:B1:8E:80:CA:CE:58:91:63:31:C2:12:E0:28:60:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/49F51DA6C4B18E80CACE58916331C212E02860C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49F51DA6C4B18E80CACE58916331C212E02860C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C61F4D8E318209841A7C3F556C9B3ADA6D33B229018202AAB1CAFA46B60B8770/0/3134332e3133372e3130382e302f32322d3234203d3e203232393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:22:eb:fb:aa:5e:e0:37:4a:6f:6d:60:17:7a:52:a1:d7:cb:
         2e:a6:27:c5:0e:2f:c9:1a:7c:d8:78:05:92:57:6e:80:33:82:
         9d:cf:d8:d5:59:9c:1a:58:48:20:d1:70:e5:72:2c:11:f7:19:
         e9:62:7d:61:21:77:26:ef:c6:54:8f:13:17:a2:a0:94:a4:90:
         b1:ac:0a:0a:b1:20:9d:42:22:d0:64:e2:24:d2:f7:15:56:b4:
         f9:46:b1:b8:58:5f:a8:bb:a0:31:76:6f:41:57:21:37:22:a4:
         44:06:f5:27:8e:44:98:77:f5:d8:5f:b6:f8:c4:4e:60:24:2b:
         f4:c0:4e:f5:ec:de:5d:a6:a2:22:a9:2e:a1:ac:4a:af:1f:c3:
         53:e0:8e:0e:32:5a:e5:96:d9:ef:97:7e:26:83:a3:55:6f:61:
         61:02:2c:fd:65:e2:da:f6:45:db:4f:5d:d7:e2:14:6b:57:87:
         9f:c1:a0:43:aa:06:97:1c:60:26:1c:b5:27:87:38:3d:6d:82:
         5b:1b:10:1d:29:43:da:fc:80:31:70:81:25:7d:c2:67:23:28:
         4f:b9:c2:6e:3a:46:ef:c6:ba:2c:95:cf:1c:0a:46:f6:14:0c:
         15:a7:dc:83:d3:32:b3:85:5e:51:08:5e:1d:76:c0:7b:6b:ed:
         a3:90:8b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:54:33 2026 by rpki-client