Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3134332e3235352e3234382e302f32322d3234203d3e203230303830.roa
File:                     3134332e3235352e3234382e302f32322d3234203d3e203230303830.roa (raw, json)
Hash identifier:          jLfdHv5RiHLcpqRAIa2kdiJqFjukjPAwik4eeO+vY4w=
Subject key identifier:   91:9D:23:44:86:42:C6:E7:E6:87:13:D9:17:44:0A:1D:E7:B8:B7:69
Certificate issuer:       /CN=12608F449BBF3F86819F95307654EF5D740A9084
Certificate serial:       1503AE20CEDAFF8A50A2293F5346F8621123ED
Authority key identifier: 12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3134332e3235352e3234382e302f32322d3234203d3e203230303830.roa
Signing time:             Thu 07 May 2026 13:25:00 +0000
ROA not before:           Thu 07 May 2026 13:20:00 +0000
ROA not after:            Thu 06 May 2027 13:25:00 +0000
asID:                     20080
IP address blocks:        143.255.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 13:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:03:ae:20:ce:da:ff:8a:50:a2:29:3f:53:46:f8:62:11:23:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12608F449BBF3F86819F95307654EF5D740A9084
        Validity
            Not Before: May  7 13:20:00 2026 GMT
            Not After : May  6 13:25:00 2027 GMT
        Subject: CN=919D23448642C6E7E68713D917440A1DE7B8B769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:40:11:d9:b1:6e:7d:13:d3:0f:d0:6b:1e:e1:
                    c7:19:72:d0:bf:b0:ef:e6:11:e6:1a:47:60:2c:bb:
                    ee:42:07:4c:74:1a:91:ae:52:88:6f:8d:ea:36:17:
                    48:37:d4:7d:81:b8:2b:aa:9e:cd:7c:31:c3:a2:ce:
                    91:32:bf:04:31:e8:d5:8b:11:29:3b:ae:6c:c5:98:
                    78:dc:07:11:f8:5a:11:31:e7:72:38:41:9b:ff:c5:
                    9b:b2:df:2a:6c:56:4f:24:ff:3e:87:ad:ec:ee:22:
                    4c:b1:5d:6e:53:4e:17:9c:c7:55:ca:ed:59:ad:63:
                    79:43:b0:de:b4:75:b6:08:7b:c8:35:90:e4:46:70:
                    25:4e:a3:75:98:fb:19:0b:9b:93:b8:24:7e:07:f4:
                    2a:e9:54:f9:f0:bf:9e:49:f4:df:07:c1:2e:c9:0a:
                    b7:ce:72:b7:bc:ee:ca:a8:2f:2a:29:1f:59:4f:47:
                    76:fb:a4:40:33:63:8c:2b:d5:72:47:30:5e:ef:d4:
                    58:59:ea:91:bd:de:42:6f:d6:b9:42:32:e7:46:0a:
                    56:bd:b9:5a:7f:2a:ba:8b:e0:3d:7e:96:32:54:e9:
                    17:0e:b6:b1:13:5e:87:2a:72:90:fb:d8:27:f5:30:
                    c2:91:b9:fd:49:e6:8f:85:2b:62:81:8b:a7:e2:94:
                    8e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9D:23:44:86:42:C6:E7:E6:87:13:D9:17:44:0A:1D:E7:B8:B7:69
            X509v3 Authority Key Identifier:
                keyid:12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3134332e3235352e3234382e302f32322d3234203d3e203230303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:18:be:b0:e5:fc:a0:ba:0a:a4:a7:f9:e5:e0:15:53:e7:88:
         9e:b8:59:da:16:88:bc:37:e0:8a:da:bd:84:46:c7:64:a1:0e:
         70:fd:5a:a3:ca:48:2f:1f:85:05:a1:a9:e3:f0:27:f7:aa:61:
         17:e8:f7:7d:43:13:b4:96:d5:e2:6e:b8:6b:39:36:dd:90:fc:
         93:d3:2f:3b:d5:60:86:b4:d9:2d:89:77:03:43:e3:e2:f1:ee:
         57:58:13:c6:09:2e:e5:a5:b8:6f:87:4c:45:8f:f5:e3:d9:52:
         ad:00:59:af:77:d0:68:ee:85:a8:b5:0d:0d:1b:1d:a2:4b:66:
         74:63:e8:37:9b:6c:82:93:49:7a:b8:13:93:b8:9c:92:d3:71:
         16:1c:98:22:56:8c:cb:52:b6:b4:0d:4e:6f:4f:4c:8b:96:8a:
         e8:dc:9a:78:fc:18:82:72:3f:91:7e:aa:15:b0:39:6a:79:0a:
         3c:f7:d7:e1:06:9d:e7:e8:57:10:a5:d5:39:66:dc:65:b5:f4:
         fb:c1:ab:67:47:18:aa:cf:42:3c:18:70:b5:05:fb:62:8f:42:
         9d:e9:87:44:ef:b0:fd:7c:50:5c:02:e0:8b:25:01:50:c6:16:
         2a:22:b8:3d:3b:62:4b:e2:7a:20:0f:b3:3b:06:80:56:62:7f:
         69:34:b2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:11:24 2026 by rpki-client