Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234392e39362e302f31392d3234203d3e203133353739.roa
File:                     3230372e3234392e39362e302f31392d3234203d3e203133353739.roa (raw, json)
Hash identifier:          p/+DSQ69lIQzmAqWeCLCnNZ0O8WCs3hpKzvhG7CUpgw=
Subject key identifier:   95:D5:2F:EB:EB:AF:D3:64:93:16:7D:92:0E:49:31:40:78:2D:04:91
Certificate issuer:       /CN=C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA
Certificate serial:       371B710F24E1C70C765142B6C6E53C9DD55F60C4
Authority key identifier: C2:FE:C7:92:F3:5A:A2:4D:1C:CC:16:C8:43:2F:4B:D4:4B:DF:CE:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234392e39362e302f31392d3234203d3e203133353739.roa
Signing time:             Tue 02 Jun 2026 23:46:21 +0000
ROA not before:           Tue 02 Jun 2026 23:41:21 +0000
ROA not after:            Tue 01 Jun 2027 23:46:21 +0000
asID:                     13579
IP address blocks:        207.249.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 12:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:1b:71:0f:24:e1:c7:0c:76:51:42:b6:c6:e5:3c:9d:d5:5f:60:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA
        Validity
            Not Before: Jun  2 23:41:21 2026 GMT
            Not After : Jun  1 23:46:21 2027 GMT
        Subject: CN=95D52FEBEBAFD36493167D920E493140782D0491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:42:d2:96:27:79:94:a9:b3:58:4b:62:70:05:
                    10:5e:03:32:0d:44:39:30:d9:f9:06:54:5c:85:dd:
                    f9:96:a9:eb:7d:28:30:70:36:c6:cd:a7:9e:9b:61:
                    0b:a4:e2:0b:b5:8e:23:1b:24:9a:99:f4:74:44:8e:
                    76:fb:d0:f9:a7:87:d1:fb:46:ae:c8:a9:cb:36:67:
                    32:f4:86:f1:93:6c:5c:20:73:d3:ea:49:60:75:2e:
                    b0:b7:84:83:c1:b9:8d:1e:24:4c:4e:94:46:b2:a0:
                    5b:82:71:f5:91:a1:12:8c:0c:65:16:cd:80:90:aa:
                    70:99:8a:8e:84:69:53:de:35:24:aa:9e:56:7b:9a:
                    3c:85:3c:12:22:ae:d1:8d:41:d1:8b:30:0e:1a:cf:
                    25:b2:e2:51:fb:8b:8d:1c:e3:24:ce:16:6d:c1:44:
                    bc:68:ab:12:cf:87:c6:74:06:3f:4c:1f:d5:19:b2:
                    fc:06:da:88:f9:1b:b4:51:b1:d1:c3:26:06:87:fd:
                    b8:a5:19:15:ac:b1:40:96:2e:4d:dc:2b:99:e9:d5:
                    ee:33:8d:63:d8:3a:46:35:f8:f1:8d:a2:93:f2:05:
                    62:13:17:29:58:96:eb:ca:d5:c9:69:16:02:a1:a9:
                    bd:f4:50:81:91:00:1e:7d:e7:f1:53:aa:f2:19:3a:
                    de:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D5:2F:EB:EB:AF:D3:64:93:16:7D:92:0E:49:31:40:78:2D:04:91
            X509v3 Authority Key Identifier:
                keyid:C2:FE:C7:92:F3:5A:A2:4D:1C:CC:16:C8:43:2F:4B:D4:4B:DF:CE:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234392e39362e302f31392d3234203d3e203133353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.249.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         66:b2:b5:e4:bc:55:a2:7e:d1:08:34:04:7d:7f:b6:1c:fe:db:
         d0:c5:dd:94:e5:23:f7:57:f4:e3:72:03:33:a4:c7:7f:3b:4d:
         09:be:d3:5b:94:3f:84:fe:99:58:ad:07:79:09:8f:d5:92:a5:
         d5:cb:bc:be:ea:f9:73:65:62:38:fc:88:d7:e5:89:92:af:ee:
         0b:82:51:c0:5d:7d:ea:44:9a:e6:da:ef:ef:1e:97:71:65:60:
         2b:8b:ef:3a:6b:96:d0:ce:63:74:04:63:8b:51:3c:75:a5:5b:
         20:3c:e8:08:63:19:a0:f5:15:56:09:1f:89:8a:59:d4:51:e4:
         cc:0d:1a:78:70:2b:8c:c1:80:24:d8:cc:fb:bc:da:57:58:25:
         02:60:b2:07:8b:4b:e1:1a:62:17:03:7f:b9:a7:b1:51:59:99:
         51:a1:67:de:66:b6:db:a7:e6:cd:30:eb:43:bf:e4:14:99:93:
         c3:74:b2:9d:a5:fd:52:8d:01:72:fd:9e:0f:25:93:a9:00:b6:
         c4:41:57:fa:55:9c:18:2e:de:80:ec:ab:fa:00:f4:de:4c:4a:
         af:da:20:43:eb:1e:af:e4:2d:52:84:8b:2e:28:9c:52:ff:ab:
         58:7f:f9:67:41:89:ca:bd:9a:f3:c2:1b:55:f8:31:70:87:ff:
         57:f8:57:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:39:20 2026 by rpki-client