Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/3134332e3235352e34302e302f32322d3232203d3e20323635353137.roa
File:                     3134332e3235352e34302e302f32322d3232203d3e20323635353137.roa (raw, json)
Hash identifier:          j6UWao1mQT5q8alFfP2+IEloKL/q2eG8U3R+EOIfjKM=
Subject key identifier:   7E:44:E4:98:77:D1:73:DB:63:84:2A:74:4C:96:04:87:1F:DA:9D:44
Certificate issuer:       /CN=8A901349E9DE44646D5EBB4FBBD808B894D6882D
Certificate serial:       51C79DFDAFD169F8AB210FE89E42CED173F19AB4
Authority key identifier: 8A:90:13:49:E9:DE:44:64:6D:5E:BB:4F:BB:D8:08:B8:94:D6:88:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/3134332e3235352e34302e302f32322d3232203d3e20323635353137.roa
Signing time:             Mon 09 Mar 2026 17:33:21 +0000
ROA not before:           Mon 09 Mar 2026 17:28:21 +0000
ROA not after:            Mon 08 Mar 2027 17:33:21 +0000
asID:                     265517
IP address blocks:        143.255.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c7:9d:fd:af:d1:69:f8:ab:21:0f:e8:9e:42:ce:d1:73:f1:9a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A901349E9DE44646D5EBB4FBBD808B894D6882D
        Validity
            Not Before: Mar  9 17:28:21 2026 GMT
            Not After : Mar  8 17:33:21 2027 GMT
        Subject: CN=7E44E49877D173DB63842A744C9604871FDA9D44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:32:42:bd:45:13:34:09:09:3f:f9:17:b6:a8:
                    4b:a6:31:b4:85:e4:29:48:92:e8:bc:8a:9d:23:a0:
                    21:af:d9:a6:d2:14:2d:e3:04:10:bc:a2:3b:73:72:
                    5f:a8:32:d8:8e:7c:e2:18:2f:88:95:9e:ca:1d:23:
                    f1:63:dc:f2:52:37:51:76:c7:ad:2d:61:ec:74:6b:
                    26:c5:e4:06:a7:c7:e2:ad:56:0c:ce:15:ed:ef:1a:
                    23:29:69:0c:10:3e:fd:9a:2b:00:e4:c3:51:0c:9f:
                    ba:bc:73:9a:71:e6:17:5d:c5:42:d4:02:e7:c3:61:
                    dc:09:51:35:8c:d7:45:20:f2:ee:a6:2c:b2:32:06:
                    52:45:4a:b4:82:5a:5c:c6:84:96:45:cf:d8:1d:7f:
                    ee:17:4d:d3:6e:8e:46:ee:2f:8c:47:ac:65:6e:7c:
                    12:02:48:7e:ef:c8:cb:da:17:07:c2:a3:98:d1:18:
                    2f:41:fa:0a:21:8b:ee:3d:62:91:8e:3a:2b:bd:89:
                    00:42:b5:eb:d6:1d:e0:3d:ab:e3:cc:0d:fa:0c:a1:
                    91:22:26:95:92:2b:0d:5a:74:e2:f5:d8:77:e8:d6:
                    ea:8c:02:29:f4:62:48:fe:f0:36:32:1e:1f:5b:4e:
                    90:b3:87:99:d8:df:d7:36:91:d3:6a:c0:73:d3:00:
                    0e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:44:E4:98:77:D1:73:DB:63:84:2A:74:4C:96:04:87:1F:DA:9D:44
            X509v3 Authority Key Identifier:
                keyid:8A:90:13:49:E9:DE:44:64:6D:5E:BB:4F:BB:D8:08:B8:94:D6:88:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/3134332e3235352e34302e302f32322d3232203d3e20323635353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:0f:55:da:a9:d7:46:53:dd:23:a4:63:14:af:9f:34:d9:d2:
         3b:6f:5e:ff:a4:76:ae:7d:8c:ba:b7:08:c4:3f:2b:03:85:13:
         b5:ab:fb:df:cc:d1:07:cc:8b:6b:22:d5:3c:7c:42:58:31:11:
         32:c3:37:f1:bb:49:8b:14:54:42:54:a8:21:78:a1:17:6d:0a:
         90:c5:8f:4f:39:ff:7f:c5:a2:e9:bb:d8:7d:d1:be:a1:fe:1c:
         b0:40:ea:04:95:e7:ad:71:e4:31:51:c1:39:23:db:f8:24:10:
         e1:5c:21:e3:32:13:22:aa:5f:da:47:c8:52:51:5d:2a:84:f7:
         65:39:22:41:81:73:57:f7:68:90:01:3f:9f:6d:98:29:4a:e2:
         c8:8f:7f:5a:5a:7e:56:dd:69:25:26:9b:11:dd:f5:d0:90:6d:
         b5:e9:40:d4:3a:c7:14:9b:f3:e0:da:ed:6d:a7:15:7d:08:81:
         6f:0a:19:c2:3a:1f:8c:84:14:0c:5b:72:3c:d5:88:0d:c4:ad:
         92:89:fa:d3:66:96:9d:0e:56:1f:7a:cf:f1:ef:c2:50:60:16:
         27:f7:f3:9e:9b:90:85:ce:de:09:8d:9e:5b:cd:60:e0:92:39:
         d8:1b:9d:03:d0:38:db:31:35:c8:72:10:2b:dc:2a:1f:dd:fc:
         13:7f:3b:f7
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUced/a/RafirIQ/onkLO0XPxmrQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE5MDEzNDlFOURFNDQ2NDZENUVCQjRGQkJEODA4Qjg5
NEQ2ODgyRDAeFw0yNjAzMDkxNzI4MjFaFw0yNzAzMDgxNzMzMjFaMDMxMTAvBgNV
BAMTKDdFNDRFNDk4NzdEMTczREI2Mzg0MkE3NDRDOTYwNDg3MUZEQTlENDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkMkK9RRM0CQk/+Re2qEumMbSF
5ClIkui8ip0joCGv2abSFC3jBBC8ojtzcl+oMtiOfOIYL4iVnsodI/Fj3PJSN1F2
x60tYex0aybF5Aanx+KtVgzOFe3vGiMpaQwQPv2aKwDkw1EMn7q8c5px5hddxULU
AufDYdwJUTWM10Ug8u6mLLIyBlJFSrSCWlzGhJZFz9gdf+4XTdNujkbuL4xHrGVu
fBICSH7vyMvaFwfCo5jRGC9B+gohi+49YpGOOiu9iQBCtevWHeA9q+PMDfoMoZEi
JpWSKw1adOL12Hfo1uqMAin0Ykj+8DYyHh9bTpCzh5nY39c2kdNqwHPTAA7bAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUfkTkmHfRc9tjhCp0TJYEhx/anUQwHwYDVR0j
BBgwFoAUipATSeneRGRtXrtPu9gIuJTWiC0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzM1NkQwMUY3NzE5NTA5RTAxNDk2MEQ3MTU4ODFFMkVE
MEY1NUI5QjA2QjQ1NTU5NzYzNDNDOEFERjJFOUUwLzAvOEE5MDEzNDlFOURFNDQ2
NDZENUVCQjRGQkJEODA4Qjg5NEQ2ODgyRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QTkwMTM0OUU5REU0NDY0NkQ1
RUJCNEZCQkQ4MDhCODk0RDY4ODJELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUMzNTZEMDFGNzcxOTUwOUUwMTQ5NjBENzE1ODgxRTJFRDBGNTVCOUIw
NkI0NTU1OTc2MzQzQzhBREYyRTlFMC8wLzMxMzQzMzJlMzIzNTM1MmUzNDMwMmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM1MzUzMTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCj/8o
MA0GCSqGSIb3DQEBCwUAA4IBAQAQD1XaqddGU90jpGMUr5802dI7b17/pHaufYy6
twjEPysDhRO1q/vfzNEHzItrItU8fEJYMREywzfxu0mLFFRCVKgheKEXbQqQxY9P
Of9/xaLpu9h90b6h/hywQOoEleetceQxUcE5I9v4JBDhXCHjMhMiql/aR8hSUV0q
hPdlOSJBgXNX92iQAT+fbZgpSuLIj39aWn5W3WklJpsR3fXQkG216UDUOscUm/Pg
2u1tpxV9CIFvChnCOh+MhBQMW3I81YgNxK2SifrTZpadDlYfes/x78JQYBYn9/Oe
m5CFzt4JjZ5bzWDgkjnYG50D0DjbMTXIchAr3Cof3fwTfzv3
-----END CERTIFICATE-----
Generated at Mon Mar 16 03:19:44 2026 by rpki-client