Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/3134332e3235352e34302e302f32342d3234203d3e20323635353137.roa
File:                     3134332e3235352e34302e302f32342d3234203d3e20323635353137.roa (raw, json)
Hash identifier:          ftxQWcLgvY2DTParJ7LEmD0zLfaS4se3q7uUZXZ9kHY=
Subject key identifier:   62:03:87:BD:CA:71:C3:04:E4:8E:5E:CA:A0:78:63:71:B5:67:DD:07
Certificate issuer:       /CN=8A901349E9DE44646D5EBB4FBBD808B894D6882D
Certificate serial:       1F6B9530DBF75ABB343CAE1C4A0EFA36E1E8113C
Authority key identifier: 8A:90:13:49:E9:DE:44:64:6D:5E:BB:4F:BB:D8:08:B8:94:D6:88:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/3134332e3235352e34302e302f32342d3234203d3e20323635353137.roa
Signing time:             Mon 09 Mar 2026 17:33:22 +0000
ROA not before:           Mon 09 Mar 2026 17:28:22 +0000
ROA not after:            Mon 08 Mar 2027 17:33:22 +0000
asID:                     265517
IP address blocks:        143.255.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Mar 2026 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:6b:95:30:db:f7:5a:bb:34:3c:ae:1c:4a:0e:fa:36:e1:e8:11:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A901349E9DE44646D5EBB4FBBD808B894D6882D
        Validity
            Not Before: Mar  9 17:28:22 2026 GMT
            Not After : Mar  8 17:33:22 2027 GMT
        Subject: CN=620387BDCA71C304E48E5ECAA0786371B567DD07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0f:87:75:0d:e9:51:70:9b:8b:37:5d:80:1a:
                    40:a7:2c:25:57:10:6d:86:80:d0:5f:26:d7:f4:a5:
                    68:55:b0:39:d7:33:44:ca:d4:d2:12:3f:67:15:4e:
                    d6:aa:b4:1c:42:bb:73:c2:c8:e0:6f:97:d0:0c:2e:
                    8a:98:c5:74:52:ee:54:20:10:68:df:43:5e:df:b4:
                    9a:c3:03:c0:55:d3:0e:7f:00:31:30:93:c5:a8:0a:
                    06:0c:c5:50:73:ab:38:20:05:4a:de:b8:be:2a:f5:
                    c6:3e:58:a9:a8:6a:1e:06:ee:e7:80:64:a2:89:6b:
                    87:af:33:5b:e5:01:df:6b:b7:94:b5:32:d1:d6:cb:
                    58:9b:90:a4:c2:76:68:14:8d:fc:28:4d:9b:e9:64:
                    86:77:37:6f:38:18:25:6a:44:9c:e4:91:a9:d0:35:
                    c8:17:68:4f:74:4e:3e:3b:e6:bd:f6:3d:de:b5:1c:
                    f0:c6:54:92:0c:b6:f6:f7:eb:0e:a5:ca:06:73:d0:
                    fa:56:be:ec:96:dd:f6:09:a6:a8:3a:b2:fc:d6:e3:
                    fd:52:e3:09:a6:0d:fb:57:f2:8b:89:fc:1e:64:91:
                    3c:86:78:c2:c2:37:2b:25:d2:2d:42:41:60:0e:c6:
                    e8:80:53:0f:ed:0d:c0:12:86:7c:7b:77:60:c8:c7:
                    e8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:03:87:BD:CA:71:C3:04:E4:8E:5E:CA:A0:78:63:71:B5:67:DD:07
            X509v3 Authority Key Identifier:
                keyid:8A:90:13:49:E9:DE:44:64:6D:5E:BB:4F:BB:D8:08:B8:94:D6:88:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A901349E9DE44646D5EBB4FBBD808B894D6882D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C356D01F7719509E014960D715881E2ED0F55B9B06B4555976343C8ADF2E9E0/0/3134332e3235352e34302e302f32342d3234203d3e20323635353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:4d:32:17:a7:45:33:0c:74:35:8c:6e:db:2d:4e:68:3e:e7:
         23:61:63:b4:bc:13:45:a1:be:92:2c:1e:f1:31:a0:33:34:bc:
         86:a5:5d:75:50:02:5d:15:67:48:7a:e5:1e:5e:d1:04:25:68:
         4e:db:5c:a6:22:6e:b0:d6:c6:9e:87:6f:1f:f2:12:39:be:90:
         13:bf:e7:06:f7:7c:d8:85:b7:ac:0b:e7:8c:54:63:38:1b:f4:
         d5:70:db:aa:77:19:e1:4a:cf:5d:2f:62:c0:f0:73:f1:7f:42:
         fc:8a:9a:7b:eb:7c:1b:48:e3:e2:7d:52:ad:97:ef:ac:0e:92:
         2d:e8:a5:36:75:29:0b:e2:f5:15:02:97:84:37:64:21:ad:c4:
         16:8f:e2:95:0e:f7:da:cf:ee:d4:27:ef:48:07:0b:8e:b1:57:
         89:90:31:c5:39:c5:01:58:cb:01:52:9e:f9:9a:13:18:e3:3e:
         64:71:60:23:63:bd:5c:be:d6:c2:ff:b8:50:fc:e8:4d:85:12:
         9b:d3:1c:df:3b:65:a9:11:81:44:7d:90:01:63:0c:6a:45:d9:
         2d:5b:8d:0f:5f:b8:e1:2a:32:16:4a:88:7e:f5:8e:8c:ab:1c:
         14:e7:ea:77:3b:f0:64:1e:db:8f:df:f5:a1:79:7a:1d:45:ae:
         4d:7d:8e:ef
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUH2uVMNv3Wrs0PK4cSg76NuHoETwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE5MDEzNDlFOURFNDQ2NDZENUVCQjRGQkJEODA4Qjg5
NEQ2ODgyRDAeFw0yNjAzMDkxNzI4MjJaFw0yNzAzMDgxNzMzMjJaMDMxMTAvBgNV
BAMTKDYyMDM4N0JEQ0E3MUMzMDRFNDhFNUVDQUEwNzg2MzcxQjU2N0REMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMD4d1DelRcJuLN12AGkCnLCVX
EG2GgNBfJtf0pWhVsDnXM0TK1NISP2cVTtaqtBxCu3PCyOBvl9AMLoqYxXRS7lQg
EGjfQ17ftJrDA8BV0w5/ADEwk8WoCgYMxVBzqzggBUreuL4q9cY+WKmoah4G7ueA
ZKKJa4evM1vlAd9rt5S1MtHWy1ibkKTCdmgUjfwoTZvpZIZ3N284GCVqRJzkkanQ
NcgXaE90Tj475r32Pd61HPDGVJIMtvb36w6lygZz0PpWvuyW3fYJpqg6svzW4/1S
4wmmDftX8ouJ/B5kkTyGeMLCNysl0i1CQWAOxuiAUw/tDcAShnx7d2DIx+gdAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUYgOHvcpxwwTkjl7KoHhjcbVn3QcwHwYDVR0j
BBgwFoAUipATSeneRGRtXrtPu9gIuJTWiC0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzM1NkQwMUY3NzE5NTA5RTAxNDk2MEQ3MTU4ODFFMkVE
MEY1NUI5QjA2QjQ1NTU5NzYzNDNDOEFERjJFOUUwLzAvOEE5MDEzNDlFOURFNDQ2
NDZENUVCQjRGQkJEODA4Qjg5NEQ2ODgyRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QTkwMTM0OUU5REU0NDY0NkQ1
RUJCNEZCQkQ4MDhCODk0RDY4ODJELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUMzNTZEMDFGNzcxOTUwOUUwMTQ5NjBENzE1ODgxRTJFRDBGNTVCOUIw
NkI0NTU1OTc2MzQzQzhBREYyRTlFMC8wLzMxMzQzMzJlMzIzNTM1MmUzNDMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzUzMTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj/8o
MA0GCSqGSIb3DQEBCwUAA4IBAQCATTIXp0UzDHQ1jG7bLU5oPucjYWO0vBNFob6S
LB7xMaAzNLyGpV11UAJdFWdIeuUeXtEEJWhO21ymIm6w1saeh28f8hI5vpATv+cG
93zYhbesC+eMVGM4G/TVcNuqdxnhSs9dL2LA8HPxf0L8ipp763wbSOPifVKtl++s
DpIt6KU2dSkL4vUVApeEN2QhrcQWj+KVDvfaz+7UJ+9IBwuOsVeJkDHFOcUBWMsB
Up75mhMY4z5kcWAjY71cvtbC/7hQ/OhNhRKb0xzfO2WpEYFEfZABYwxqRdktW40P
X7jhKjIWSoh+9Y6MqxwU5+p3O/BkHtuP3/WheXodRa5NfY7v
-----END CERTIFICATE-----
Generated at Mon Mar 16 03:20:15 2026 by rpki-client