Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/3133382e39392e3231322e302f32322d3234203d3e203237363630.roa
File:                     3133382e39392e3231322e302f32322d3234203d3e203237363630.roa (raw, json)
Hash identifier:          33yObrdTAv/j/D5Bve4HMCoktEfGE0Q4zhIWU1gNx3Q=
Subject key identifier:   3C:C5:C9:21:B5:A7:FA:FB:FA:C9:90:0B:12:3B:7C:2D:2D:8F:31:0E
Certificate issuer:       /CN=25C15E195BF2ED33877938F33D7C7B208AE94115
Certificate serial:       1942E1C36554385D7B80789C3FF9F7361AA54D8E
Authority key identifier: 25:C1:5E:19:5B:F2:ED:33:87:79:38:F3:3D:7C:7B:20:8A:E9:41:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25C15E195BF2ED33877938F33D7C7B208AE94115.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/3133382e39392e3231322e302f32322d3234203d3e203237363630.roa
Signing time:             Tue 26 May 2026 16:44:08 +0000
ROA not before:           Tue 26 May 2026 16:39:08 +0000
ROA not after:            Tue 25 May 2027 16:44:08 +0000
asID:                     27660
IP address blocks:        138.99.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/25C15E195BF2ED33877938F33D7C7B208AE94115.crl
                          rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/25C15E195BF2ED33877938F33D7C7B208AE94115.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25C15E195BF2ED33877938F33D7C7B208AE94115.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:42:e1:c3:65:54:38:5d:7b:80:78:9c:3f:f9:f7:36:1a:a5:4d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C15E195BF2ED33877938F33D7C7B208AE94115
        Validity
            Not Before: May 26 16:39:08 2026 GMT
            Not After : May 25 16:44:08 2027 GMT
        Subject: CN=3CC5C921B5A7FAFBFAC9900B123B7C2D2D8F310E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:13:25:99:1d:87:72:54:e0:55:53:1c:da:86:
                    33:26:cf:09:bd:04:d4:d9:2e:41:4a:1c:8a:f5:38:
                    c5:ad:79:ed:2a:28:69:56:78:d2:78:a1:b7:d9:40:
                    8b:f9:54:9d:f0:a9:b4:8e:cc:00:41:ec:f7:91:82:
                    6d:d6:f6:2b:e1:94:d6:55:a0:6b:55:ff:45:ff:93:
                    82:24:15:69:b7:c3:9b:23:87:5b:86:8c:ac:7b:06:
                    e2:07:28:85:57:de:4f:30:0b:a0:5d:59:c9:fc:a7:
                    e4:f1:a6:1b:4c:53:ff:e2:ca:1a:83:51:6a:04:d2:
                    fb:8c:fe:74:42:f6:95:f7:bd:ee:25:42:12:1e:95:
                    d4:7d:bb:50:22:e9:c4:c5:f1:ab:ea:d7:69:cd:95:
                    78:74:13:ca:fb:22:23:46:42:69:7f:d3:73:3b:a7:
                    cc:f3:c2:3a:f3:3f:a9:e8:68:3f:25:de:b9:ae:f5:
                    ec:b9:8b:a5:b6:4b:fa:61:75:76:7f:35:2b:58:61:
                    7e:e5:58:96:f5:74:18:80:51:69:79:95:85:7d:0c:
                    6b:8e:14:1c:a3:e3:82:f0:b1:d4:d8:37:b8:5e:63:
                    fa:04:a7:95:10:19:6d:69:f3:5c:2a:7f:7b:5a:99:
                    96:af:9a:c5:c2:e1:f1:41:ea:9a:fb:af:f4:1e:52:
                    e7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C5:C9:21:B5:A7:FA:FB:FA:C9:90:0B:12:3B:7C:2D:2D:8F:31:0E
            X509v3 Authority Key Identifier:
                keyid:25:C1:5E:19:5B:F2:ED:33:87:79:38:F3:3D:7C:7B:20:8A:E9:41:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/25C15E195BF2ED33877938F33D7C7B208AE94115.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25C15E195BF2ED33877938F33D7C7B208AE94115.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/3133382e39392e3231322e302f32322d3234203d3e203237363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:c6:84:1c:bb:7b:f9:4a:91:db:bf:83:72:a7:c7:9c:da:10:
         b0:0d:bc:22:b3:68:59:be:85:8b:26:d4:02:2f:86:6c:64:a7:
         d4:3c:57:12:68:4e:6b:af:73:ec:8a:40:2a:39:31:cd:33:5e:
         93:ca:86:0f:38:80:f9:93:f3:3c:f2:04:09:0f:53:9a:34:b3:
         22:91:59:b1:03:f3:a5:bc:a7:db:1d:39:5f:1a:92:cb:b8:40:
         ea:9b:c8:d5:e9:e7:c5:6a:00:5c:e6:c2:80:07:e2:87:b0:5e:
         5d:a9:24:b5:8a:5d:e7:17:71:e1:46:42:d7:20:6e:ad:ee:dd:
         d0:4d:d7:4d:30:c7:b6:dc:34:23:5c:48:c4:c6:42:ea:42:f1:
         19:d5:1d:17:92:20:13:1e:b8:b8:86:6b:42:43:15:fc:75:45:
         d5:b9:8a:0f:0e:41:e6:b0:40:93:82:fa:ca:a2:7f:8a:da:6e:
         04:fe:fb:44:04:1b:71:66:30:e0:14:56:8c:97:b3:58:3f:b2:
         1c:6a:0f:b3:24:c8:c4:91:24:50:a8:ec:44:c7:c4:76:fb:06:
         91:7b:a2:63:cb:3a:10:5e:fa:24:6b:79:5b:f1:3c:24:eb:6f:
         a9:21:e3:a1:b8:a8:13:58:c8:c7:2d:eb:f3:7b:0f:5c:59:c1:
         a9:83:8a:79
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUGULhw2VUOF17gHicP/n3NhqlTY4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDMTVFMTk1QkYyRUQzMzg3NzkzOEYzM0Q3QzdCMjA4
QUU5NDExNTAeFw0yNjA1MjYxNjM5MDhaFw0yNzA1MjUxNjQ0MDhaMDMxMTAvBgNV
BAMTKDNDQzVDOTIxQjVBN0ZBRkJGQUM5OTAwQjEyM0I3QzJEMkQ4RjMxMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMEyWZHYdyVOBVUxzahjMmzwm9
BNTZLkFKHIr1OMWtee0qKGlWeNJ4obfZQIv5VJ3wqbSOzABB7PeRgm3W9ivhlNZV
oGtV/0X/k4IkFWm3w5sjh1uGjKx7BuIHKIVX3k8wC6BdWcn8p+TxphtMU//iyhqD
UWoE0vuM/nRC9pX3ve4lQhIeldR9u1Ai6cTF8avq12nNlXh0E8r7IiNGQml/03M7
p8zzwjrzP6noaD8l3rmu9ey5i6W2S/phdXZ/NStYYX7lWJb1dBiAUWl5lYV9DGuO
FByj44LwsdTYN7heY/oEp5UQGW1p81wqf3tamZavmsXC4fFB6pr7r/QeUudlAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUPMXJIbWn+vv6yZALEjt8LS2PMQ4wHwYDVR0j
BBgwFoAUJcFeGVvy7TOHeTjzPXx7IIrpQRUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MDkzNDFFMUY3ODQ3MEEwRjAzNTE0NEY2QTM0RDU5NUZG
ODk2NEQyQTU4OEVBQ0UxQjEzQTM4Qzg2OEQ0RjI3LzAvMjVDMTVFMTk1QkYyRUQz
Mzg3NzkzOEYzM0Q3QzdCMjA4QUU5NDExNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUMxNUUxOTVCRjJFRDMzODc3
OTM4RjMzRDdDN0IyMDhBRTk0MTE1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjA5MzQxRTFGNzg0NzBBMEYwMzUxNDRGNkEzNEQ1OTVGRjg5NjREMkE1
ODhFQUNFMUIxM0EzOEM4NjhENEYyNy8wLzMxMzMzODJlMzkzOTJlMzIzMTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzM2MzYzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAopj1DAN
BgkqhkiG9w0BAQsFAAOCAQEAP8aEHLt7+UqR27+DcqfHnNoQsA28IrNoWb6FiybU
Ai+GbGSn1DxXEmhOa69z7IpAKjkxzTNek8qGDziA+ZPzPPIECQ9TmjSzIpFZsQPz
pbyn2x05XxqSy7hA6pvI1ennxWoAXObCgAfih7BeXakktYpd5xdx4UZC1yBure7d
0E3XTTDHttw0I1xIxMZC6kLxGdUdF5IgEx64uIZrQkMV/HVF1bmKDw5B5rBAk4L6
yqJ/itpuBP77RAQbcWYw4BRWjJezWD+yHGoPsyTIxJEkUKjsRMfEdvsGkXuiY8s6
EF76JGt5W/E8JOtvqSHjobioE1jIxy3r83sPXFnBqYOKeQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 12:13:40 2026 by rpki-client