Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3134332e3235352e3235302e3234302f33302d3330203d3e203237393437.roa
File:                     3134332e3235352e3235302e3234302f33302d3330203d3e203237393437.roa (raw, json)
Hash identifier:          k+F8aEA/aw11j6+7cmIinS7rFPuCAg63W0E64HowFZI=
Subject key identifier:   DC:F0:39:D2:38:6D:52:4F:A3:FC:3D:7B:C5:AA:F2:22:74:5F:E0:51
Certificate issuer:       /CN=12608F449BBF3F86819F95307654EF5D740A9084
Certificate serial:       0E4A3D70234FF80A50A6534C43174286B47192BD
Authority key identifier: 12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3134332e3235352e3235302e3234302f33302d3330203d3e203237393437.roa
Signing time:             Wed 09 Jul 2025 20:55:00 +0000
ROA not before:           Wed 09 Jul 2025 20:50:00 +0000
ROA not after:            Wed 08 Jul 2026 20:55:00 +0000
asID:                     27947
IP address blocks:        143.255.250.240/30 maxlen: 30
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 15:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:4a:3d:70:23:4f:f8:0a:50:a6:53:4c:43:17:42:86:b4:71:92:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12608F449BBF3F86819F95307654EF5D740A9084
        Validity
            Not Before: Jul  9 20:50:00 2025 GMT
            Not After : Jul  8 20:55:00 2026 GMT
        Subject: CN=DCF039D2386D524FA3FC3D7BC5AAF222745FE051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f6:73:7e:9c:3b:70:53:a6:50:2a:f5:c2:aa:
                    30:88:47:48:ea:cb:fc:91:d8:7b:a4:67:a3:15:e5:
                    ee:a0:fc:2b:ab:31:6f:80:49:3b:95:42:91:94:a3:
                    c6:b5:ce:cb:55:53:9b:dd:f1:61:7e:1a:9c:6a:56:
                    23:29:3b:79:a0:0c:66:95:94:42:54:05:c7:ba:e6:
                    22:d8:19:53:10:fb:5b:3b:e1:21:27:17:03:af:32:
                    f8:37:7b:f6:3c:2e:ee:bd:c1:ff:34:ee:85:04:0d:
                    bf:ad:91:51:d4:65:a4:35:a4:4b:e5:b2:67:ed:4f:
                    96:6f:a6:b6:72:1e:05:f9:fa:ad:53:e3:dc:35:8f:
                    22:9d:b8:26:20:a4:f7:e6:83:ac:94:55:82:0f:c4:
                    d5:b4:0a:9e:bf:3f:b8:58:4a:16:f7:7f:c8:99:a4:
                    27:04:d6:c3:6c:3b:40:22:25:b0:45:e4:5a:a8:f8:
                    30:db:4a:bd:3b:db:f0:fd:57:f2:c9:cd:83:14:7a:
                    3e:d4:0b:82:7f:28:2a:0d:07:e8:52:e6:0a:14:dc:
                    b8:43:ec:ae:de:a5:79:ff:fc:19:82:7b:3b:66:86:
                    c2:41:29:cb:18:25:6b:17:ad:2e:62:e5:bd:e5:dd:
                    06:99:56:6f:f8:ab:af:cb:f8:d9:8a:4e:d3:6f:d2:
                    be:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F0:39:D2:38:6D:52:4F:A3:FC:3D:7B:C5:AA:F2:22:74:5F:E0:51
            X509v3 Authority Key Identifier:
                keyid:12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3134332e3235352e3235302e3234302f33302d3330203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.250.240/30

    Signature Algorithm: sha256WithRSAEncryption
         74:d4:d5:be:76:b9:c5:38:a0:84:95:21:54:28:e0:2f:42:5c:
         88:ef:3a:f4:93:2d:16:8b:6d:b2:e3:68:7b:92:07:17:3f:f2:
         e5:7b:db:ee:d8:58:9a:c4:f1:1d:30:1f:14:ff:70:8e:ad:33:
         b3:0e:79:80:56:0c:f8:de:05:c2:06:58:38:a6:1a:c3:30:ac:
         60:f8:1f:84:e3:ff:04:90:3d:59:1f:4c:1c:d4:8b:40:54:b7:
         b5:31:bc:17:b5:e5:15:24:0a:b7:3c:33:f6:33:1f:30:83:30:
         ff:ab:21:92:1e:c4:eb:3a:07:19:a2:5e:6d:b6:4b:2b:77:30:
         72:56:6e:59:fc:45:69:14:f8:70:7e:3a:08:a1:64:99:ab:a5:
         49:ab:7a:1f:e5:bf:5e:69:23:3d:89:52:67:0e:66:39:74:48:
         1e:92:0c:ef:de:2c:49:71:c7:41:b9:ef:ba:3f:5c:8a:8b:41:
         15:69:af:3b:86:1d:e1:ba:ba:f1:5c:89:78:1d:67:48:48:3b:
         21:63:dc:bf:b4:92:6a:08:b3:51:3c:1c:5a:cd:95:b3:be:f2:
         cb:f3:b6:cd:16:91:16:c7:37:71:98:3d:4c:59:e4:0f:53:eb:
         1f:fe:96:86:7a:d4:38:e7:2a:24:37:61:f5:e1:ef:f0:93:a0:
         13:ae:00:40
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUDko9cCNP+ApQplNMQxdChrRxkr0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI2MDhGNDQ5QkJGM0Y4NjgxOUY5NTMwNzY1NEVGNUQ3
NDBBOTA4NDAeFw0yNTA3MDkyMDUwMDBaFw0yNjA3MDgyMDU1MDBaMDMxMTAvBgNV
BAMTKERDRjAzOUQyMzg2RDUyNEZBM0ZDM0Q3QkM1QUFGMjIyNzQ1RkUwNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl9nN+nDtwU6ZQKvXCqjCIR0jq
y/yR2HukZ6MV5e6g/CurMW+ASTuVQpGUo8a1zstVU5vd8WF+GpxqViMpO3mgDGaV
lEJUBce65iLYGVMQ+1s74SEnFwOvMvg3e/Y8Lu69wf807oUEDb+tkVHUZaQ1pEvl
smftT5ZvprZyHgX5+q1T49w1jyKduCYgpPfmg6yUVYIPxNW0Cp6/P7hYShb3f8iZ
pCcE1sNsO0AiJbBF5Fqo+DDbSr072/D9V/LJzYMUej7UC4J/KCoNB+hS5goU3LhD
7K7epXn//BmCeztmhsJBKcsYJWsXrS5i5b3l3QaZVm/4q6/L+NmKTtNv0r4DAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQU3PA50jhtUk+j/D17xaryInRf4FEwHwYDVR0j
BBgwFoAUEmCPRJu/P4aBn5UwdlTvXXQKkIQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRDI0OUE2MzhEREYyNkZDQ0E0RTMyM0I3QTM2QjdFQTI4
MjkwRDQzMTMzNjkwMzZGNDJEQjU0OTc2NzIyRTQ5LzAvMTI2MDhGNDQ5QkJGM0Y4
NjgxOUY5NTMwNzY1NEVGNUQ3NDBBOTA4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjYwOEY0NDlCQkYzRjg2ODE5
Rjk1MzA3NjU0RUY1RDc0MEE5MDg0LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0QyNDlBNjM4RERGMjZGQ0NBNEUzMjNCN0EzNkI3RUEyODI5MEQ0MzEz
MzY5MDM2RjQyREI1NDk3NjcyMkU0OS8wLzMxMzQzMzJlMzIzNTM1MmUzMjM1MzAy
ZTMyMzQzMDJmMzMzMDJkMzMzMDIwM2QzZTIwMzIzNzM5MzQzNy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMF
Ao//+vAwDQYJKoZIhvcNAQELBQADggEBAHTU1b52ucU4oISVIVQo4C9CXIjvOvST
LRaLbbLjaHuSBxc/8uV72+7YWJrE8R0wHxT/cI6tM7MOeYBWDPjeBcIGWDimGsMw
rGD4H4Tj/wSQPVkfTBzUi0BUt7UxvBe15RUkCrc8M/YzHzCDMP+rIZIexOs6Bxmi
Xm22Syt3MHJWbln8RWkU+HB+OgihZJmrpUmreh/lv15pIz2JUmcOZjl0SB6SDO/e
LElxx0G577o/XIqLQRVprzuGHeG6uvFciXgdZ0hIOyFj3L+0kmoIs1E8HFrNlbO+
8svzts0WkRbHN3GYPUxZ5A9T6x/+loZ61DjnKiQ3YfXh7/CToBOuAEA=
-----END CERTIFICATE-----
Generated at Tue Jul 22 20:41:59 2025 by rpki-client