Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234392e302e302f31392d3234203d3e203133353739.roa
File:                     3230372e3234392e302e302f31392d3234203d3e203133353739.roa (raw, json)
Hash identifier:          24kmN0JeKNSDPlPmY6XC5jb08bh+W/f7pDTgfVdYRFY=
Subject key identifier:   F8:90:71:D1:26:12:D1:C2:E3:5C:83:B7:BF:A4:7E:4D:5C:F5:57:12
Certificate issuer:       /CN=C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA
Certificate serial:       30D0E78BB0E212DDD26A566F2F0A960A35487354
Authority key identifier: C2:FE:C7:92:F3:5A:A2:4D:1C:CC:16:C8:43:2F:4B:D4:4B:DF:CE:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234392e302e302f31392d3234203d3e203133353739.roa
Signing time:             Tue 02 Jun 2026 23:46:20 +0000
ROA not before:           Tue 02 Jun 2026 23:41:20 +0000
ROA not after:            Tue 01 Jun 2027 23:46:20 +0000
asID:                     13579
IP address blocks:        207.249.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 12:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d0:e7:8b:b0:e2:12:dd:d2:6a:56:6f:2f:0a:96:0a:35:48:73:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA
        Validity
            Not Before: Jun  2 23:41:20 2026 GMT
            Not After : Jun  1 23:46:20 2027 GMT
        Subject: CN=F89071D12612D1C2E35C83B7BFA47E4D5CF55712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e4:81:4c:db:7a:34:11:cc:e8:81:7c:9a:9f:
                    b2:b1:ba:31:50:e0:ca:8c:ee:3d:84:a3:08:ac:91:
                    3d:54:e5:4a:5c:89:4a:06:61:b9:bf:85:76:29:51:
                    8d:d1:bb:44:f2:13:3a:f9:42:0b:e8:eb:91:45:3f:
                    e0:13:ed:fe:aa:a6:b8:c1:da:f4:68:03:03:c4:eb:
                    64:38:df:36:c7:06:e2:d1:80:ec:7c:10:c1:9f:2b:
                    ca:9b:45:da:74:e8:34:54:7a:83:45:ef:da:e0:a5:
                    5b:7a:d6:29:95:37:e4:6b:29:8f:a5:0d:b7:c7:51:
                    7f:ef:db:05:5e:31:a5:9d:79:96:1b:a3:62:e6:2c:
                    a3:4a:c6:64:aa:21:19:f4:c1:ac:45:78:7d:7b:b7:
                    b4:37:19:ed:53:64:b9:7d:92:c7:af:cf:c0:ff:2b:
                    b6:cb:24:ee:b8:c4:ba:83:c8:cd:a2:49:61:fe:fd:
                    89:8e:c8:01:a3:95:f1:70:49:40:f2:46:aa:3c:65:
                    84:c1:85:3f:02:0e:8e:fa:62:74:d5:fc:1d:6a:0f:
                    19:7d:7c:c1:fb:8a:35:36:e3:92:92:11:1c:aa:7a:
                    17:dc:6d:bc:98:04:25:de:37:29:b7:cd:a3:9f:ef:
                    33:c1:4f:d3:1d:a9:7e:16:30:2d:e5:61:60:42:8d:
                    a2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:90:71:D1:26:12:D1:C2:E3:5C:83:B7:BF:A4:7E:4D:5C:F5:57:12
            X509v3 Authority Key Identifier:
                keyid:C2:FE:C7:92:F3:5A:A2:4D:1C:CC:16:C8:43:2F:4B:D4:4B:DF:CE:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2FEC792F35AA24D1CCC16C8432F4BD44BDFCEFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D46FB38FCEA5E7E88051DAEC3F0E7A5884A6A872D3AA48DE664F81A7D64DDA/0/3230372e3234392e302e302f31392d3234203d3e203133353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.249.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         27:ac:79:41:00:01:f5:62:77:c3:84:ff:85:05:13:c5:00:0c:
         a0:ae:e6:02:47:1a:8a:3a:87:c5:8f:42:59:16:4b:f8:cf:78:
         10:46:10:1c:4e:98:35:f3:93:a0:78:6d:be:fd:07:b4:0d:1e:
         e3:b7:05:46:99:d9:17:d3:74:71:19:61:c3:b1:95:23:5f:d0:
         56:23:2b:77:58:0e:9f:ed:ab:c1:3d:a9:bb:35:72:36:8d:f2:
         3e:24:b8:9b:27:26:f7:9b:70:7b:19:27:4c:d1:f7:af:90:83:
         98:e5:9e:00:2c:5c:c2:f8:3f:d3:3d:2c:18:50:16:2a:12:42:
         e2:60:33:06:2b:24:0c:1b:eb:71:30:40:c8:2c:77:be:1e:d9:
         04:32:9d:c7:37:50:67:83:c4:34:c7:71:08:33:cd:76:ca:5b:
         06:40:bb:39:75:8c:72:37:c4:ac:f5:c6:35:19:2e:fc:bb:b6:
         fc:2b:13:2f:64:ca:70:05:df:c6:ec:70:ac:23:0a:11:a9:5a:
         c5:d6:a0:0d:ce:6f:fe:f5:81:c6:df:d8:fb:f2:b8:96:84:fe:
         52:01:d0:39:1d:6c:b1:9d:80:00:5e:b5:34:25:50:9b:48:6f:
         99:76:c1:08:cb:b2:ea:5a:1f:57:4f:fe:1e:0d:8c:15:fc:7c:
         0b:cd:d2:2a
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUMNDni7DiEt3SalZvLwqWCjVIc1QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJGRUM3OTJGMzVBQTI0RDFDQ0MxNkM4NDMyRjRCRDQ0
QkRGQ0VGQTAeFw0yNjA2MDIyMzQxMjBaFw0yNzA2MDEyMzQ2MjBaMDMxMTAvBgNV
BAMTKEY4OTA3MUQxMjYxMkQxQzJFMzVDODNCN0JGQTQ3RTRENUNGNTU3MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf5IFM23o0EczogXyan7KxujFQ
4MqM7j2EowiskT1U5UpciUoGYbm/hXYpUY3Ru0TyEzr5Qgvo65FFP+AT7f6qprjB
2vRoAwPE62Q43zbHBuLRgOx8EMGfK8qbRdp06DRUeoNF79rgpVt61imVN+RrKY+l
DbfHUX/v2wVeMaWdeZYbo2LmLKNKxmSqIRn0waxFeH17t7Q3Ge1TZLl9ksevz8D/
K7bLJO64xLqDyM2iSWH+/YmOyAGjlfFwSUDyRqo8ZYTBhT8CDo76YnTV/B1qDxl9
fMH7ijU245KSERyqehfcbbyYBCXeNym3zaOf7zPBT9MdqX4WMC3lYWBCjaJNAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU+JBx0SYS0cLjXIO3v6R+TVz1VxIwHwYDVR0j
BBgwFoAUwv7HkvNaok0czBbIQy9L1EvfzvowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xOEQ0NkZCMzhGQ0VBNUU3RTg4MDUxREFFQzNGMEU3QTU4
ODRBNkE4NzJEM0FBNDhERTY2NEY4MUE3RDY0RERBLzAvQzJGRUM3OTJGMzVBQTI0
RDFDQ0MxNkM4NDMyRjRCRDQ0QkRGQ0VGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMkZFQzc5MkYzNUFBMjREMUND
QzE2Qzg0MzJGNEJENDRCREZDRUZBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMThENDZGQjM4RkNFQTVFN0U4ODA1MURBRUMzRjBFN0E1ODg0QTZBODcy
RDNBQTQ4REU2NjRGODFBN0Q2NEREQS8wLzMyMzAzNzJlMzIzNDM5MmUzMDJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzMzNTM3Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXP+QAwDQYJ
KoZIhvcNAQELBQADggEBACeseUEAAfVid8OE/4UFE8UADKCu5gJHGoo6h8WPQlkW
S/jPeBBGEBxOmDXzk6B4bb79B7QNHuO3BUaZ2RfTdHEZYcOxlSNf0FYjK3dYDp/t
q8E9qbs1cjaN8j4kuJsnJvebcHsZJ0zR96+Qg5jlngAsXML4P9M9LBhQFioSQuJg
MwYrJAwb63EwQMgsd74e2QQyncc3UGeDxDTHcQgzzXbKWwZAuzl1jHI3xKz1xjUZ
Lvy7tvwrEy9kynAF38bscKwjChGpWsXWoA3Ob/71gcbf2PvyuJaE/lIB0DkdbLGd
gABetTQlUJtIb5l2wQjLsupaH1dP/h4NjBX8fAvN0io=
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:52:47 2026 by rpki-client