Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3134332e3235352e3235302e3234302f33302d3330203d3e203237393437.roa
File:                     3134332e3235352e3235302e3234302f33302d3330203d3e203237393437.roa (raw, json)
Hash identifier:          mdheUpFl+vTkP3CNGb7zAeDQi7JNaAgqvqBxU9tMhbQ=
Subject key identifier:   F7:29:75:F0:14:67:AF:56:DD:5F:DA:42:D3:1D:AB:18:52:3F:58:9B
Certificate issuer:       /CN=12608F449BBF3F86819F95307654EF5D740A9084
Certificate serial:       6A00813080CEDB46BD897A152E4765BB8583B94F
Authority key identifier: 12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3134332e3235352e3235302e3234302f33302d3330203d3e203237393437.roa
Signing time:             Wed 10 Jun 2026 21:47:20 +0000
ROA not before:           Wed 10 Jun 2026 21:42:20 +0000
ROA not after:            Wed 09 Jun 2027 21:47:20 +0000
asID:                     27947
IP address blocks:        143.255.250.240/30 maxlen: 30
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:00:81:30:80:ce:db:46:bd:89:7a:15:2e:47:65:bb:85:83:b9:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12608F449BBF3F86819F95307654EF5D740A9084
        Validity
            Not Before: Jun 10 21:42:20 2026 GMT
            Not After : Jun  9 21:47:20 2027 GMT
        Subject: CN=F72975F01467AF56DD5FDA42D31DAB18523F589B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:84:44:bd:e6:0b:c7:93:6e:7e:0a:74:a3:05:
                    ad:13:09:fa:cc:18:66:d8:f0:a1:21:8a:60:6c:e8:
                    f4:b1:c8:3c:2a:86:51:85:c1:1a:7c:4b:8c:4a:ce:
                    5f:22:9c:7c:0c:d5:44:44:8f:af:30:26:e7:ea:62:
                    33:3b:71:88:0f:9f:11:f1:be:56:1f:37:49:de:28:
                    d9:22:33:ae:e2:b5:1c:97:47:97:61:0b:38:24:41:
                    dc:3c:07:75:fa:1e:43:16:21:a3:98:cc:7e:e1:2b:
                    cb:87:e7:75:a3:f0:55:1e:34:7f:fe:df:ff:cc:0f:
                    28:7f:0d:46:31:c9:32:47:ca:b7:6b:3d:9b:3d:df:
                    02:ae:17:5e:8d:09:83:fd:e7:d8:a7:6f:f2:5f:56:
                    73:8f:bc:c9:f0:15:6a:21:4f:8e:5e:24:cd:d1:51:
                    40:c9:30:08:50:47:de:a0:2c:4b:f8:88:48:42:b8:
                    48:e1:93:62:05:bc:9b:bd:67:ba:2a:f2:cd:1f:1e:
                    ab:c7:ba:44:c4:9f:09:e5:5d:56:ec:50:31:ad:44:
                    7d:15:88:7c:59:8c:25:02:e2:e2:29:54:aa:82:78:
                    85:1a:f4:89:96:08:a3:02:08:28:23:b1:75:41:3d:
                    9a:b9:5e:12:6a:d7:12:52:24:70:ad:48:bc:97:82:
                    93:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:29:75:F0:14:67:AF:56:DD:5F:DA:42:D3:1D:AB:18:52:3F:58:9B
            X509v3 Authority Key Identifier:
                keyid:12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3134332e3235352e3235302e3234302f33302d3330203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.250.240/30

    Signature Algorithm: sha256WithRSAEncryption
         22:32:cb:2b:27:8c:5b:cf:ff:b4:99:78:59:4a:4a:6a:9d:87:
         84:61:c4:73:68:d9:f3:b5:4b:ca:ac:be:12:20:73:10:ef:06:
         25:8c:5f:39:9f:57:ed:12:94:42:ef:bd:70:71:2f:19:e1:2a:
         d1:e1:35:f0:45:b8:ad:f1:3c:4e:3a:25:66:a0:db:b0:4f:c1:
         73:50:ba:e5:1b:d0:69:fc:1b:88:db:3f:39:46:9a:39:3e:fc:
         a4:f1:7b:32:dc:4c:6f:3f:e4:f5:d6:af:7b:37:86:fc:bf:a2:
         c0:a9:e5:03:7b:bc:4c:a4:e2:40:6f:6a:ab:cc:4e:34:6e:70:
         ef:f1:ab:60:cf:73:ce:ae:33:96:a7:32:93:5a:72:91:5b:eb:
         46:e1:4d:41:20:51:35:76:4f:35:c4:dc:66:2b:19:d4:b9:d0:
         12:4f:93:03:39:30:e1:79:03:36:43:7a:b0:6d:d6:4a:d5:10:
         fe:85:6f:48:93:4b:07:b8:74:95:6c:4c:17:7f:17:53:8e:2a:
         ab:80:a5:96:a3:51:fb:f3:b2:87:ea:eb:44:84:de:a1:fe:c3:
         18:42:ac:75:81:6a:de:10:64:f1:62:5a:cb:9a:0d:19:42:72:
         d3:ae:ba:88:9a:f2:67:b6:88:b3:f9:0f:2b:ec:fa:c5:48:c6:
         48:54:47:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:50:52 2026 by rpki-client