Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3138372e3235312e3136362e302f32342d3234203d3e203237393437.roa
File:                     3138372e3235312e3136362e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          MgRNPRp4nOy6ORv4zoV75ce+91TWiTihgMAbph+Iu0M=
Subject key identifier:   C1:78:36:1D:15:84:07:B3:FE:A5:04:06:85:17:CB:52:B0:4A:71:AB
Certificate issuer:       /CN=12608F449BBF3F86819F95307654EF5D740A9084
Certificate serial:       6A0C73126292E08A2657F4D777A972AD840E00D3
Authority key identifier: 12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3138372e3235312e3136362e302f32342d3234203d3e203237393437.roa
Signing time:             Fri 05 Jun 2026 15:46:41 +0000
ROA not before:           Fri 05 Jun 2026 15:41:41 +0000
ROA not after:            Fri 04 Jun 2027 15:46:41 +0000
asID:                     27947
IP address blocks:        187.251.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0c:73:12:62:92:e0:8a:26:57:f4:d7:77:a9:72:ad:84:0e:00:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12608F449BBF3F86819F95307654EF5D740A9084
        Validity
            Not Before: Jun  5 15:41:41 2026 GMT
            Not After : Jun  4 15:46:41 2027 GMT
        Subject: CN=C178361D158407B3FEA504068517CB52B04A71AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:36:0a:cb:57:d0:7f:ca:8d:f7:f4:0f:3c:f3:
                    4d:8f:41:d8:a4:6e:bd:1b:60:a8:df:54:5b:56:89:
                    b4:c1:0e:91:bd:a9:f3:14:f7:77:ee:2d:a3:18:b4:
                    9e:2e:5f:ba:ca:6e:b0:b4:18:03:b0:82:fd:0b:61:
                    c1:cf:12:38:c8:c3:7b:25:e5:28:ab:61:7e:30:da:
                    63:49:f0:df:13:1e:91:37:db:eb:75:66:22:de:96:
                    5d:4e:c2:aa:29:3e:a7:37:43:b5:ca:3a:59:6f:88:
                    35:45:a2:09:53:42:40:c8:55:f3:62:6e:a0:6d:80:
                    61:35:2d:d9:e8:51:e6:1c:af:9a:2d:e1:7a:1a:dd:
                    a3:ef:21:0f:0f:b3:34:38:72:b0:42:39:03:9e:15:
                    1d:df:d4:bf:ee:a7:b3:ed:8e:f9:95:7f:de:61:12:
                    c3:67:99:16:c2:0a:34:cb:33:f3:54:a0:ce:fd:40:
                    3e:3f:9a:85:2c:f6:15:d2:e9:cf:a6:ae:15:d1:03:
                    0d:72:60:32:8f:79:c5:65:59:3f:b4:27:c9:c3:80:
                    b7:02:08:95:5d:e0:8b:ce:76:b1:08:9c:31:3c:c3:
                    11:b0:f9:f3:ad:32:f1:95:60:e4:68:5e:5f:dd:ba:
                    12:4c:b0:5a:3a:0a:64:52:8a:e5:0d:6b:4d:f0:2f:
                    6f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:78:36:1D:15:84:07:B3:FE:A5:04:06:85:17:CB:52:B0:4A:71:AB
            X509v3 Authority Key Identifier:
                keyid:12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3138372e3235312e3136362e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:f1:76:a9:56:36:12:f1:71:cf:a7:1e:d2:fc:4c:be:21:11:
         fb:7a:a1:51:0a:ca:e5:3a:60:3f:e4:f5:84:18:27:0b:fb:e1:
         3b:9d:45:2d:bd:cd:66:26:67:90:d3:29:d0:41:7d:ed:c7:7f:
         69:70:7e:15:8a:f0:5c:e5:e8:45:fb:79:3d:13:e3:ce:6b:ea:
         00:b8:dc:a2:19:9e:fc:41:28:52:50:94:84:d6:35:b5:c5:47:
         e8:53:d6:da:bc:d8:6e:3e:96:9a:e5:f1:96:2f:d6:3e:36:b3:
         f7:62:89:04:be:fd:90:cb:f5:9f:2d:22:3d:75:39:d3:4e:e3:
         63:33:53:d6:08:05:32:a2:e4:4b:cd:9e:07:db:d9:32:1d:11:
         c9:6b:db:66:c3:49:28:d6:8d:96:0d:10:d3:69:f8:65:62:8f:
         20:63:68:3f:24:03:e5:8d:3c:b2:cd:26:e6:74:1a:fd:05:5a:
         3d:89:73:56:c5:14:0b:c8:ba:00:4e:9d:9f:6e:75:13:0c:21:
         c0:8b:01:fe:6c:08:1e:b5:b4:ae:36:46:18:24:71:b2:df:b3:
         73:0d:81:47:05:0f:c9:3f:91:be:26:0d:39:23:39:c3:e7:62:
         8c:11:44:ba:f4:a9:7a:d5:0f:7e:dc:7e:43:a2:24:d2:92:82:
         72:23:7d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:20:33 2026 by rpki-client