Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA5183346FC7F59CB07696F78927A316B0D08F55904C40643FEB10E37F1CFD6C/0/3134332e3133372e3234342e302f32322d3234203d3e20323634363232.roa
File:                     3134332e3133372e3234342e302f32322d3234203d3e20323634363232.roa (raw, json)
Hash identifier:          /OppqDeh4esJqVhEaoktnw3pQeos5RLx/pBuCSU9jTM=
Subject key identifier:   A7:61:D1:5A:F2:2F:5F:FB:B8:75:E9:05:89:06:F6:BF:DD:CB:77:A9
Certificate issuer:       /CN=A413277193F800AD8F3643B0DA690C9B51693FCC
Certificate serial:       717985EEA7B659CD628666C1D677BCA99368D202
Authority key identifier: A4:13:27:71:93:F8:00:AD:8F:36:43:B0:DA:69:0C:9B:51:69:3F:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A413277193F800AD8F3643B0DA690C9B51693FCC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA5183346FC7F59CB07696F78927A316B0D08F55904C40643FEB10E37F1CFD6C/0/3134332e3133372e3234342e302f32322d3234203d3e20323634363232.roa
Signing time:             Tue 06 Jan 2026 19:21:51 +0000
ROA not before:           Tue 06 Jan 2026 19:16:51 +0000
ROA not after:            Tue 05 Jan 2027 19:21:51 +0000
asID:                     264622
IP address blocks:        143.137.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA5183346FC7F59CB07696F78927A316B0D08F55904C40643FEB10E37F1CFD6C/0/A413277193F800AD8F3643B0DA690C9B51693FCC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA5183346FC7F59CB07696F78927A316B0D08F55904C40643FEB10E37F1CFD6C/0/A413277193F800AD8F3643B0DA690C9B51693FCC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A413277193F800AD8F3643B0DA690C9B51693FCC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:79:85:ee:a7:b6:59:cd:62:86:66:c1:d6:77:bc:a9:93:68:d2:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A413277193F800AD8F3643B0DA690C9B51693FCC
        Validity
            Not Before: Jan  6 19:16:51 2026 GMT
            Not After : Jan  5 19:21:51 2027 GMT
        Subject: CN=A761D15AF22F5FFBB875E9058906F6BFDDCB77A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0f:a5:f1:6d:15:af:29:e6:94:eb:b3:40:51:
                    0c:e6:93:74:09:cb:ac:e2:5e:97:39:9a:0f:72:2b:
                    06:c6:3b:ad:cf:43:d1:bf:a6:64:74:70:29:f3:fc:
                    82:3d:dc:1a:09:50:11:7b:aa:75:b4:c5:c4:88:75:
                    83:e0:b6:53:f0:99:09:df:b7:f9:22:a2:1e:a1:92:
                    0c:de:4c:30:6a:1d:85:0e:c4:84:37:90:b5:b6:da:
                    f3:e3:e3:d2:32:8a:46:1f:75:8d:87:e1:6b:f6:16:
                    7c:f3:78:18:a5:14:9e:27:1c:9a:30:4b:70:c1:0b:
                    8d:68:d6:ce:1e:c6:fb:fd:3d:0b:17:78:5d:f2:27:
                    d2:28:eb:9d:8c:e0:30:0f:cf:54:cf:60:81:84:a3:
                    3b:99:fe:11:90:b9:a4:2a:6f:62:dc:83:fa:8e:4a:
                    cb:74:31:e0:5b:1a:c4:a1:0b:7e:e0:39:38:33:04:
                    00:40:fb:4f:40:3d:f3:77:0b:d2:b0:0a:22:b8:8e:
                    c9:18:0e:11:c3:49:4a:9a:01:62:9e:b0:d7:01:73:
                    90:f2:45:ec:87:2a:de:ec:7b:47:5d:01:ff:03:b2:
                    9c:ea:5c:0d:83:f6:2e:a2:0e:5e:de:ac:b4:62:4d:
                    31:1a:77:36:20:05:21:63:9a:48:a3:e5:65:a5:9e:
                    ee:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:61:D1:5A:F2:2F:5F:FB:B8:75:E9:05:89:06:F6:BF:DD:CB:77:A9
            X509v3 Authority Key Identifier:
                keyid:A4:13:27:71:93:F8:00:AD:8F:36:43:B0:DA:69:0C:9B:51:69:3F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA5183346FC7F59CB07696F78927A316B0D08F55904C40643FEB10E37F1CFD6C/0/A413277193F800AD8F3643B0DA690C9B51693FCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A413277193F800AD8F3643B0DA690C9B51693FCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA5183346FC7F59CB07696F78927A316B0D08F55904C40643FEB10E37F1CFD6C/0/3134332e3133372e3234342e302f32322d3234203d3e20323634363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:76:7b:60:bc:dc:18:f4:57:ee:15:8d:21:31:d2:70:0b:ed:
         1c:04:58:2a:9b:42:f1:48:6d:4d:14:85:c9:0f:96:8a:12:5a:
         b6:31:62:e5:4a:43:cd:85:0f:6e:e7:8f:b7:2a:b2:6b:5f:ef:
         dd:7d:e6:61:d3:5e:09:05:71:72:ed:6c:bc:f3:3d:9b:6f:b7:
         8e:48:1d:a0:21:f3:c0:80:55:44:d1:88:57:00:d5:75:b2:76:
         83:09:b7:98:e1:65:63:d7:f9:53:4f:9a:eb:8f:6b:23:0c:da:
         ea:0a:8e:d7:eb:fa:d4:00:04:23:ba:5e:cb:11:eb:97:ae:01:
         e0:da:4e:7b:49:13:cb:cb:1e:ce:3f:ce:35:c1:81:8e:66:f8:
         d0:3f:0c:dd:9f:2c:d1:d4:bf:56:c8:27:75:fd:b9:d8:df:de:
         18:68:9a:29:5f:2f:b0:e3:28:f1:df:7d:a9:bb:c3:f4:23:ac:
         45:8a:5f:d1:f5:66:88:fb:dc:19:01:dc:8a:fc:a7:ba:28:d1:
         62:f8:26:a7:02:39:9b:d5:15:91:be:24:9d:32:21:34:5b:b6:
         d7:11:56:15:6e:63:1f:6a:c8:71:24:bb:78:33:ca:44:79:27:
         9d:d1:57:bf:e2:99:b2:a2:e2:1c:b8:01:9a:f9:13:b6:59:0a:
         0e:a5:56:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:29:34 2026 by rpki-client