Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3135322e3230362e302e302f31352d3234203d3e203237373235.roa
File:                     3135322e3230362e302e302f31352d3234203d3e203237373235.roa (raw, json)
Hash identifier:          xlFZs7pl96ozC49E/m2EptyKk31kSKxkm/q/pajn2hM=
Subject key identifier:   C8:F0:E7:DD:54:DB:0C:E4:65:EB:45:2D:8B:A2:37:FE:1D:DF:9E:61
Certificate issuer:       /CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
Certificate serial:       4E2E07613D9902720F14A769AE59958F415CF0F1
Authority key identifier: F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3135322e3230362e302e302f31352d3234203d3e203237373235.roa
Signing time:             Mon 25 May 2026 22:45:00 +0000
ROA not before:           Mon 25 May 2026 22:40:00 +0000
ROA not after:            Mon 24 May 2027 22:45:00 +0000
asID:                     27725
IP address blocks:        152.206.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2e:07:61:3d:99:02:72:0f:14:a7:69:ae:59:95:8f:41:5c:f0:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
        Validity
            Not Before: May 25 22:40:00 2026 GMT
            Not After : May 24 22:45:00 2027 GMT
        Subject: CN=C8F0E7DD54DB0CE465EB452D8BA237FE1DDF9E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:12:12:35:35:a1:dd:67:e7:67:41:56:dd:5a:
                    e2:a2:6d:ed:48:06:ae:d4:90:6f:e7:90:77:6b:b7:
                    55:a8:f4:0d:32:bd:d7:c0:2d:b8:c9:7a:fd:bd:d7:
                    7d:37:e7:b0:19:d6:b2:45:0e:e9:08:38:a6:4d:8a:
                    98:bb:37:56:a1:ef:f2:91:b9:1a:be:74:ff:72:2b:
                    51:c8:47:aa:26:dd:dc:48:ba:c5:4e:95:8e:7b:61:
                    6e:84:54:46:6c:4a:bb:9f:d3:07:1f:13:b0:c0:3c:
                    3f:71:da:b8:bc:4a:cb:f5:51:75:68:99:1e:18:bd:
                    dc:a8:41:6b:e9:d2:cb:78:df:89:c8:86:bd:dc:f1:
                    47:ad:fe:29:1f:a4:3d:09:12:7b:92:66:ee:e5:d9:
                    c5:8f:c1:56:b6:08:a8:d8:ce:21:6a:e5:dc:02:7d:
                    28:56:79:ab:05:3f:8c:91:f4:3d:f7:e2:a6:1f:7c:
                    d0:3c:5c:5f:dd:83:a6:8c:b4:fb:af:63:b9:2e:cc:
                    46:66:f0:d0:69:52:9b:c1:7c:64:5d:e1:98:08:1b:
                    90:97:4d:78:46:9d:5c:93:a5:f1:d6:41:71:a7:ee:
                    ed:87:46:a9:79:11:07:c0:a5:6b:76:9a:f7:26:69:
                    22:ee:57:fe:fb:32:b2:a5:28:d1:3e:d7:de:36:b3:
                    b9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F0:E7:DD:54:DB:0C:E4:65:EB:45:2D:8B:A2:37:FE:1D:DF:9E:61
            X509v3 Authority Key Identifier:
                keyid:F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3135322e3230362e302e302f31352d3234203d3e203237373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.206.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         92:4d:9b:12:36:9c:2e:b3:ff:83:ea:03:d5:48:23:ca:5e:5c:
         57:32:f8:e6:5f:89:d6:25:e7:db:72:c4:2f:42:cc:19:0e:fc:
         0d:22:45:eb:87:49:d5:fa:63:8a:0b:ae:51:67:ca:ca:2b:d3:
         e4:93:cb:c3:06:26:88:97:d3:ef:37:86:80:f0:17:74:3d:0d:
         25:5a:de:3a:ef:04:d4:ac:3f:ea:ed:a6:7e:ca:0a:70:d0:4f:
         a2:7c:89:04:c8:6c:23:fd:8c:fc:f7:4e:d8:83:b9:b3:e3:b4:
         3e:c4:86:b8:13:aa:bb:83:c3:50:f9:82:78:d2:14:a7:d2:80:
         04:b1:2c:db:a7:eb:bb:81:97:9e:89:79:e9:12:12:76:6d:44:
         c2:ee:27:96:b9:59:ec:e5:fc:c7:f7:83:c3:8f:e9:ab:f1:2c:
         8e:e9:9f:60:d3:32:4a:c6:9f:fd:c0:06:2f:fd:31:9e:45:05:
         56:52:be:d5:6a:06:66:7c:c9:5f:a6:f2:81:30:28:14:95:82:
         f6:e4:e9:fe:4e:be:1f:f4:3c:b3:8f:95:f0:2c:81:1d:75:2f:
         88:a4:6e:e7:20:28:12:8e:2a:cb:26:00:21:cb:2d:e1:80:60:
         1e:80:85:5a:f4:2a:2d:81:0e:25:c2:c0:44:98:35:ee:33:9f:
         3c:05:b2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:58:47 2026 by rpki-client