Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/01E396282520E590BF9F0228D384D1B4C965A6339431575E7BF9E0D24B4516BE/0/3230302e32332e3136352e302f32342d3234203d3e203431333437.roa
File:                     3230302e32332e3136352e302f32342d3234203d3e203431333437.roa (raw, json)
Hash identifier:          eqkDnspd1dmS8NN+hc+qftC+D/MdCDoX5hkSfwFpPb0=
Subject key identifier:   D3:5A:B9:18:06:B5:20:12:14:7E:31:92:40:24:CB:6E:24:BE:50:D3
Certificate issuer:       /CN=576057CF45ABF97168471CB4EB6D54A958A13D3D
Certificate serial:       51B157E4C24565B07AB627A340D9B043735F1600
Authority key identifier: 57:60:57:CF:45:AB:F9:71:68:47:1C:B4:EB:6D:54:A9:58:A1:3D:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/576057CF45ABF97168471CB4EB6D54A958A13D3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/01E396282520E590BF9F0228D384D1B4C965A6339431575E7BF9E0D24B4516BE/0/3230302e32332e3136352e302f32342d3234203d3e203431333437.roa
Signing time:             Sat 28 Feb 2026 16:45:00 +0000
ROA not before:           Sat 28 Feb 2026 16:40:00 +0000
ROA not after:            Sat 27 Feb 2027 16:45:00 +0000
asID:                     41347
IP address blocks:        200.23.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/01E396282520E590BF9F0228D384D1B4C965A6339431575E7BF9E0D24B4516BE/0/576057CF45ABF97168471CB4EB6D54A958A13D3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/01E396282520E590BF9F0228D384D1B4C965A6339431575E7BF9E0D24B4516BE/0/576057CF45ABF97168471CB4EB6D54A958A13D3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/576057CF45ABF97168471CB4EB6D54A958A13D3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 10:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b1:57:e4:c2:45:65:b0:7a:b6:27:a3:40:d9:b0:43:73:5f:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576057CF45ABF97168471CB4EB6D54A958A13D3D
        Validity
            Not Before: Feb 28 16:40:00 2026 GMT
            Not After : Feb 27 16:45:00 2027 GMT
        Subject: CN=D35AB91806B52012147E31924024CB6E24BE50D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0b:19:e3:46:b6:cc:3a:27:3b:f6:e5:93:15:
                    84:53:81:40:a6:21:5c:75:85:67:2e:00:6a:de:c3:
                    55:72:e5:c3:71:ca:f6:4f:f0:d5:5a:b9:0d:b5:c1:
                    57:90:e4:d6:00:01:cb:2e:72:f4:07:b2:77:4a:b6:
                    85:75:38:35:4f:f5:3a:b0:65:c7:6d:eb:2d:2d:49:
                    34:2c:c6:cf:e9:88:69:0f:26:5d:8c:b3:74:ec:f1:
                    90:62:77:ff:8e:73:c7:4c:c7:5c:d5:0a:1f:13:08:
                    8d:07:16:01:1a:10:12:cd:80:f5:f4:88:99:d8:00:
                    be:3c:7d:4a:e1:54:48:d7:cd:78:61:0e:2d:3f:c0:
                    c9:1e:b0:3f:51:0b:9e:a1:32:48:70:4c:a2:db:f7:
                    a9:e2:52:df:ab:07:2d:4e:68:ba:ae:46:4e:27:f1:
                    17:ca:91:ff:29:f4:c9:f4:af:c6:ea:b7:33:da:4b:
                    71:72:0f:b1:88:f6:c4:66:62:f9:f3:8c:e3:8b:80:
                    44:03:86:d9:26:61:07:5f:9b:fc:38:a6:34:aa:42:
                    0b:05:0a:21:ba:0c:11:2d:9a:d2:b6:68:47:f1:6a:
                    da:76:40:fb:71:e3:f8:e0:23:6f:90:66:61:a7:f7:
                    95:8f:c0:b5:42:8b:07:79:d9:6f:bb:af:82:0c:8c:
                    5e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:5A:B9:18:06:B5:20:12:14:7E:31:92:40:24:CB:6E:24:BE:50:D3
            X509v3 Authority Key Identifier:
                keyid:57:60:57:CF:45:AB:F9:71:68:47:1C:B4:EB:6D:54:A9:58:A1:3D:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/01E396282520E590BF9F0228D384D1B4C965A6339431575E7BF9E0D24B4516BE/0/576057CF45ABF97168471CB4EB6D54A958A13D3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/576057CF45ABF97168471CB4EB6D54A958A13D3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/01E396282520E590BF9F0228D384D1B4C965A6339431575E7BF9E0D24B4516BE/0/3230302e32332e3136352e302f32342d3234203d3e203431333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:13:b4:c6:f6:4c:32:e4:a9:23:88:3e:6f:40:b4:5c:3a:c5:
         cf:92:70:eb:50:45:e6:54:90:c9:0b:02:0f:ca:b2:ee:9d:91:
         d7:1e:05:17:a5:8a:57:dd:f4:c7:62:4d:9b:a0:0a:c9:ae:b4:
         8f:d7:bb:4f:c8:a6:6b:08:02:46:b3:b3:29:e6:6d:67:c2:0c:
         5b:26:99:97:d2:7b:01:5b:89:c6:24:49:cb:70:00:6b:60:54:
         97:3f:f1:0b:bd:b9:99:76:de:b7:b4:d3:f4:4a:15:b5:28:c5:
         2c:36:53:99:12:f9:b0:26:49:45:26:d7:a9:cd:ed:47:b6:7d:
         8f:d8:1c:2e:5e:39:a9:07:d5:d8:f9:66:57:c3:60:4d:40:e5:
         d1:18:c8:48:6c:16:9b:98:64:26:84:d9:3f:1d:ba:43:f0:0e:
         c7:a4:56:7a:b0:f7:6e:74:a9:03:ba:11:a6:27:51:c8:22:11:
         e5:a6:82:4f:74:7a:ca:7f:19:5e:75:ad:2b:77:b0:1d:04:73:
         f0:b5:ae:6e:11:9e:37:c6:b6:bf:39:74:fc:5e:aa:78:61:f3:
         ac:89:72:78:f4:61:17:17:91:b5:b3:14:7f:bf:a8:b1:37:fe:
         71:b0:ed:bb:0f:a3:d1:6f:b2:df:4c:43:e8:6c:00:5d:9d:b9:
         0b:17:a8:22
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUUbFX5MJFZbB6tiejQNmwQ3NfFgAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc2MDU3Q0Y0NUFCRjk3MTY4NDcxQ0I0RUI2RDU0QTk1
OEExM0QzRDAeFw0yNjAyMjgxNjQwMDBaFw0yNzAyMjcxNjQ1MDBaMDMxMTAvBgNV
BAMTKEQzNUFCOTE4MDZCNTIwMTIxNDdFMzE5MjQwMjRDQjZFMjRCRTUwRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUCxnjRrbMOic79uWTFYRTgUCm
IVx1hWcuAGrew1Vy5cNxyvZP8NVauQ21wVeQ5NYAAcsucvQHsndKtoV1ODVP9Tqw
Zcdt6y0tSTQsxs/piGkPJl2Ms3Ts8ZBid/+Oc8dMx1zVCh8TCI0HFgEaEBLNgPX0
iJnYAL48fUrhVEjXzXhhDi0/wMkesD9RC56hMkhwTKLb96niUt+rBy1OaLquRk4n
8RfKkf8p9Mn0r8bqtzPaS3FyD7GI9sRmYvnzjOOLgEQDhtkmYQdfm/w4pjSqQgsF
CiG6DBEtmtK2aEfxatp2QPtx4/jgI2+QZmGn95WPwLVCiwd52W+7r4IMjF7HAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU01q5GAa1IBIUfjGSQCTLbiS+UNMwHwYDVR0j
BBgwFoAUV2BXz0Wr+XFoRxy0621UqVihPT0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMUUzOTYyODI1MjBFNTkwQkY5RjAyMjhEMzg0RDFCNEM5
NjVBNjMzOTQzMTU3NUU3QkY5RTBEMjRCNDUxNkJFLzAvNTc2MDU3Q0Y0NUFCRjk3
MTY4NDcxQ0I0RUI2RDU0QTk1OEExM0QzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NzYwNTdDRjQ1QUJGOTcxNjg0
NzFDQjRFQjZENTRBOTU4QTEzRDNELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDFFMzk2MjgyNTIwRTU5MEJGOUYwMjI4RDM4NEQxQjRDOTY1QTYzMzk0
MzE1NzVFN0JGOUUwRDI0QjQ1MTZCRS8wLzMyMzAzMDJlMzIzMzJlMzEzNjM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMTMzMzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgXpTAN
BgkqhkiG9w0BAQsFAAOCAQEATBO0xvZMMuSpI4g+b0C0XDrFz5Jw61BF5lSQyQsC
D8qy7p2R1x4FF6WKV930x2JNm6AKya60j9e7T8imawgCRrOzKeZtZ8IMWyaZl9J7
AVuJxiRJy3AAa2BUlz/xC725mXbet7TT9EoVtSjFLDZTmRL5sCZJRSbXqc3tR7Z9
j9gcLl45qQfV2PlmV8NgTUDl0RjISGwWm5hkJoTZPx26Q/AOx6RWerD3bnSpA7oR
pidRyCIR5aaCT3R6yn8ZXnWtK3ewHQRz8LWubhGeN8a2vzl0/F6qeGHzrIlyePRh
FxeRtbMUf7+osTf+cbDtuw+j0W+y30xD6GwAXZ25CxeoIg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:23:13 2026 by rpki-client