Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3131352e3230392e302f32342d3234203d3e20323733323430.roa
File:                     3230302e3131352e3230392e302f32342d3234203d3e20323733323430.roa (raw, json)
Hash identifier:          dP/JY7Nq/Fz8DIvuYb+iChdFWqgXvLHutSsYwf4Vpg0=
Subject key identifier:   68:35:37:A2:33:25:88:88:23:D0:69:9D:B8:65:00:F5:FF:92:93:35
Certificate issuer:       /CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
Certificate serial:       24714AFE21FA6A234C39D542CB37ECCE2D8FE9A4
Authority key identifier: 2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3131352e3230392e302f32342d3234203d3e20323733323430.roa
Signing time:             Thu 14 May 2026 16:42:33 +0000
ROA not before:           Thu 14 May 2026 16:37:33 +0000
ROA not after:            Thu 13 May 2027 16:42:33 +0000
asID:                     273240
IP address blocks:        200.115.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 08:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:71:4a:fe:21:fa:6a:23:4c:39:d5:42:cb:37:ec:ce:2d:8f:e9:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
        Validity
            Not Before: May 14 16:37:33 2026 GMT
            Not After : May 13 16:42:33 2027 GMT
        Subject: CN=683537A23325888823D0699DB86500F5FF929335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7f:e8:5b:6a:6d:5a:5c:d4:d4:94:40:87:db:
                    90:24:be:b4:31:2d:c2:fa:88:53:18:15:dc:27:54:
                    db:88:c9:83:94:9b:3a:e3:92:58:fa:55:0f:48:f8:
                    e0:49:b6:5f:13:56:14:2e:27:75:8a:2f:6b:ff:ec:
                    05:28:fe:01:8b:04:c0:32:32:ce:2b:0b:32:c7:0a:
                    60:bb:4a:3e:57:75:8a:3a:ae:5f:23:af:90:8d:51:
                    f6:5b:b9:38:66:35:d6:fa:a0:ca:fa:83:6e:6f:c3:
                    5e:26:0a:0d:2d:6e:6d:0b:b4:07:d6:87:7e:b9:fe:
                    2e:52:44:be:ca:61:30:4d:21:42:6f:f8:eb:7c:e3:
                    18:87:f3:5e:49:46:1e:37:8b:b3:80:4c:19:f2:ab:
                    46:f5:47:cc:b5:89:4c:1b:83:06:42:ee:b4:83:53:
                    35:d1:2d:a0:2b:30:0c:dc:48:05:ec:82:a9:d5:6c:
                    4b:9a:08:de:b6:64:b2:aa:f5:11:d9:19:a8:d4:bf:
                    84:c9:96:ae:51:36:c0:40:a2:23:69:34:54:50:1b:
                    c9:68:a4:02:e2:d2:46:aa:85:a5:d5:4e:76:88:d3:
                    f7:20:34:34:e5:c1:0a:12:7b:ac:27:5b:b3:b7:45:
                    0e:33:94:72:69:bf:71:cb:2e:ba:99:5f:20:19:b8:
                    b3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:35:37:A2:33:25:88:88:23:D0:69:9D:B8:65:00:F5:FF:92:93:35
            X509v3 Authority Key Identifier:
                keyid:2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3230302e3131352e3230392e302f32342d3234203d3e20323733323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:27:48:99:ca:15:3f:69:41:b5:bf:0a:30:58:ae:62:7b:0b:
         a1:ea:61:ac:28:54:cf:7b:ee:d8:51:87:b0:02:df:fa:a4:16:
         c0:77:97:09:71:52:fd:e0:91:d2:c4:11:17:b5:07:84:40:8a:
         7b:33:a1:35:16:a2:3b:62:3d:90:96:87:e7:d4:69:ea:44:75:
         23:db:5e:f9:6d:35:06:b9:47:b7:d1:5f:00:8f:db:54:52:ef:
         74:d0:56:cf:76:e7:fe:41:57:a2:77:ec:8d:cd:b3:65:0d:f8:
         d0:c3:5a:e0:4d:8c:2b:81:0d:00:11:0c:f3:73:2a:4c:66:36:
         3a:e4:1c:db:dc:f4:8a:a1:46:ed:a4:e1:b5:50:f7:6d:76:c9:
         fb:5f:a0:18:d7:64:34:00:63:f0:1b:7c:5a:bf:3d:c7:96:96:
         8d:e6:c3:00:70:4d:a8:3a:97:f7:52:ef:d1:21:e4:ab:6b:22:
         77:00:f2:6c:a6:86:24:fe:0f:1e:0e:aa:b8:66:53:86:a0:6f:
         86:c2:27:ec:4f:83:2d:2a:70:4f:bf:76:2a:64:76:a9:6a:82:
         19:9d:09:53:9c:63:c2:dc:97:3f:df:ef:f5:79:ef:3f:1f:81:
         a6:35:f8:71:f7:ef:76:f8:cd:33:11:5a:3f:28:60:c9:87:5f:
         99:32:d4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:18:56 2026 by rpki-client