Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/3230302e312e3131362e302f32342d3234203d3e203136373031.roa
File:                     3230302e312e3131362e302f32342d3234203d3e203136373031.roa (raw, json)
Hash identifier:          jTEnMCUoWCwQIPAbu8whVpqoH1RRfElekpQkZfODVh4=
Subject key identifier:   22:ED:17:21:0E:E3:04:63:88:C0:76:5E:07:BB:CF:8A:99:CC:EB:C4
Certificate issuer:       /CN=12072E6C1A48AEC19505180D145D1D56D72980F3
Certificate serial:       18CEF2BEF7B66E095155BC6236F8E3E610A10F75
Authority key identifier: 12:07:2E:6C:1A:48:AE:C1:95:05:18:0D:14:5D:1D:56:D7:29:80:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12072E6C1A48AEC19505180D145D1D56D72980F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/3230302e312e3131362e302f32342d3234203d3e203136373031.roa
Signing time:             Tue 07 Apr 2026 20:37:53 +0000
ROA not before:           Tue 07 Apr 2026 20:32:53 +0000
ROA not after:            Tue 06 Apr 2027 20:37:53 +0000
asID:                     16701
IP address blocks:        200.1.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/12072E6C1A48AEC19505180D145D1D56D72980F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/12072E6C1A48AEC19505180D145D1D56D72980F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12072E6C1A48AEC19505180D145D1D56D72980F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ce:f2:be:f7:b6:6e:09:51:55:bc:62:36:f8:e3:e6:10:a1:0f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12072E6C1A48AEC19505180D145D1D56D72980F3
        Validity
            Not Before: Apr  7 20:32:53 2026 GMT
            Not After : Apr  6 20:37:53 2027 GMT
        Subject: CN=22ED17210EE3046388C0765E07BBCF8A99CCEBC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bb:bc:f2:5e:f3:a2:00:af:5b:0a:0c:f3:57:
                    08:ac:52:c2:eb:41:ab:f0:57:f1:75:85:1d:19:06:
                    4e:b6:b8:73:52:2e:6f:43:75:f1:ab:ad:9b:5a:0c:
                    6b:60:61:db:92:39:31:c2:06:d1:8b:45:c0:b6:d0:
                    00:91:e5:93:fe:c2:69:a8:8b:dc:bb:ff:45:dd:e3:
                    5c:da:2f:30:6c:9f:2d:c2:13:80:ca:9a:f8:c2:d5:
                    ad:da:33:98:7e:0c:9e:02:e4:39:91:6e:84:fd:fa:
                    27:e5:e2:0f:01:d2:39:6c:dc:f4:02:ca:71:10:f0:
                    d8:49:56:c1:3c:a6:14:6d:8f:5c:ac:43:f8:82:62:
                    46:44:c2:d9:8a:cc:3c:18:3c:b6:eb:f6:c9:2c:df:
                    b6:c4:38:b6:aa:5a:a2:92:1f:87:d1:f3:23:54:ac:
                    a7:df:56:33:32:75:c6:b9:11:e6:3b:15:a4:2a:52:
                    63:96:9b:c4:cb:94:0c:a8:f6:47:ec:b3:2a:ac:2b:
                    d4:c6:71:a1:53:5c:dd:b1:a3:d4:97:2c:d5:d2:c1:
                    c0:19:db:15:ef:14:4c:f0:c4:93:b0:32:62:ad:be:
                    1f:23:6d:6f:71:f0:56:c9:06:0d:1c:88:96:56:55:
                    b5:95:3c:af:e4:39:86:d4:60:d2:ff:1d:bc:32:7b:
                    e5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:ED:17:21:0E:E3:04:63:88:C0:76:5E:07:BB:CF:8A:99:CC:EB:C4
            X509v3 Authority Key Identifier:
                keyid:12:07:2E:6C:1A:48:AE:C1:95:05:18:0D:14:5D:1D:56:D7:29:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/12072E6C1A48AEC19505180D145D1D56D72980F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12072E6C1A48AEC19505180D145D1D56D72980F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/084B3E1616B843A5943E3E9082A0D26AFAEBC8EF9EF20E26AAD49531C3DC9494/0/3230302e312e3131362e302f32342d3234203d3e203136373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:92:7a:01:58:8e:53:c4:3b:db:fa:3c:a3:28:ba:2e:51:88:
         e9:e2:b0:97:76:3e:36:df:63:a0:a4:5f:e3:de:b3:e2:e7:4f:
         4e:b0:a2:35:42:6a:b8:87:5b:76:74:95:a7:53:0a:52:ee:33:
         a3:15:a6:e6:27:10:60:36:7d:3d:1f:61:bd:1b:38:a5:0c:06:
         62:45:ff:6b:8b:70:84:00:9f:99:47:99:89:5d:bf:fb:8d:86:
         92:78:63:8c:08:cd:31:c9:92:1f:26:40:56:e9:45:7c:8d:dc:
         49:e9:83:ad:a1:ad:ea:7c:46:ef:6f:55:b5:bc:18:95:1e:27:
         36:24:ea:f1:b9:39:a5:72:02:c4:05:c2:bd:e8:28:5a:3e:5d:
         79:6e:fb:92:86:5b:5f:b3:1c:4b:1e:a1:c8:4c:71:3c:a8:d4:
         90:58:4f:38:90:ca:e4:de:88:3a:9b:19:cb:4b:d8:48:68:96:
         18:8b:3c:e0:36:d8:a4:12:1b:54:61:53:25:24:44:2f:ef:e6:
         78:5c:e0:87:2c:1b:49:1f:96:ce:9a:c2:11:e4:b8:0c:af:cf:
         88:c9:e2:58:d5:56:ff:b6:55:5d:12:71:6d:71:01:8f:10:57:
         26:a2:6b:84:33:fe:66:de:ab:95:88:9a:1b:21:82:18:d3:89:
         b7:a0:dc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:39:39 2026 by rpki-client