Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3230302e3138392e31362e302f32302d3234203d3e203134353933.roa
File:                     3230302e3138392e31362e302f32302d3234203d3e203134353933.roa (raw, json)
Hash identifier:          M6+F9Dx7sNffbUiuWzQG5E7C8waVySyZuR5OG+7/QMo=
Subject key identifier:   E5:C7:EF:26:EF:E5:CA:5A:23:99:73:48:7B:16:11:76:E8:B4:71:4A
Certificate issuer:       /CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
Certificate serial:       6C6C36AFAF9E891F5430AF5C511BC04ED31A3B8A
Authority key identifier: 15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3230302e3138392e31362e302f32302d3234203d3e203134353933.roa
Signing time:             Tue 03 Feb 2026 05:28:58 +0000
ROA not before:           Tue 03 Feb 2026 05:23:58 +0000
ROA not after:            Tue 02 Feb 2027 05:28:58 +0000
asID:                     14593
IP address blocks:        200.189.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Mar 2026 21:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6c:36:af:af:9e:89:1f:54:30:af:5c:51:1b:c0:4e:d3:1a:3b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
        Validity
            Not Before: Feb  3 05:23:58 2026 GMT
            Not After : Feb  2 05:28:58 2027 GMT
        Subject: CN=E5C7EF26EFE5CA5A239973487B161176E8B4714A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:37:92:c8:18:c6:b6:78:57:a4:83:24:eb:db:
                    d6:d3:ca:98:01:0b:b6:e1:b3:9e:f6:58:bc:d2:35:
                    49:68:d8:06:66:0a:0c:23:03:8e:f0:52:a8:8f:70:
                    57:2c:34:d2:be:81:4c:7c:fe:ca:f4:b3:c3:0f:3a:
                    4d:54:75:ba:2e:2a:2b:d7:bf:0d:0f:3a:04:2c:b0:
                    de:e3:9f:70:1c:8f:32:86:bb:2d:ee:4c:31:d7:44:
                    15:7f:fc:78:bf:08:3e:24:41:3e:56:1c:54:60:0f:
                    f8:b6:92:bf:63:10:75:88:d0:25:56:cb:e1:31:79:
                    dd:73:77:21:6d:2e:63:92:f4:8a:42:c4:bc:8b:96:
                    31:f1:95:16:05:90:ab:94:3d:7a:c5:93:3a:c9:55:
                    9a:d4:5c:c5:f1:9e:f8:eb:69:4b:37:81:82:1e:a4:
                    19:ab:98:39:f0:ca:e6:20:bb:7b:8c:0c:ab:22:12:
                    02:54:be:28:33:4d:e3:90:0e:ab:4b:28:ae:88:86:
                    9d:81:1c:35:65:77:c1:f3:2d:8d:c6:f0:ec:18:2a:
                    3a:bf:52:f5:fd:c6:a0:a1:e1:8a:78:f3:05:32:f0:
                    d4:0d:23:e7:f2:cd:78:03:63:2f:7e:96:1e:01:fb:
                    d3:9f:b6:01:66:8b:b7:db:b2:dc:a1:0d:7c:68:26:
                    29:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C7:EF:26:EF:E5:CA:5A:23:99:73:48:7B:16:11:76:E8:B4:71:4A
            X509v3 Authority Key Identifier:
                keyid:15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3230302e3138392e31362e302f32302d3234203d3e203134353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.189.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:8e:c5:7d:f1:65:44:2e:60:11:eb:e1:bd:b2:b2:ea:f5:ff:
         2e:68:2b:6b:d7:3e:0f:c1:b2:b9:7f:1d:b2:27:da:ca:5b:c9:
         01:41:cb:72:16:dd:9e:71:0e:b5:27:d6:0c:2d:cc:a0:c5:07:
         2b:5d:51:07:2f:64:f9:9b:61:fc:8a:45:4b:f9:33:20:2a:78:
         90:9b:89:2d:d9:b5:20:33:22:20:25:e7:87:35:61:63:cc:7a:
         45:fb:36:dc:22:f0:83:00:22:a5:e8:d6:db:0d:e1:ba:1c:4a:
         d8:e5:78:92:11:63:ae:a7:fb:d2:bd:b6:e0:c5:18:b5:78:bb:
         96:cc:0b:12:8d:cd:40:6f:16:5c:bf:5f:a8:6f:87:c3:02:4d:
         42:40:75:0e:1d:ee:d5:67:0d:88:8f:29:50:28:38:4e:d9:9b:
         7f:11:0a:f9:d3:b7:69:26:f5:8d:1e:93:76:21:1f:15:5f:03:
         37:be:f5:0c:b4:26:41:80:19:2f:9f:c2:24:51:f5:0c:38:0f:
         22:6a:69:2d:0f:97:3b:cd:5e:42:16:c3:da:be:ec:79:55:84:
         0f:30:ad:78:88:39:c7:0b:0d:20:ed:e3:a0:d1:77:0a:1f:5a:
         ad:48:05:be:40:3b:57:7d:ff:4e:86:98:07:5c:28:0e:0a:4f:
         6b:eb:86:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:47:41 2026 by rpki-client