Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234312e302f32342d3239203d3e203634313230.roa
File:                     3230302e34392e3234312e302f32342d3239203d3e203634313230.roa (raw, json)
Hash identifier:          Kk3u6uH4OOZ0JpsW4DDr/ITZbMEyeqMdmy74g1SRUZc=
Subject key identifier:   46:7D:C1:32:6C:76:1D:D4:51:EF:D7:39:5A:41:57:E3:3D:73:D5:FB
Certificate issuer:       /CN=C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA
Certificate serial:       657116CE79FEF29F6A91096D96E5E726B4E53E65
Authority key identifier: C4:BC:FC:6E:8A:D3:BA:74:02:3C:B2:EB:AF:7B:65:99:5A:CD:4B:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234312e302f32342d3239203d3e203634313230.roa
Signing time:             Sat 13 Jun 2026 00:47:36 +0000
ROA not before:           Sat 13 Jun 2026 00:42:36 +0000
ROA not after:            Sat 12 Jun 2027 00:47:36 +0000
asID:                     64120
IP address blocks:        200.49.241.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:71:16:ce:79:fe:f2:9f:6a:91:09:6d:96:e5:e7:26:b4:e5:3e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA
        Validity
            Not Before: Jun 13 00:42:36 2026 GMT
            Not After : Jun 12 00:47:36 2027 GMT
        Subject: CN=467DC1326C761DD451EFD7395A4157E33D73D5FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d3:1d:a9:98:8f:9a:35:b4:af:c6:f5:08:71:
                    78:85:0b:d6:61:f5:0b:39:90:9b:6c:98:ff:05:10:
                    35:65:83:ab:01:90:a4:75:d3:dd:b3:2c:2e:1e:4f:
                    ca:80:27:b2:07:ec:72:b4:71:f0:ef:3c:31:ba:22:
                    2b:cd:01:92:31:4b:92:2a:37:75:e5:08:54:9f:11:
                    a9:14:64:4e:a7:bd:ca:a7:c1:36:2d:da:bc:b2:0a:
                    97:01:5d:e2:c2:57:c3:2b:88:3a:85:86:66:78:cf:
                    0d:3c:24:84:d6:2b:9f:7f:65:d0:9c:f8:1e:d8:c3:
                    aa:1a:17:3b:3e:ac:e9:ff:2e:1f:17:9a:f2:0d:13:
                    23:17:e6:31:13:4f:33:55:20:9a:12:e6:ed:2a:e6:
                    33:b7:e0:93:21:0c:42:6a:da:0d:23:a1:fd:eb:38:
                    98:86:12:de:33:c0:70:18:5a:79:7b:0d:7d:96:46:
                    5e:74:f7:2d:ba:7b:a3:49:35:58:db:b2:a2:12:37:
                    dc:e2:c0:54:ce:8c:8c:a1:4e:b7:6a:6b:44:31:c2:
                    40:b5:44:bd:eb:ce:b1:0b:47:01:c2:57:3c:60:00:
                    06:8d:50:b8:81:5d:87:50:6c:f2:ae:1d:a0:99:00:
                    51:94:15:db:6e:a2:49:20:66:e8:81:c5:6c:d1:4d:
                    73:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7D:C1:32:6C:76:1D:D4:51:EF:D7:39:5A:41:57:E3:3D:73:D5:FB
            X509v3 Authority Key Identifier:
                keyid:C4:BC:FC:6E:8A:D3:BA:74:02:3C:B2:EB:AF:7B:65:99:5A:CD:4B:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4BCFC6E8AD3BA74023CB2EBAF7B65995ACD4BBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1060357C31A405E0A4A10F8FCAE921E580538CCACB07E0DA88A16D4B734B7DF8/0/3230302e34392e3234312e302f32342d3239203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.49.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:32:23:4a:44:01:2f:c4:3b:9b:e7:fa:b1:98:9b:6f:43:bd:
         10:fb:7d:2f:b4:5f:ec:aa:8c:e8:9a:72:25:0d:42:da:3d:8e:
         81:c4:aa:95:f3:45:3a:e3:1f:d7:36:01:e9:fa:28:f3:58:8f:
         c7:36:78:f7:eb:34:a5:9c:a6:3c:28:07:87:dc:9e:15:2a:37:
         6e:d1:e2:8f:82:cc:6d:2a:56:f8:b8:c0:c7:a9:48:b8:1a:7a:
         f8:0d:ea:83:a3:aa:08:0d:df:1b:00:49:e0:d4:cf:65:41:c0:
         63:94:38:21:7e:ee:69:be:9b:af:bc:41:ed:ab:7b:53:01:a5:
         a2:b5:51:de:2e:a5:d6:1e:9a:dc:a1:0b:43:bf:70:4f:ed:7b:
         65:72:d0:93:4d:1a:dc:8d:4e:ae:32:16:8c:ea:f3:a4:af:de:
         75:27:bc:5e:5c:94:21:c1:9c:e9:ee:1c:db:06:fe:c2:2e:fc:
         a3:d2:c3:e9:79:15:db:99:87:e0:29:58:8b:91:0c:db:6a:75:
         d1:0d:8a:f3:1d:b0:09:a4:40:bc:d8:4c:d7:f0:dd:e4:d5:cc:
         ca:e6:dc:00:32:69:f6:e1:2a:22:50:49:a9:bf:a6:ea:08:31:
         4c:6d:57:26:c0:04:45:14:ac:4a:46:52:ab:7e:bc:5b:a4:96:
         27:92:1f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:33:05 2026 by rpki-client