Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11FAA34579F3EBB1954A08C59B433CEE002E3A6CCC10B742CF2025314DC6CCA3/0/3230302e32332e36352e302f32342d3234203d3e20323632323437.roa
File:                     3230302e32332e36352e302f32342d3234203d3e20323632323437.roa (raw, json)
Hash identifier:          HoISpRFMxAoDdu0RjIYfiEP6uSyctZ7fiFIncLMgPz0=
Subject key identifier:   42:C2:48:36:F7:81:20:64:E7:3B:AE:71:2C:00:4C:88:3C:DB:C5:62
Certificate issuer:       /CN=F16E4661BF602D11093EDCAF8EA581B6D957E521
Certificate serial:       285CD8EBAA3D7BC4B151DBD0BAD6071098EF436F
Authority key identifier: F1:6E:46:61:BF:60:2D:11:09:3E:DC:AF:8E:A5:81:B6:D9:57:E5:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16E4661BF602D11093EDCAF8EA581B6D957E521.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11FAA34579F3EBB1954A08C59B433CEE002E3A6CCC10B742CF2025314DC6CCA3/0/3230302e32332e36352e302f32342d3234203d3e20323632323437.roa
Signing time:             Sat 06 Jun 2026 03:35:00 +0000
ROA not before:           Sat 06 Jun 2026 03:30:00 +0000
ROA not after:            Sat 05 Jun 2027 03:35:00 +0000
asID:                     262247
IP address blocks:        200.23.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/11FAA34579F3EBB1954A08C59B433CEE002E3A6CCC10B742CF2025314DC6CCA3/0/F16E4661BF602D11093EDCAF8EA581B6D957E521.crl
                          rsync://repository.lacnic.net/rpki/lacnic/11FAA34579F3EBB1954A08C59B433CEE002E3A6CCC10B742CF2025314DC6CCA3/0/F16E4661BF602D11093EDCAF8EA581B6D957E521.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16E4661BF602D11093EDCAF8EA581B6D957E521.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5c:d8:eb:aa:3d:7b:c4:b1:51:db:d0:ba:d6:07:10:98:ef:43:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16E4661BF602D11093EDCAF8EA581B6D957E521
        Validity
            Not Before: Jun  6 03:30:00 2026 GMT
            Not After : Jun  5 03:35:00 2027 GMT
        Subject: CN=42C24836F7812064E73BAE712C004C883CDBC562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c3:42:4b:ff:8f:bc:ed:89:83:92:35:0a:3a:
                    ee:af:41:07:5a:13:5f:fd:a1:d2:6e:9b:c4:7d:39:
                    e6:68:06:07:c6:62:d9:c1:23:fd:1d:6b:19:0b:36:
                    50:1e:12:69:ac:3f:1d:1b:e2:b3:d9:4b:02:8c:c4:
                    8a:aa:a4:e3:c4:c4:5b:c2:d2:32:75:68:85:88:91:
                    e4:e9:d6:b8:ce:96:a6:c8:68:b9:66:f7:e3:2e:06:
                    8f:e7:6e:8b:ca:e6:16:8d:20:9d:4d:2a:63:3d:c7:
                    cf:f0:97:37:30:2d:3c:2e:c3:1b:cd:f1:c0:b7:68:
                    c8:b9:b6:0c:1a:ee:62:85:bb:42:0c:2a:64:29:1e:
                    c3:d5:08:67:1c:c2:19:34:df:f5:1e:7c:3a:d5:28:
                    c2:18:05:90:00:0b:b0:f7:37:ae:7e:8f:aa:a5:8f:
                    d4:c3:a8:17:60:7b:d4:84:1a:7a:08:32:1d:ec:ab:
                    43:f3:d0:89:43:f5:bb:52:e2:e3:78:47:08:58:b7:
                    f5:0b:7c:92:08:84:1f:7c:88:ab:8a:16:aa:d4:a5:
                    80:3d:11:9f:f5:06:88:36:90:19:d0:5a:03:7f:c2:
                    91:83:f1:01:05:11:42:a2:1c:d5:24:54:41:28:48:
                    cf:25:bd:d9:47:47:46:ed:78:87:a9:1f:43:8d:cd:
                    92:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C2:48:36:F7:81:20:64:E7:3B:AE:71:2C:00:4C:88:3C:DB:C5:62
            X509v3 Authority Key Identifier:
                keyid:F1:6E:46:61:BF:60:2D:11:09:3E:DC:AF:8E:A5:81:B6:D9:57:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11FAA34579F3EBB1954A08C59B433CEE002E3A6CCC10B742CF2025314DC6CCA3/0/F16E4661BF602D11093EDCAF8EA581B6D957E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16E4661BF602D11093EDCAF8EA581B6D957E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11FAA34579F3EBB1954A08C59B433CEE002E3A6CCC10B742CF2025314DC6CCA3/0/3230302e32332e36352e302f32342d3234203d3e20323632323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:67:e1:d1:c5:f0:b6:78:a4:03:c9:45:8f:f2:a2:de:f5:82:
         a2:52:8e:51:13:5e:1e:ce:92:22:c6:7f:aa:44:80:bb:ab:99:
         43:3d:97:b4:43:50:3b:0b:1f:d1:43:e4:40:f7:a2:f0:bb:eb:
         ed:49:61:da:b8:00:6b:2d:b9:5a:fb:6d:87:28:97:61:25:88:
         d1:56:89:80:98:2a:20:c0:00:cb:eb:31:b9:e1:95:9c:9a:2e:
         24:41:f7:b8:0b:25:53:38:e6:fa:bc:f5:bc:86:b0:2c:0c:e6:
         bf:1a:59:14:c1:61:6d:1d:f8:e2:50:58:36:f4:bf:83:72:4d:
         8e:f4:cc:f4:6b:13:1a:9a:39:5f:61:0d:ea:c4:ff:db:8e:92:
         3f:3f:44:2a:2d:4f:54:a8:22:1c:70:b8:27:21:9d:cb:ea:74:
         e7:87:6a:91:5c:88:3f:3c:a9:6e:4e:f6:e0:cd:70:d5:9b:13:
         55:1a:20:bb:b1:61:2e:83:f0:00:46:7a:5d:5a:97:00:64:7b:
         29:da:47:b5:97:71:dd:67:51:a3:6c:03:dc:f5:d4:b2:92:8c:
         53:bd:26:fe:7a:e6:ae:05:a0:77:a5:87:9b:63:0a:b9:34:c3:
         71:85:1a:5a:2f:92:81:65:3a:49:c1:ab:3e:1b:54:cb:69:85:
         b7:46:e2:77
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUKFzY66o9e8SxUdvQutYHEJjvQ28wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE2RTQ2NjFCRjYwMkQxMTA5M0VEQ0FGOEVBNTgxQjZE
OTU3RTUyMTAeFw0yNjA2MDYwMzMwMDBaFw0yNzA2MDUwMzM1MDBaMDMxMTAvBgNV
BAMTKDQyQzI0ODM2Rjc4MTIwNjRFNzNCQUU3MTJDMDA0Qzg4M0NEQkM1NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCow0JL/4+87YmDkjUKOu6vQQda
E1/9odJum8R9OeZoBgfGYtnBI/0daxkLNlAeEmmsPx0b4rPZSwKMxIqqpOPExFvC
0jJ1aIWIkeTp1rjOlqbIaLlm9+MuBo/nbovK5haNIJ1NKmM9x8/wlzcwLTwuwxvN
8cC3aMi5tgwa7mKFu0IMKmQpHsPVCGccwhk03/UefDrVKMIYBZAAC7D3N65+j6ql
j9TDqBdge9SEGnoIMh3sq0Pz0IlD9btS4uN4RwhYt/ULfJIIhB98iKuKFqrUpYA9
EZ/1Bog2kBnQWgN/wpGD8QEFEUKiHNUkVEEoSM8lvdlHR0bteIepH0ONzZInAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUQsJINveBIGTnO65xLABMiDzbxWIwHwYDVR0j
BBgwFoAU8W5GYb9gLREJPtyvjqWBttlX5SEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMUZBQTM0NTc5RjNFQkIxOTU0QTA4QzU5QjQzM0NFRTAw
MkUzQTZDQ0MxMEI3NDJDRjIwMjUzMTREQzZDQ0EzLzAvRjE2RTQ2NjFCRjYwMkQx
MTA5M0VEQ0FGOEVBNTgxQjZEOTU3RTUyMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMTZFNDY2MUJGNjAyRDExMDkz
RURDQUY4RUE1ODFCNkQ5NTdFNTIxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTFGQUEzNDU3OUYzRUJCMTk1NEEwOEM1OUI0MzNDRUUwMDJFM0E2Q0ND
MTBCNzQyQ0YyMDI1MzE0REM2Q0NBMy8wLzMyMzAzMDJlMzIzMzJlMzYzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjMyMzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgXQTAN
BgkqhkiG9w0BAQsFAAOCAQEAL2fh0cXwtnikA8lFj/Ki3vWColKOURNeHs6SIsZ/
qkSAu6uZQz2XtENQOwsf0UPkQPei8Lvr7Ulh2rgAay25WvtthyiXYSWI0VaJgJgq
IMAAy+sxueGVnJouJEH3uAslUzjm+rz1vIawLAzmvxpZFMFhbR344lBYNvS/g3JN
jvTM9GsTGpo5X2EN6sT/246SPz9EKi1PVKgiHHC4JyGdy+p054dqkVyIPzypbk72
4M1w1ZsTVRogu7FhLoPwAEZ6XVqXAGR7KdpHtZdx3WdRo2wD3PXUspKMU70m/nrm
rgWgd6WHm2MKuTTDcYUaWi+SgWU6ScGrPhtUy2mFt0bidw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:01:36 2026 by rpki-client