Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230302e312e3137352e302f32342d3234203d3e203139353531.roa
File:                     3230302e312e3137352e302f32342d3234203d3e203139353531.roa (raw, json)
Hash identifier:          6J4mXALD5o4WBzZW7+sv01kkvV4QXVN3rXfFqo5QQ1k=
Subject key identifier:   79:FF:A5:86:43:FB:3C:BD:55:68:E8:61:A6:00:C9:3F:05:57:57:AB
Certificate issuer:       /CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
Certificate serial:       3821ABFD21626D3DEC90F984AE65AE8AE9686819
Authority key identifier: 14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230302e312e3137352e302f32342d3234203d3e203139353531.roa
Signing time:             Thu 09 Apr 2026 20:38:16 +0000
ROA not before:           Thu 09 Apr 2026 20:33:16 +0000
ROA not after:            Thu 08 Apr 2027 20:38:16 +0000
asID:                     19551
IP address blocks:        200.1.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 15:38:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:21:ab:fd:21:62:6d:3d:ec:90:f9:84:ae:65:ae:8a:e9:68:68:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
        Validity
            Not Before: Apr  9 20:33:16 2026 GMT
            Not After : Apr  8 20:38:16 2027 GMT
        Subject: CN=79FFA58643FB3CBD5568E861A600C93F055757AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:fc:03:a4:71:10:16:14:92:3b:60:c8:7e:
                    14:f3:7a:16:f2:2f:21:09:2f:5b:7e:ae:88:61:29:
                    77:51:12:c0:d5:08:4d:32:93:ad:1f:3a:85:d8:85:
                    01:80:a3:76:c1:8f:bd:b8:ba:8b:8a:02:f5:1c:8d:
                    53:e7:0b:94:b5:d1:9c:16:98:bd:3b:21:fe:e3:37:
                    ae:3b:0d:a9:08:e8:d7:5a:9f:9f:a3:77:de:77:42:
                    99:f1:d2:5b:38:22:22:ca:20:d1:8c:0d:74:6c:29:
                    2c:46:17:50:66:4f:87:ea:df:05:83:7f:25:29:d9:
                    78:37:3c:26:6b:19:f5:5d:0e:09:e7:11:d5:fe:6b:
                    7b:4f:c1:55:bb:38:f0:c8:44:0d:18:41:80:08:bf:
                    1c:1d:f1:95:27:d9:70:d9:9d:76:6b:45:29:f6:da:
                    bb:9a:6c:00:88:dd:47:d1:7c:52:2f:0a:e5:84:f2:
                    21:3c:41:d3:dd:8f:a8:2b:aa:ec:3f:87:4f:c6:e5:
                    e2:4d:b4:65:3e:69:95:36:17:99:3d:fc:de:16:0e:
                    3b:0e:a7:a0:c7:6c:73:f8:2f:e6:49:b0:46:f2:8c:
                    8c:c4:e3:4f:81:da:f0:4a:75:cf:f6:19:62:7c:99:
                    b2:8a:24:54:c1:ad:af:61:31:33:79:2b:eb:dd:4d:
                    90:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FF:A5:86:43:FB:3C:BD:55:68:E8:61:A6:00:C9:3F:05:57:57:AB
            X509v3 Authority Key Identifier:
                keyid:14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230302e312e3137352e302f32342d3234203d3e203139353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:db:1f:15:d9:45:96:f2:1b:f8:ae:3c:91:5f:3e:89:dc:ea:
         57:b7:a6:5c:5d:ec:3d:7e:a1:18:5a:f9:f2:4a:0d:7e:ca:88:
         b9:a5:d2:a9:d9:5e:9d:82:7c:39:a5:bf:b6:54:a4:7b:02:a5:
         7a:5f:c8:f7:d6:e8:a7:4a:16:49:93:d9:f9:a5:8a:7b:15:0a:
         82:a6:ef:97:40:eb:a2:51:30:f4:3d:8e:f5:b9:b3:0a:ae:4b:
         6c:af:8c:20:87:ae:54:74:4b:4d:57:e6:1d:a3:94:56:b7:34:
         d6:5f:db:3a:c2:54:f8:0d:d3:13:a8:dd:fa:06:a9:15:ff:96:
         cd:b3:4d:30:38:26:79:f7:65:ba:f2:56:23:af:58:43:ce:73:
         78:d1:6b:05:e7:38:8e:20:94:84:ac:de:52:6d:18:f7:54:f5:
         4f:44:01:cc:f0:94:42:a7:be:67:e6:ed:8e:14:88:19:07:a8:
         37:3d:e0:45:18:5d:7b:95:60:ca:fc:3a:f8:4f:b0:7a:a1:e0:
         15:c8:c9:16:3b:9b:4b:bc:cf:b5:4d:60:41:da:f1:d1:fa:f7:
         b2:8e:20:aa:c1:b7:67:5a:27:96:30:ca:31:19:39:24:d4:6c:
         29:82:04:13:4d:33:e5:59:15:4a:5a:6c:f2:ef:bb:68:72:00:
         25:37:49:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:10:13 2026 by rpki-client