Route Origin Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132342e302f32322d3232203d3e203237393736.roa
File:                     3230302e36332e3132342e302f32322d3232203d3e203237393736.roa (raw, json)
Hash identifier:          PMGyg7ez7HiiEfw0WSMop3h/2+cQXs2ekDomi3TeIZo=
Subject key identifier:   93:1A:A6:35:3F:C7:A3:95:50:FB:E9:D9:78:42:0E:0D:07:F6:4B:99
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       667D17DC13DEA0E572010761492D34A0FCE18169
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132342e302f32322d3232203d3e203237393736.roa
Signing time:             Fri 02 Oct 2026 18:37:59 +0000
ROA not before:           Fri 02 Oct 2026 18:32:59 +0000
ROA not after:            Fri 01 Oct 2027 18:37:59 +0000
asID:                     27976
IP address blocks:        200.63.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 22 Oct 2026 04:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7d:17:dc:13:de:a0:e5:72:01:07:61:49:2d:34:a0:fc:e1:81:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Oct  2 18:32:59 2026 GMT
            Not After : Oct  1 18:37:59 2027 GMT
        Subject: CN=931AA6353FC7A39550FBE9D978420E0D07F64B99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1c:00:bc:3f:e3:0b:ef:2e:43:5d:16:db:61:
                    c8:c7:bc:6a:eb:8e:8a:8d:b7:3c:fa:b3:e0:4c:32:
                    24:02:6b:c0:88:74:b1:55:32:b0:18:66:6b:7f:8c:
                    10:30:39:8f:73:4c:2e:e0:23:12:2e:80:1d:a9:f2:
                    a4:95:05:28:9f:e2:7c:54:7f:69:f0:3a:9e:4e:91:
                    6c:e0:d5:a7:e5:e0:15:40:73:af:ee:15:01:90:16:
                    9b:de:96:e7:7e:0e:19:7b:96:33:4c:f3:bc:14:6a:
                    cd:72:27:93:e6:8a:ae:7a:e2:61:06:e1:f9:f7:ed:
                    8b:4e:1f:c9:3e:30:4d:3e:ac:65:11:e5:5b:45:c6:
                    10:40:d4:29:ed:cb:c5:c1:56:e4:5b:62:ff:3d:47:
                    69:01:0f:50:c5:e6:73:c7:8f:cc:2f:43:df:67:ee:
                    58:55:89:fc:a8:4d:26:05:25:f8:a4:e7:df:4f:ee:
                    5b:1a:be:1d:79:39:85:29:fb:2a:59:df:40:92:e6:
                    8a:83:8c:a3:df:84:22:eb:20:26:69:ec:34:be:97:
                    86:d9:4f:54:84:b7:6b:ab:1d:15:83:d2:f3:33:a1:
                    3c:d4:f1:79:0b:48:e9:68:30:59:f0:fe:aa:e6:e0:
                    8c:65:86:2b:dc:9f:81:56:29:ef:f1:c2:9f:fc:47:
                    cb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1A:A6:35:3F:C7:A3:95:50:FB:E9:D9:78:42:0E:0D:07:F6:4B:99
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3230302e36332e3132342e302f32322d3232203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:a9:c2:4a:9e:48:ca:d7:2e:08:fa:a8:af:95:0b:a7:fa:2f:
         16:85:85:1f:ca:21:3e:98:b2:dc:c5:6d:d3:83:88:77:e1:58:
         d1:0f:aa:fe:2e:9b:70:21:af:3a:13:05:d7:ad:cd:18:49:70:
         46:a4:93:2f:cc:3b:bd:8e:7c:84:4c:72:c6:aa:bf:19:9a:05:
         5b:4b:d5:4b:5a:b0:c9:48:e4:78:d0:5b:b3:ee:38:69:e1:b8:
         aa:be:52:34:f7:08:86:af:ae:00:1a:c6:7f:d7:e6:c8:b2:1a:
         31:8f:74:ec:67:e9:4d:f7:6e:cb:a5:af:54:be:60:54:13:78:
         8d:a1:77:d2:57:a4:fc:06:1b:85:3c:ac:bf:48:89:68:cc:57:
         8d:61:89:50:cc:26:f3:7d:bc:30:39:38:b3:86:9d:ad:4e:8a:
         37:18:dd:f6:89:8e:e4:89:47:b9:34:ee:3e:63:30:1e:50:85:
         dc:23:ac:0a:0e:ec:f5:00:e0:6c:a2:1b:88:41:7d:03:68:b5:
         c4:37:5b:15:e4:27:0e:41:d8:8f:a5:8e:4f:3a:30:22:61:5b:
         8c:c8:63:98:4a:12:28:60:65:c0:2a:e6:cc:2b:30:65:f3:bd:
         9e:10:32:bb:18:b1:26:f1:4f:b6:bd:ba:97:67:28:3e:64:dd:
         d7:31:eb:11
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUZn0X3BPeoOVyAQdhSS00oPzhgWkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRFNDczMjY3QzdFRDhEQkZDQ0QyMDlBQzA5QTFDQTdC
ODRBN0MzOTAeFw0yNjEwMDIxODMyNTlaFw0yNzEwMDExODM3NTlaMDMxMTAvBgNV
BAMTKDkzMUFBNjM1M0ZDN0EzOTU1MEZCRTlEOTc4NDIwRTBEMDdGNjRCOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClHAC8P+ML7y5DXRbbYcjHvGrr
joqNtzz6s+BMMiQCa8CIdLFVMrAYZmt/jBAwOY9zTC7gIxIugB2p8qSVBSif4nxU
f2nwOp5OkWzg1afl4BVAc6/uFQGQFpvelud+Dhl7ljNM87wUas1yJ5Pmiq564mEG
4fn37YtOH8k+ME0+rGUR5VtFxhBA1Cnty8XBVuRbYv89R2kBD1DF5nPHj8wvQ99n
7lhVifyoTSYFJfik599P7lsavh15OYUp+ypZ30CS5oqDjKPfhCLrICZp7DS+l4bZ
T1SEt2urHRWD0vMzoTzU8XkLSOloMFnw/qrm4Ixlhivcn4FWKe/xwp/8R8uTAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUkxqmNT/Ho5VQ++nZeEIODQf2S5kwHwYDVR0j
BBgwFoAUxORzJnx+2Nv8zSCawJocp7hKfDkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzJEOUIxRTYxNkJGQzYwMzBGM0RBMUQ2RjIwQjZCNDE0
MzE5QThDREQ0NEVFNjQyMEI2RkZFNzBENjVDNUI5LzAvQzRFNDczMjY3QzdFRDhE
QkZDQ0QyMDlBQzA5QTFDQTdCODRBN0MzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNEU0NzMyNjdDN0VEOERCRkND
RDIwOUFDMDlBMUNBN0I4NEE3QzM5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUMyRDlCMUU2MTZCRkM2MDMwRjNEQTFENkYyMEI2QjQxNDMxOUE4Q0RE
NDRFRTY0MjBCNkZGRTcwRDY1QzVCOS8wLzMyMzAzMDJlMzYzMzJlMzEzMjM0MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzM5MzczNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsg/fDAN
BgkqhkiG9w0BAQsFAAOCAQEAfanCSp5IytcuCPqor5ULp/ovFoWFH8ohPpiy3MVt
04OId+FY0Q+q/i6bcCGvOhMF163NGElwRqSTL8w7vY58hExyxqq/GZoFW0vVS1qw
yUjkeNBbs+44aeG4qr5SNPcIhq+uABrGf9fmyLIaMY907GfpTfduy6WvVL5gVBN4
jaF30lek/AYbhTysv0iJaMxXjWGJUMwm8328MDk4s4adrU6KNxjd9omO5IlHuTTu
PmMwHlCF3COsCg7s9QDgbKIbiEF9A2i1xDdbFeQnDkHYj6WOTzowImFbjMhjmEoS
KGBlwCrmzCswZfO9nhAyuxixJvFPtr26l2coPmTd1zHrEQ==
-----END CERTIFICATE-----
Generated at Sun Oct 18 09:23:30 2026 by rpki-client